Hack the planet
Web applications are everywhere, and they're insecure. Banks,retailers, and others have deployed millions of applications thatare full of holes, allowing attackers to steal personal data, carryout fraud, and compromise other systems. This innovative book showsyou how they do it.
This is hands-on stuff. The authors, recognized experts insecurity testing, take a practical approach, showing you thedetailed steps involved in finding and exploiting security flaws inweb applications. You will learn to:
- Defeat an application's core defense mechanisms and gainunauthorized access, even to the most apparently secureapplications
Map attack surfaces and recognize potential entry points
Break client-side controls implemented within HTML, Java®,ActiveX®, and Flash®
Uncover subtle logic flaws that leave applications exposed
Use automation to speed up your attacks, with devastatingresults
Delve into source code and spot common vulnerabilities inlanguages like C#, Java, and PHP
Know your enemy
To defend an application, you must first know its weaknesses. Ifyou design or maintain web applications, this book will arm youwith the protective measures you need to prevent all of the attacksdescribed. If you're a developer, it will show you exactly whereand how to strengthen your defenses.
Additional resources online atwww.wiley.com/go/webhacker
- Source code for scripts in this book
Links to tools and resources
Checklist of tasks involved in attacking applications
Answers to the questions posed in each chapter
A hacking challenge prepared by the authors
"If you have an interest in web application security, I wouldhighly recommend picking up a copy of this book, especially ifyou’re interested in being able to audit applications forvulnerabilities".
—Robert Wesley McGrew,