The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws Web应用黑客手册

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
分享
扫描下方二维码分享到微信
打开微信,点击右上角”+“,
使用”扫一扫“即可将网页分享到朋友圈。
作者: (戴维德·斯图塔德) , (马克斯·平托)
出版社: Wiley
2011-02
版次: 1
ISBN: 9780470170779
定价: 361.00
装帧: 平装
开本: 大32开
纸张: 胶版纸
页数: 768页
正文语种: 英语
1人买过
  • Thisbookisapracticalguidetodiscoveringandexploitingsecurityflawsinwebapplications.Theauthorsexplaineachcategoryofvulnerabilityusingreal-worldexamples,screenshotsandcodeextracts.Thebookisextremelypracticalinfocus,anddescribesindetailthestepsinvolvedindetectingandexploitingeachkindofsecurityweaknessfoundwithinavarietyofapplicationssuchasonlinebanking,e-commerceandotherwebapplications.Thetopicscoveredincludebypassingloginmechanisms,injectingcode,exploitinglogicflawsandcompromisingotherusers.Becauseeverywebapplicationisdifferent,attackingthementailsbringingtobearvariousgeneralprinciples,techniquesandexperienceinanimaginativeway.Themostsuccessfulhackersgobeyondthis,andfindwaystoautomatetheirbespokeattacks.Thishandbookdescribesaprovenmethodologythatcombinesthevirtuesofhumanintelligenceandcomputerizedbruteforce,oftenwithdevastatingresults.Theauthorsareprofessionalpenetrationtesterswhohavebeeninvolvedinwebapplicationsecurityfornearlyadecade.TheyhavepresentedtrainingcoursesattheBlackHatsecurityconferencesthroughouttheworld.UnderthealiasPortSwigger,DafydddevelopedthepopularBurpSuiteofwebapplicationhacktools. DafyddStuttardisaPrincipalSecurityConsultantatNextGenerationSecuritySoftware,whereheleadsthewebapplicationsecuritycompetency.Hehasnineyears'experienceinsecurityconsultingandspecializesinthepenetrationtestingofwebapplicationsandcompiledsoftware.Dafyddhasworkedwithnumerousbanks,retailers,andotherenterprisestohelpsecuretheirwebapplications,andhasprovidedsecurityconsultingtoseveralsoftwaremanufacturersandgovernmentstohelpsecuretheircompiledsoftware.Dafyddisanaccomplishedprogrammerinseverallanguages,andhisinterestsincludedevelopingtoolstofacilitateallkindsofsoftwaresecuritytesting.DafyddhasdevelopedandpresentedtrainingcoursesattheBlackHatsecurityconferencesaroundtheworld.UnderthealiasPortSwigger,DafyddcreatedthepopularBurpSuiteofwebapplicationhackingtools.Dafyddholdsmaster'sanddoctoratedegreesinphilosophyfromtheUniversityofOxford.



    MarcusPintoisaPrincipalSecurityConsultantatNextGenerationSecuritySoftware,whereheleadsthedatabasecompetencydevelopmentteam,andhasleadthedevelopmentofNGS'primarytrainingcourses.Hehaseightyears'experienceinsecurityconsultingandspecializesinpenetrationtestingofwebapplicationsandsupportingarchitectures.Marcushasworkedwithnumerousbanks,retailers,andotherenterprisestohelpsecuretheirwebapplications,andhasprovidedsecurityconsultingtothedevelopmentprojectsofseveralsecurity-criticalapplications.Hehasworkedextensivelywithlarge-scalewebapplicationdeploymentsinthefinancialservicesindustry.MarcushasdevelopedandpresenteddatabaseandwebapplicationtrainingcoursesattheBlackHatandothersecurityconferencesaroundtheworld.Marcusholdsamaster'sdegreeinphysicsfromtheUniversityofCambridge.
  • 内容简介:
    Thisbookisapracticalguidetodiscoveringandexploitingsecurityflawsinwebapplications.Theauthorsexplaineachcategoryofvulnerabilityusingreal-worldexamples,screenshotsandcodeextracts.Thebookisextremelypracticalinfocus,anddescribesindetailthestepsinvolvedindetectingandexploitingeachkindofsecurityweaknessfoundwithinavarietyofapplicationssuchasonlinebanking,e-commerceandotherwebapplications.Thetopicscoveredincludebypassingloginmechanisms,injectingcode,exploitinglogicflawsandcompromisingotherusers.Becauseeverywebapplicationisdifferent,attackingthementailsbringingtobearvariousgeneralprinciples,techniquesandexperienceinanimaginativeway.Themostsuccessfulhackersgobeyondthis,andfindwaystoautomatetheirbespokeattacks.Thishandbookdescribesaprovenmethodologythatcombinesthevirtuesofhumanintelligenceandcomputerizedbruteforce,oftenwithdevastatingresults.Theauthorsareprofessionalpenetrationtesterswhohavebeeninvolvedinwebapplicationsecurityfornearlyadecade.TheyhavepresentedtrainingcoursesattheBlackHatsecurityconferencesthroughouttheworld.UnderthealiasPortSwigger,DafydddevelopedthepopularBurpSuiteofwebapplicationhacktools.
  • 作者简介:
    DafyddStuttardisaPrincipalSecurityConsultantatNextGenerationSecuritySoftware,whereheleadsthewebapplicationsecuritycompetency.Hehasnineyears'experienceinsecurityconsultingandspecializesinthepenetrationtestingofwebapplicationsandcompiledsoftware.Dafyddhasworkedwithnumerousbanks,retailers,andotherenterprisestohelpsecuretheirwebapplications,andhasprovidedsecurityconsultingtoseveralsoftwaremanufacturersandgovernmentstohelpsecuretheircompiledsoftware.Dafyddisanaccomplishedprogrammerinseverallanguages,andhisinterestsincludedevelopingtoolstofacilitateallkindsofsoftwaresecuritytesting.DafyddhasdevelopedandpresentedtrainingcoursesattheBlackHatsecurityconferencesaroundtheworld.UnderthealiasPortSwigger,DafyddcreatedthepopularBurpSuiteofwebapplicationhackingtools.Dafyddholdsmaster'sanddoctoratedegreesinphilosophyfromtheUniversityofOxford.



    MarcusPintoisaPrincipalSecurityConsultantatNextGenerationSecuritySoftware,whereheleadsthedatabasecompetencydevelopmentteam,andhasleadthedevelopmentofNGS'primarytrainingcourses.Hehaseightyears'experienceinsecurityconsultingandspecializesinpenetrationtestingofwebapplicationsandsupportingarchitectures.Marcushasworkedwithnumerousbanks,retailers,andotherenterprisestohelpsecuretheirwebapplications,andhasprovidedsecurityconsultingtothedevelopmentprojectsofseveralsecurity-criticalapplications.Hehasworkedextensivelywithlarge-scalewebapplicationdeploymentsinthefinancialservicesindustry.MarcushasdevelopedandpresenteddatabaseandwebapplicationtrainingcoursesattheBlackHatandothersecurityconferencesaroundtheworld.Marcusholdsamaster'sdegreeinphysicsfromtheUniversityofCambridge.
查看详情
相关图书 / 更多
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Black Book of Buried Secrets
Riordan;Rick
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
Three Little Pigs 三只小猪(精装本)—小学英语戏剧绘本
[澳]詹姆斯·宾 (澳)吉莉安·法拉蒂
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Technique of parents innovation and independent parents cultivation in sugarcane cross breeding
吴才文
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Hongqiao Story: A Record of Whole-process People’s Democracy Practices in Local Communities
上海市长宁区虹桥街道全过程人民民主基层实践基地 作者;中译语通信息科技(上海)有限公司 译;上海人大全过程人民民主研习实践基地
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Ecological Relations of the Vegetation on the Sand Dunes of Lake Michigan(密歇
Henry Chandler Cowle
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Laws of the People\'s Republic of China (2020)
全国人大常委会法制工作委员会
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Ugly Duckling 丑小鸭 (精装本)—小学英语戏剧绘本
[澳]詹姆斯 · 宾 (澳)吉莉安 · 法拉蒂
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Computer and the Brain 计算机与人脑
John von Neumann约翰·冯
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Last Firehawk 2 :The Crystal Caverns:火鹰传奇
Katrina Charman
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Real Thief
William Steig
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Wizard of Oz 绿野仙踪(精装本)(小学英语戏剧绘本)
[澳]詹姆斯·宾 (澳)吉莉安·法拉蒂
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Pied Piper of Hamelin 花衣魔笛手(精装本)(小学英语戏剧绘本)
[澳]詹姆斯·宾 (澳)吉莉安·法拉蒂
您可能感兴趣 / 更多
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
管理学原理(英文版·原书第10版)
Daft 著;[美]理查德L.达夫特(Richard、L.、高增安、张璐、马永红 译
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
The Web Application Hacker's Handbook 黑客攻防技术宝典:Web实战篇
Dafydd、Marcus Pinto 著
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
Creative Paper Jewelry 创意纸首饰: 耳环,吊坠,珠子和胸针
Dafna Yarom 著
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
LivingwithHearingDifficulties:Theprocessofenablement
Dafydd Stephens 著
The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws  Web应用黑客手册
Children and Television: A Global Perspective
Dafna Lemish 著