Web Penetration Testing: Second Edition

by Radhi Shatob

Web Penetration testing second edition combines theoretical and practical knowledge to teach readers about Web applications and API penetration testing. This book is intended for beginners of web penetration testing, but it also covers advanced topics such as API penetration testing and the different technologies involved in Web application design. This book also covers the vulnerabilities of websites and databases, how to exploit them to gain access, as well as how to protect against these vulnerabilities. This guide provides an in-depth learning experience with both theoretical and practical aspects. Included are 39 step-by-step exercises that cover many web application hacking tools and techniques in the following • Website information gathering tools and techniques. • DNS hijacking and DNS redirection. • Web Application Firewalls WAF. • Website vulnerability scanners such as Nikto, Burp Suite , OWASP-ZAP and WPScan. • Input-output Manipulation such as SQL injection, Cross site scripting XSS, Path Traversal and Cross Site Request Forgery CSRF. • Authentication and Authorization attacks using Burp Suite and Hydra. • Session Attacks. • API security and API Penetration testing. • Using Postman tool for API analysis and manipulating.

443 pages, Kindle Edition

Published May 8, 2021