The web application hacker's handbook : finding and exploiting security flaws - Stuttard, Dafydd, 1972-; Pinto, Marcus, 1978- (Indianapolis, IN : Wiley ; Chichester : John Wiley distributor, 2011)
Web application (in) security -- Core defense mechanisms -- Web application technologies -- Mapping the application -- Bypassing client-side controls -- Attacking authentication -- Attacking session management -- Attacking access controls -- Attacking data stores -- Attacking back-end components -- Attacking application logic -- Attacking users : cross-site scripting -- Attacking users : other techniques -- Automating customized attacks -- Exploiting information disclosure -- Attacking native compiled applications -- Attacking application architecture -- Attacking the application server -- Finding vulnerabilities in source code -- A web application hacker's toolkit -- A web application hacker's methodology
Previous edition: 2008
Includes bibliographical references and index
1
Keywords: Computer security; Internet -- Security measures