Description
By: Peter Yaworski
Learn how people break websites and how you can, too.
Real-World Bug Hunting is the premier field guide to finding software bugs. Whether you're a cyber-security beginner who wants to make the internet safer or a seasoned developer who wants to write secure code, ethical hacker Peter Yaworski will show you how it's done.
You'll learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery. Using real-life case studies of rewarded vulnerabilities from applications like Twitter, Facebook, Google, and Uber, you'll see how hackers manage to invoke race conditions while transferring money, use URL parameter to cause users to like unintended tweets, and more.
Each chapter introduces a vulnerability type accompanied by a series of actual reported bug bounties. The book's collection of tales from the field will teach you how attackers trick users into giving away their sensitive information and how sites may reveal their vulnerabilities to savvy users. You'll even learn how you could turn your challenging new hobby into a successful career. You'll learn:
How the internet works and basic web hacking concepts How attackers compromise websites How to identify functionality commonly associated with vulnerabilities How to find bug bounty programs and submit effective vulnerability reports
Real-World Bug Hunting is a fascinating soup-to-nuts primer on web security vulnerabilities, filled with stories from the trenches and practical wisdom. With your new understanding of site security and weaknesses, you can help make the web a safer place--and profit while you're at it.
Learn how people break websites and how you can, too.
Real-World Bug Hunting is the premier field guide to finding software bugs. Whether you're a cyber-security beginner who wants to make the internet safer or a seasoned developer who wants to write secure code, ethical hacker Peter Yaworski will show you how it's done.
You'll learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery. Using real-life case studies of rewarded vulnerabilities from applications like Twitter, Facebook, Google, and Uber, you'll see how hackers manage to invoke race conditions while transferring money, use URL parameter to cause users to like unintended tweets, and more.
Each chapter introduces a vulnerability type accompanied by a series of actual reported bug bounties. The book's collection of tales from the field will teach you how attackers trick users into giving away their sensitive information and how sites may reveal their vulnerabilities to savvy users. You'll even learn how you could turn your challenging new hobby into a successful career. You'll learn:
Real-World Bug Hunting is a fascinating soup-to-nuts primer on web security vulnerabilities, filled with stories from the trenches and practical wisdom. With your new understanding of site security and weaknesses, you can help make the web a safer place--and profit while you're at it.
You may also like
熱銷中 Top Trending
Dragon Masters #27 (正版) Haunting of the Ghost Dragon (Branches) (Tracey West)
Sale priceHK$47.00
Regular priceHK$69.00
In stock
Percy Jackson and the Olympians: Wrath of the Triple Goddess International Edition
Sale priceHK$92.00
Regular priceHK$140.00
In stock
Billy and the Mini Monsters #16 Monsters at Easter
Sale priceHK$46.00
Regular priceHK$84.00
In stock
Harry Potter (正版) Children #1-7 Collection (7 Books)(J.K. Rowling)(printed in UK)
Sale priceFrom HK$459.00
Regular priceHK$799.00
In stock
My Weird School Christmas Set (3 Books) (Dan Gutman)
Sale priceHK$99.00
Regular priceHK$169.00
In stock
Harry Potter (正版)(#2) and the Chamber of Secrets MinaLima Edition (Hardback) (J.K. Rowling) (UK ver.)
Sale priceHK$268.99
Regular priceHK$385.00
In stock
Sing Along With Me! Fun Bundle (Board books with QR Code)(Nosy Crow)
Sale priceFrom HK$365.00
Regular priceHK$686.00
In stock