Web Penetration Testing with Kali Linux 2.0, Second Edition
By :
Web Penetration Testing with Kali Linux 2.0, Second Edition
By:
Overview of this book
Kali Linux 2.0 is the new generation of the industry-leading BackTrack Linux penetration testing and security auditing Linux distribution. It contains several hundred tools aimed at various information security tasks such as penetration testing, forensics, and reverse engineering.
At the beginning of the book, you will be introduced to the concepts of hacking and penetration testing and will get to know about the tools used in Kali Linux 2.0 that relate to web application hacking. Then, you will gain a deep understanding of SQL and command injection flaws and ways to exploit the flaws. Moving on, you will get to know more about scripting and input validation flaws, AJAX, and the security issues related to AJAX.
At the end of the book, you will use an automated technique called fuzzing to be able to identify flaws in a web application. Finally, you will understand the web application vulnerabilities and the ways in which they can be exploited using the tools in Kali Linux 2.0.
Table of Contents (12 chapters)
Preface
Free Chapter
1. Introduction to Penetration Testing and Web Applications
2. Setting up Your Lab with Kali Linux
3. Reconnaissance and Profiling the Web Server
4. Major Flaws in Web Applications
5. Attacking the Server Using Injection-based Flaws
6. Exploiting Clients Using XSS and CSRF Flaws
7. Attacking SSL-based Websites
8. Exploiting the Client Using Attack Frameworks
9. AJAX and Web Services – Security Issues
10. Fuzzing Web Applications
Index
How would like to rate this book
Customer Reviews
