A description and analysis of the vulnerabilities caused by programming errors in Web applications, this book is written from both from the attacker's and security specialist's perspective. Covered is detecting, investigating, exploiting, and eliminating vulnerabilities in Web applications as well as errors such as PHP source code injection, SQL injection, and XSS. The most common vulnerabilities in PHP and Perl scripts and methods of exploiting these weaknesses are described, information on writing intersite scripts and secure systems for the hosted sites, creating secure authorization systems, and bypassing authorization. Uncovered is how attackers can benefit from the hosted target and why an apparently normal-working application might be vulnerable.
Book Description
Editorial Reviews
About the Author
Marsel Nizamutdinov is an operations research and system analysis specialist.
Product Details
Would you like to update product info or give feedback on images?
|
Customer Reviews
|
Share your thoughts with other customers:
|
||||||||||||||||||||||
|
Most Helpful Customer Reviews
5 of 6 people found the following review helpful:
4.0 out of 5 stars
two sides of the fence,
By
This review is from: Hacker Web Exploitation Uncovered (Paperback)
Black hats and white hats might both be attracted by this book. It is not written for the casual reader. You should already be a skilled programmer, and well versed in HTML and running a web server.
The gist of the book is essentially about breaking into a website. It describes common weaknesses in the writing of webpages. If these hook up to a back end SQL database, and they accept user input, then there might be a SQL injection attack. Where the attacker sits at a browser, goes to the vulnerable page, and tries to present text input that has appended SQL commands that she hopes will be executed by the database. Relatively rare, but dangerous when it happens. Then there are Perl and PHP scripting attacks. Both languages are vulnerable to these. The book also explains cross site scripting [XSS]. Ingenious and nefarious attacks. If you are a sysadmin and you've never encountered these ideas in detail before, the book can be an eyeopener.
5.0 out of 5 stars
Review,
By Johnny (California) - See all my reviews
This review is from: Hacker Web Exploitation Uncovered (Paperback)
I received the book in few days and in good condition. In my opinion, you can trust this seller.
Share your thoughts with other customers: Create your own review
|
|
Tag this product(What's this?)Think of a tag as a keyword or label you consider is strongly related to this product.
Tags will help all customers organize and find favorite items. |
Sell a Digital Version of This Book in the Kindle Store
If you are a publisher or author and hold the digital rights to a book, you can sell a digital version of it in our Kindle Store.
Learn more
Customer Discussions
|
This product's forum
Active discussions in related forums
Search Customer Discussions
|
Related forums
|
