Ethical Hacker?s Penetration Testing Guide Samir Kumar Rakshit
- Autor:
- Samir Kumar Rakshit
- Wydawnictwo:
- BPB Publications
- Ocena:
- Stron:
- 472
- Dostępne formaty:
-
ePubMobi
Zostało Ci
na świąteczne zamówienie
opcje wysyłki »
opcje wysyłki »
Opis
książki
:
Ethical Hacker?s Penetration Testing Guide
Discover security posture, vulnerabilities, and blind spots ahead of the threat actor
Key Features
Includes illustrations and real-world examples of pentesting web applications, REST APIs, thick clients, mobile applications, and wireless networks.
Covers numerous techniques such as Fuzzing (FFuF), Dynamic Scanning, Secure Code Review, and bypass testing.
Practical application of Nmap, Metasploit, SQLmap, OWASP ZAP, Wireshark, and Kali Linux. Description
The 'Ethical Hacker's Penetration Testing Guide' is a hands-on guide that will take you from the fundamentals of pen testing to advanced security testing techniques. This book extensively uses popular pen testing tools such as Nmap, Burp Suite, Metasploit, SQLmap, OWASP ZAP, and Kali Linux.
A detailed analysis of pentesting strategies for discovering OWASP top 10 vulnerabilities, such as cross-site scripting (XSS), SQL Injection, XXE, file upload vulnerabilities, etc., are explained. It provides a hands-on demonstration of pentest approaches for thick client applications, mobile applications (Android), network services, and wireless networks. Other techniques such as Fuzzing, Dynamic Scanning (DAST), and so on are also demonstrated. Security logging, harmful activity monitoring, and pentesting for sensitive data are also included in the book. The book also covers web security automation with the help of writing effective python scripts.
Through a series of live demonstrations and real-world use cases, you will learn how to break applications to expose security flaws, detect the vulnerability, and exploit it appropriately. Throughout the book, you will learn how to identify security risks, as well as a few modern cybersecurity approaches and popular pentesting tools. What you will learn
Expose the OWASP top ten vulnerabilities, fuzzing, and dynamic scanning.
Get well versed with various pentesting tools for web, mobile, and wireless pentesting.
Investigate hidden vulnerabilities to safeguard critical data and application components.
Implement security logging, application monitoring, and secure coding.
Learn about various protocols, pentesting tools, and ethical hacking methods. Who this book is for
This book is intended for pen testers, ethical hackers, security analysts, cyber professionals, security consultants, and anybody interested in learning about penetration testing, tools, and methodologies. Knowing concepts of penetration testing is preferable but not required. Table of Contents
1. Overview of Web and Related Technologies and Understanding the Application
2. Web Penetration Testing- Through Code Review
3. Web Penetration Testing-Injection Attacks
4. Fuzzing, Dynamic scanning of REST API and Web Application
5. Web Penetration Testing- Unvalidated Redirects/Forwards, SSRF
6. Pentesting for Authentication, Authorization Bypass, and Business Logic Flaws
7. Pentesting for Sensitive Data, Vulnerable Components, Security Monitoring
8. Exploiting File Upload Functionality and XXE Attack
9. Web Penetration Testing: Thick Client
10. Introduction to Network Pentesting
11. Introduction to Wireless Pentesting
12. Penetration Testing-Mobile App
13. Security Automation for Web Pentest
14. Setting up Pentest Lab
Includes illustrations and real-world examples of pentesting web applications, REST APIs, thick clients, mobile applications, and wireless networks.
Covers numerous techniques such as Fuzzing (FFuF), Dynamic Scanning, Secure Code Review, and bypass testing.
Practical application of Nmap, Metasploit, SQLmap, OWASP ZAP, Wireshark, and Kali Linux. Description
The 'Ethical Hacker's Penetration Testing Guide' is a hands-on guide that will take you from the fundamentals of pen testing to advanced security testing techniques. This book extensively uses popular pen testing tools such as Nmap, Burp Suite, Metasploit, SQLmap, OWASP ZAP, and Kali Linux.
A detailed analysis of pentesting strategies for discovering OWASP top 10 vulnerabilities, such as cross-site scripting (XSS), SQL Injection, XXE, file upload vulnerabilities, etc., are explained. It provides a hands-on demonstration of pentest approaches for thick client applications, mobile applications (Android), network services, and wireless networks. Other techniques such as Fuzzing, Dynamic Scanning (DAST), and so on are also demonstrated. Security logging, harmful activity monitoring, and pentesting for sensitive data are also included in the book. The book also covers web security automation with the help of writing effective python scripts.
Through a series of live demonstrations and real-world use cases, you will learn how to break applications to expose security flaws, detect the vulnerability, and exploit it appropriately. Throughout the book, you will learn how to identify security risks, as well as a few modern cybersecurity approaches and popular pentesting tools. What you will learn
Expose the OWASP top ten vulnerabilities, fuzzing, and dynamic scanning.
Get well versed with various pentesting tools for web, mobile, and wireless pentesting.
Investigate hidden vulnerabilities to safeguard critical data and application components.
Implement security logging, application monitoring, and secure coding.
Learn about various protocols, pentesting tools, and ethical hacking methods. Who this book is for
This book is intended for pen testers, ethical hackers, security analysts, cyber professionals, security consultants, and anybody interested in learning about penetration testing, tools, and methodologies. Knowing concepts of penetration testing is preferable but not required. Table of Contents
1. Overview of Web and Related Technologies and Understanding the Application
2. Web Penetration Testing- Through Code Review
3. Web Penetration Testing-Injection Attacks
4. Fuzzing, Dynamic scanning of REST API and Web Application
5. Web Penetration Testing- Unvalidated Redirects/Forwards, SSRF
6. Pentesting for Authentication, Authorization Bypass, and Business Logic Flaws
7. Pentesting for Sensitive Data, Vulnerable Components, Security Monitoring
8. Exploiting File Upload Functionality and XXE Attack
9. Web Penetration Testing: Thick Client
10. Introduction to Network Pentesting
11. Introduction to Wireless Pentesting
12. Penetration Testing-Mobile App
13. Security Automation for Web Pentest
14. Setting up Pentest Lab
Szczegóły książki
- ISBN Ebooka:
- 978-93-555-1215-4, 9789355512154
- Data wydania ebooka :
-
2024-12-18
Data wydania ebooka często jest dniem wprowadzenia tytułu do sprzedaży i może nie być równoznaczna
z datą wydania książki papierowej. Dodatkowe informacje możesz znaleźć w darmowym fragmencie.
Jeśli masz wątpliwości skontaktuj się z nami sklep@ebookpoint.pl.
- Język publikacji:
- 1
- Rozmiar pliku ePub:
- 15.2MB
- Rozmiar pliku Mobi:
- 15.2MB
Dzięki opcji "Druk na żądanie" do sprzedaży wracają tytuły Grupy Helion, które cieszyły sie dużym zainteresowaniem, a których nakład został wyprzedany.
Dla naszych Czytelników wydrukowaliśmy dodatkową pulę egzemplarzy w technice druku cyfrowego.
Co powinieneś wiedzieć o usłudze "Druk na żądanie":
- usługa obejmuje tylko widoczną poniżej listę tytułów, którą na bieżąco aktualizujemy;
- cena książki może być wyższa od początkowej ceny detalicznej, co jest spowodowane kosztami druku cyfrowego (wyższymi niż koszty tradycyjnego druku offsetowego). Obowiązująca cena jest zawsze podawana na stronie WWW książki;
- zawartość książki wraz z dodatkami (płyta CD, DVD) odpowiada jej pierwotnemu wydaniu i jest w pełni komplementarna;
- usługa nie obejmuje książek w kolorze.
Masz pytanie o konkretny tytuł? Napisz do nas: sklep@ebookpoint.pl
Proszę wybrać ocenę!
Proszę wpisać opinię!
Książka drukowana
Oceny i opinie klientów: Ethical Hacker?s Penetration Testing Guide Samir Kumar Rakshit (0)
Weryfikacja opinii następuje na podstawie historii zamowień na koncie Użytkownika umiejszczającego opinię.