Packt+ | Advance your knowledge in tech

0

All Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Mastering Modern Web Penetration Testing

You're reading from Mastering Modern Web Penetration Testing Master the art of conducting modern pen testing attacks and techniques on your web application before the hacker does!

Product type Paperback

Published in Oct 2016

Publisher Packt

ISBN-13 9781785284588

Length 298 pages

Edition 1st Edition

Tools

Kali Linux

Concepts

Web Penetration Testing

Authors (2):

Prakhar Prasad

Rafay Baloch

View More author details

Table of Contents (18) Chapters

Mastering Modern Web Penetration Testing

Credits

About the Author

About the Reviewer

www.PacktPub.com

Preface

1. Common Security Protocols FREE CHAPTER

2. Information Gathering

3. Cross-Site Scripting

4. Cross-Site Request Forgery

5. Exploiting SQL Injection

6. File Upload Vulnerabilities

7. Metasploit and Web

8. XML Attacks

9. Emerging Attack Vectors

10. OAuth 2.0 Security

11. API Testing Methodology

Index

Summary

This chapter involved looking at various kinds of XSS and some remedies that are typically used. Readers may check the following websites for further expanding their knowledge of XSS:

The next chapter deals with the CSRF vulnerabilities, which trick users of a web application into performing different actions of the web application.

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $15.99/month. Cancel anytime

Authors (2)

Prakhar Prasad

Prakhar Prasad

Prakhar Prasad is a web application security researcher and penetration tester from India. He has been a successful participant in various bug bounty programs and has discovered security flaws on websites such as Google, Facebook, Twitter, PayPal, Slack, and many more. He secured the tenth position worldwide in the year 2014 at HackerOne's platform. He is OSCP and OSWP certified, which are some of the most widely respected certifications in the information security industry. He occasionally performs training and security assessment for various government, non-government, and educational organizations.

See other products by Prakhar Prasad

Rafay Baloch

Rafay Baloch

See other products by Rafay Baloch

Personalised recommendations for you

Based on your interests and search pattern

Cloud Security Handbook

Cloud Security Handbook

This book provides complete coverage of every cloud security aspect—from initial design to ongoing maintenance. Packed with best practices, it helps you smoothly transition to the public cloud, while keeping your environments secure and compliant.

Apr 2025 16h 4m

CompTIA CySA+ (CS0-003) Certification Guide

CompTIA CySA+ (CS0-003) Certification Guide

Prepare for CompTIA CySA+ (CS0-003) exam with this study guide—covering security ops, incident response, and vulnerability management in depth to level up your cybersecurity career. Includes exam-style questions, 2 practice tests, and flashcards.

Apr 2025 24h 44m

Cyber Security Kill Chain - Tactics and Strategies

Cyber Security Kill Chain - Tactics and Strategies

Learn how the cyber kill chain, a structured model that outlines the stages of a cyberattack, guides you through understanding threat actor behaviors and bolstering their ability to defend against evolving cyber threats.

May 2025 10h 16m