Wieser B. The Hackers Codex...Web App Attacks Demystified 2021 torrent

Textbook in PDF format

Modern day web applications are a complicated mix of client and server-side programming languages, frameworks, cloud infrastructure, proxies and caches. Additionally, web applications are protected and monitored by several defense in-depth tools including web application firewalls, intrusion detection and prevention systems, as well as newer solutions that use artificial intelligence and machine learning to block attacks. The learning curve to find and exploit impactful flaws in web applications has never been higher.
In The Hacker's Codex: Modern Web Application Attacks Demystified you'll learn how to find and exploit real world web application security bugs by using examples found in real life applications. These same techniques are used by cyber gangs to generate millions of dollars every year. This book is not another OWASP top ten reprint and is not an introductory text. It's expected that the reader has read the Web Application Hackers Handbook and has a working knowledge of an intercepting proxy like BurpSuite.
Introduction
HTML Injection
Host Header Injection
Username Enumeration – SSN
Same Origin Policy
Exploiting CORS Misconfigurations
Origin Reflection Attacks
CSRF
CSRF Bypass – Clickjacking Drag and Drop
Redirection Bugs
XSS – Cross-Site Scripting
Identifying XSS Vulnerabilities
JSONP
Language-Specific XSS
SOME Attacks
CSV Injection
HTTP Desync
Web Cache Poisoning
Conclusion