Subscription

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Free Learning

You're reading from Hands-On Bug Hunting for Penetration Testers A practical guide to help ethical hackers discover web application security flaws

Product type Paperback

Published in Sep 2018

Publisher Packt

ISBN-13 9781789344202

Length 250 pages

Edition 1st Edition

Languages

Python

Tools

Kali Linux

Concepts

Application Security

Authors (2):

Himanshu Sharma

Joe Marshall

View More author details

Table of Contents (16) Chapters

Preface

1. Joining the Hunt

2. Choosing Your Hunting Ground FREE CHAPTER

3. Preparing for an Engagement

4. Unsanitized Data – An XSS Case Study

5. SQL, Code Injection, and Scanners

6. CSRF and Insecure Session Authentication

7. Detecting XML External Entities

8. Access Control and Security Through Obscurity

9. Framework and Application-Specific Vulnerabilities

10. Formatting Your Report

11. Other Tools

12. Other (Out of Scope) Vulnerabilities

13. Going Further

14. Assessment

15. Other Books You May Enjoy

Leave a review - let other readers know what you think

Questions

What are some differences between third-party marketplaces such as Bugcrowd and bug bounty programs offered by individual companies?
Is it worth it to participate in programs that reward vulnerabilities with swag? Why or why not?
What's a private bug bounty program?
What are some resources you can use to find programs not covered in this chapter?
What makes a site more or less attractive as a hunting ground for reward-eligible bugs?
What is coordinated vulnerability disclosure?
What steps can you take to minimize your legal liability during a pentesting session?

You have been reading a chapter from

Hands-On Bug Hunting for Penetration Testers

Published in: Sep 2018

Publisher: Packt

ISBN-13: 9781789344202

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

Joe Marshall

Joseph Marshall is a web application developer and freelance writer with credits from The Atlantic, Kirkus Review, and the SXSW film blog. He also enjoys moonlighting as a freelance security researcher, working with third-party vulnerability marketplaces such as Bugcrowd and HackerOne. His background and education include expertise in development, nonfiction writing, linguistics, and instruction/teaching. He lives in Austin, TX.

See other products by Joe Marshall

Himanshu Sharma

Himanshu Sharma has been in the field of security since 2009 and has been listed in the halls of fame of Apple, Google, Microsoft, Facebook, and many more. He has helped celebrities such as Harbhajan Singh in recovering their hacked accounts. He has been a speaker at various conferences worldwide such as BotConf, CONFidence, Hack In the Box, SINCON, Sec-T, Hackcon, and numerous others. Currently, he is the co-founder of BugsBounty. He also authored multiple bestsellers titled "Kali Linux - An Ethical Hacker's Cookbook", " Hands-On Red Team Tactics" and "Hands-On Web Pentesting with Metasploit."

See other products by Himanshu Sharma