Packt+ | Advance your knowledge in tech

You're reading from Web Penetration Testing with Kali Linux Explore the methods and tools of ethical hacking with Kali Linux

Product type Paperback

Published in Feb 2018

Publisher

ISBN-13 9781788623377

Length 426 pages

Edition 3rd Edition

Tools

Kali Linux

Concepts

Ethical Hacking

Authors (3):

Juned Ahmed Ansari

Daniel W. Dieterle

Gilberto Najera-Gutierrez

View More author details

Table of Contents (13) Chapters

Preface

1. Introduction to Penetration Testing and Web Applications FREE CHAPTER

2. Setting Up Your Lab with Kali Linux

3. Reconnaissance and Profiling the Web Server

4. Authentication and Session Management Flaws

5. Detecting and Exploiting Injection-Based Flaws

6. Finding and Exploiting Cross-Site Scripting (XSS) Vulnerabilities

7. Cross-Site Request Forgery, Identification, and Exploitation

8. Attacking Flaws in Cryptographic Implementations

9. AJAX, HTML5, and Client-Side Attacks

10. Other Common Security Flaws in Web Applications

11. Using Automated Scanners on Web Applications

12. Other Books You May Enjoy

Leave a review – let other readers know what you think

HTML5 for penetration testers

The latest version of the HTML standard comes with many new features that may help the developers prevent security flaws and attacks on their applications. However, it also poses new challenges for the design and implementation of new functionality, which may lead to applications opening up new and unexpected opportunities to attackers due to the use of not-yet-fully understood new technology.

In general, penetration testing an HTML5 application is no different than testing any other web application. In this section, we will cover some of the key features of HTML5, their implication for penetration testing, and some ways that applications implementing these features can be attacked.

New XSS vectors

Cross-Site Scripting (XSS) is a major issue in HTML5 applications, as JavaScript is used to interact with all of the new features from client-side storage to WebSockets to Web Messaging.

Also, HTML includes new elements and tags that may be used as attack vectors for...