Set up and optimize Burp Suite to maximize its effectiveness in web application security testing
Explore how Burp Suite can be used to execute various OWASP test cases
Get to grips with the essential features and functionalities of Burp Suite
Purchase of the print or Kindle book includes a free PDF eBook

Description

With its many features, easy-to-use interface, and flexibility, Burp Suite is the top choice for professionals looking to strengthen web application and API security. This book offers solutions to challenges related to identifying, testing, and exploiting vulnerabilities in web applications and APIs. It provides guidance on identifying security weaknesses in diverse environments by using different test cases. Once you’ve learned how to configure Burp Suite, the book will demonstrate the effective utilization of its tools, such as Live tasks, Scanner, Intruder, Repeater, and Decoder, enabling you to evaluate the security vulnerability of target applications. Additionally, you’ll explore various Burp extensions and the latest features of Burp Suite, including DOM Invader. By the end of this book, you’ll have acquired the skills needed to confidently use Burp Suite to conduct comprehensive security assessments of web applications and APIs.

Who is this book for?

If you are a beginner- or intermediate-level web security enthusiast, penetration tester, or security consultant preparing to test the security posture of your applications and APIs, this is the book for you.

What you will learn

Perform a wide range of tests, including authentication, authorization, business logic, data validation, and client-side attacks
Use Burp Suite to execute OWASP test cases focused on session management
Conduct Server-Side Request Forgery (SSRF) attacks with Burp Suite
Execute XML External Entity (XXE) attacks and perform Remote Code Execution (RCE) using Burp Suite’s functionalities
Use Burp to help determine security posture of applications using GraphQL
Perform various attacks against JSON Web Tokens (JWTs)

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Frequently bought together

€37.99

Attacking and Exploiting Modern Web Applications

€29.99

€29.99

Total € 97.97

Filter reviews by

All

Feefo verified reviews

Amazon verified reviews

N/A Feb 19, 2024

Feefo Verified review

CK Nov 19, 2023

Dr. Wear provides an excellent update from her previous book due to Burp's many upgrades. As someone who performs web application penetration testing daily, Burp Suite is my de facto tool of the trade. Although it is always best to "read the manual," I find I often don't, thus reading this guide greatly helped me understand Burp. This guide provides an excellent manual for all the updated features for Burp Suite and provided me with a great deal of information about Burp Suite I would not have otherwise known. For example, how the resource pool works for throttling Burp. I would like to note though, much of the information is about the Burp Professional edition (which is well worth the money).My only critique is Dr. Wear could provide more detail about how certain payloads work in an application. For example, Dr. Wear uses many intentionally vulnerable applications in her examples. Her example of XSS provides a high-level overview of why XSS works, but for many learners the devil is in the details i.e. which specific parameter is not sanitizing input? As a professional pentester, this is perhaps one of the most important parts of what we do when reporting a vulnerability. Despite this one fault, I found the guide to be informative and detailed on how to use Burp Suite and would definitely recommend it to those who use Burp regularly.

Amazon Verified review

Vlsoper Nov 03, 2023

For web security testers, Burp Suite is the hacker's trusty swiss army knife. This cookbook from veteran Burp expert Dr. Sunny Wear shows readers how to get the most out of this versatile security tool.The book kicks off with recipes for setting up and configuring Burp for maximum effectiveness. Dr. Wear then covers step-by-step how to use Burp to find vulnerabilities like broken auth, insecure session management, injection flaws, and other critical OWASP weaknesses.With over 25 years in web security, Dr. Wear provides practical tips and shortcuts only an insider would know. The cookbook format means you can easily lookup how to pull off advanced attacks like XXE injection or exploit GraphQL APIs.Dr. Wear goes way beyond Burp basics with advanced coverage of automating scans, custom plug-ins, and the latest Burp features like DOM Invader. Her passion for pen testing really comes through in the engaging recipes.For web testers looking to level up their skills, this Burp cookbook should be their go-to guide. Dr. Wear has created the perfect field manual for using Burp to find and exploit holes in web apps and APIs. Her updated Burp cookbook belongs in the backpack of any seasoned security tester.

Larry Trowell Nov 02, 2023

Burp has been around forever, and recently the interface has gotten a lot more well designed but with the way things have been moved around, it has gotten a little bit confusing. This book can serve as a good intro, as well as a reference for those of us who have been using it for years, but may not day to day and thus may not be familiar with where the current location of specific features are. Overall it is well laid out and there are plenty of areas where it has been useful to me to find where the settings I used to use have moved.

Raymond Nov 01, 2023

Dr. Wear has some excellent content on Pluralsight which I have learned so much from. This book will get you through the steps to efficiently learn Burp Suite and the basics of web app pentesting. Configuration, suggested plugins, and specific attacks are significantly covered. The book is an excellent primer for entry level web app pentests and CTF competitions as well.

Burp Suite Cookbook: Web application security made easy with Burp Suite , Second Edition

What do you get with eBook?