Subscription

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Conferences

Free Learning

You're reading from Hands-On Web Penetration Testing with Metasploit The subtle art of using Metasploit 5.0 for web application exploitation

Product type Paperback

Published in May 2020

Publisher Packt

ISBN-13 9781789953527

Length 544 pages

Edition 1st Edition

Languages

Python

Tools

Metasploit

Concepts

Penetration Testing

Authors (2):

Harpreet Singh

Himanshu Sharma

View More author details

Table of Contents (23) Chapters

Preface

1. Introduction

2. Introduction to Web Application Penetration Testing FREE CHAPTER

3. Metasploit Essentials

4. The Metasploit Web Interface

5. The Pentesting Life Cycle with Metasploit

6. Using Metasploit for Reconnaissance

7. Web Application Enumeration Using Metasploit

8. Vulnerability Scanning Using WMAP

9. Vulnerability Assessment Using Metasploit (Nessus)

10. Pentesting Content Management Systems (CMSes)

11. Pentesting CMSes - WordPress

12. Pentesting CMSes - Joomla

13. Pentesting CMSes - Drupal

14. Performing Pentesting on Technological Platforms

15. Penetration Testing on Technological Platforms - JBoss

16. Penetration Testing on Technological Platforms - Apache Tomcat

17. Penetration Testing on Technological Platforms - Jenkins

18. Logical Bug Hunting

19. Web Application Fuzzing - Logical Bug Hunting

20. Writing Penetration Testing Reports

21. Assessment

22. Other Books You May Enjoy

Leave a review - let other readers know what you think

An introduction to Apache Struts

Apache Struts is a free, open source framework that follows the MVC architecture and is used to develop Java-based web applications. It uses the Java Servlet API. It was originally created by Craig McClanahan and was donated to the Apache Foundation in May 2000. The first full release of Apache Struts 2 took place in 2007.

In this section, we will look at a few vulnerabilities that have been discovered in Apache Struts.

Understanding OGNL

Object Graph Notation Language (OGNL) is an EL that simplifies the accessibility of the data stored in ActionContext. ActionContext is a container of objects that an action might require for execution. OGNL is very heavily linked in Apache Struts 2 and is...

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (2)

Harpreet Singh

Harpreet is a professional with 8+ years of experience in the field of Ethical Hacking, Penetration Testing, Vulnerability Research & Red Teaming. He is the author of "Hands-On: Web Penetration Testing with Metasploit" and "Hands-On: Red Team Tactics" published by Packt Publishing. He's also an OSCP, OSWP, CRTP certified professional. Over the years of his experience, Harpreet has acquired the Offensive & Defensive skill set. He is a professional who specializes in Wireless & network exploitation including but not limited to Mobile exploitation, Web Application exploitation and he has also performed few Red Team Engagements in Banks & Financial Groups.

See other products by Harpreet Singh

Himanshu Sharma

Himanshu Sharma has been in the field of security since 2009 and has been listed in the halls of fame of Apple, Google, Microsoft, Facebook, and many more. He has helped celebrities such as Harbhajan Singh in recovering their hacked accounts. He has been a speaker at various conferences worldwide such as BotConf, CONFidence, Hack In the Box, SINCON, Sec-T, Hackcon, and numerous others. Currently, he is the co-founder of BugsBounty. He also authored multiple bestsellers titled "Kali Linux - An Ethical Hacker's Cookbook", " Hands-On Red Team Tactics" and "Hands-On Web Pentesting with Metasploit."

See other products by Himanshu Sharma