Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: “Another key component that was included in this release was the IP defrag module.”

A block of code is set as follows:

alert tcp any any -> $HOME_NET [80,8080] (msg:"SQL Injection Detected"; flow:established,to_server; http_uri; content:"/wordpress/wp-content/plugins/demo_vul/endpoint.php"; content:"union"; distance:0; http_uri; content:"select"; distance:0; nocase; content:"from"; distance:0; nocase; sid:123;)

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

http://acunetix.php.example/wordpress/wp-content/plugins/demo_vul/endpoint.php?user=-1+union+select+1,2,3,4,5,6,7,8,9,(SELECT+user_pass+FROM+wp_users+WHERE+ID=1)

Any command-line input or output is written as follows:

sudo dnf install -y flex bison gcc gcc-c++ make cmake automake autoconf libtool curl pkgconf

Bold: Indicates a new term, an important word, or words that you see on screen. For instance, words in menus or dialog boxes appear in bold. Here is an example: “It can be noted that the Total Length field is 16 bits.”

Tips or important notes

Appear like this.