You're reading from Attacking and Exploiting Modern Web Applications Discover the mindset, techniques, and tools to perform modern web attacks and exploitation

Product type Paperback

Published in Aug 2023

Publisher Packt

ISBN-13 9781801816298

Length 338 pages

Edition 1st Edition

Languages

Solidity

Tools

Blockchain

Concepts

Web Security

Authors (2):

Simone Onofri

Donato Onofri

View More author details

Table of Contents (14) Chapters

Preface

1. Part 1: Attack Preparation

2. Chapter 1: Mindset and Methodologies FREE CHAPTER

3. Chapter 2: Toolset for Web Attacks and Exploitation

4. Part 2: Evergreen Attacks

5. Chapter 3: Attacking the Authentication Layer – a SAML Use Case

6. Chapter 4: Attacking Internet-Facing Web Applications – SQL Injection and Cross-Site Scripting (XSS) on WordPress

7. Chapter 5: Attacking IoT Devices – Command Injection and Path Traversal

8. Part 3: Novel Attacks

9. Chapter 6: Attacking Electron JavaScript Applications – from Cross-Site Scripting (XSS) to Remote Command Execution (RCE)

10. Chapter 7: Attacking Ethereum Smart Contracts – Reentrancy, Weak Sources of Randomness, and Business Logic

11. Chapter 8: Continuing the Journey of Vulnerability Discovery

12. Index

Why subscribe?

13. Other Books You May Enjoy

Technical requirements

You can use the Ubuntu LTS machine configured in Chapter 2 in this chapter. In addition, we will use Ghidra for reverse engineering and QEMU for emulation. We will install it in the Emulation section of this chapter, as well as a few other tools.

Ghidra

Ghidra is a versatile software reverse engineering tool developed by the National Security Agency Research Directorate. It offers numerous features, including disassembly, assembly, decompilation, graphing, and scripting. It supports a broad range of processor instruction sets and executable formats and is designed for both interactive and automated – Java or Python – usage.

To install Ghidra, please follow the website’s instructions [2].

Physical device

The physical GL.iNet 300M Mini Smart Router device, GL-AR300M16 [3], with firmware version 3.215 (the latest at the time of writing), is also recommended for the dynamic analysis part. However, we will explain how to emulate...

The rest of the chapter is locked

You're reading from Attacking and Exploiting Modern Web Applications Discover the mindset, techniques, and tools to perform modern web attacks and exploitation

Table of Contents (14) Chapters

Technical requirements

Physical device

Unlock this book and the full library FREE for 7 days

Authors (2)

Personalised recommendations for you