Shipping Through the Holidays β˜€οΈπŸ“¦

New Year, New You Sale β˜€οΈ- Up to 20% off 500+ books!

The Web Application Hacker's Handbook

Finding and Exploiting Security Flaws
4.23 goodreads logo

Ratings/reviews counts are updated frequently.

Check link for latest rating.
( 1,226 ratings, 61 reviews)
Book Hero Magic crafted this summary to help describe this book. While it's new and still learning, it may not be perfect - your feedback is welcome! Summary
The Web Application Hacker's Handbook by Dafydd Stuttard and Marcus Pinto is a comprehensive guide to evaluating and securing web applications. Aimed at security professionals and developers, it delves into various attack vectors and techniques used by hackers. The book also offers strategies for identifying and fixing vulnerabilities, making it a valuable resource for enhancing web application security.
Read More
Format: Paperback / softback
$9899
AVAILABLE WITH SUPPLIER Ships from our Auckland warehouse within 3-4 weeks

Found a better price? Request a price match

Book Hero Magic created this recommendation. While it's new and still learning, it may not be perfect - your feedback is welcome! IS THIS YOUR NEXT READ?

If you're fascinated by the world of cybersecurity and web vulnerabilities, this book may appeal to you. It offers detailed insights into the techniques and tools used by security professionals to assess web application security, making it a valuable resource for both novices and seasoned experts in the computing and technology field.

Book Hero thinking about your next read

The Web Application Hacker's Handbook

The highly successful security book returns with a new edition, completely updated Web applications are the front door to most organizations, exposing them to attacks that may disclose personal information, execute fraudulent transactions, or compromise ordinary users.

Book Hero Magic formatted this description to make it easier to read. While it's new and still learning, it may not be perfect - your feedback is welcome! Description
The highly successful security book returns with a new edition, completely updated.

Web applications are the front door to most organisations, exposing them to attacks that may disclose personal information, execute fraudulent transactions, or compromise ordinary users. This practical book has been completely updated and revised to discuss the latest step-by-step techniques for attacking and defending the range of ever-evolving web applications.

You'll explore the various new technologies employed in web applications that have appeared since the first edition and review the new attack techniques that have been developed, particularly in relation to the client side.

  • Reveals how to overcome the new technologies and techniques aimed at defending web applications against attacks that have appeared since the previous edition.
  • Discusses new remoting frameworks, HTML5, cross-domain integration techniques, UI redress, framebusting, HTTP parameter pollution, hybrid file attacks, and more.
  • Features a companion website hosted by the authors that allows readers to try out the attacks described, gives answers to the questions that are posed at the end of each chapter, and provides a summarised methodology and checklist of tasks.

Focusing on the areas of web application security where things have changed in recent years, The Web Application Hacker's Handbook is the most current resource on the critical topic of discovering, exploiting, and preventing web application security flaws.

Book Hero Magic summarised reviews for this book. While it's new and still learning, it may not be perfect - your feedback is welcome! HOW HAS THIS BEEN REVIEWED?

The Web Application Hacker's Handbook is praised for its in-depth coverage of web application vulnerabilities and for being an essential resource for security professionals. Reviewers appreciate its comprehensive approach to explaining various attack techniques and defence mechanisms with practical examples. However, some mention that it might be challenging for beginners without prior knowledge of programming or web technologies.

Book Hero reading reviews

Book Details

INFORMATION

ISBN: 9781118026472

Publisher: John Wiley & Sons Inc

Format: Paperback / softback

Date Published: 07 October 2011

Country: United States

Imprint: John Wiley & Sons Inc

Edition: 2nd edition

Audience: Professional and scholarly

DIMENSIONS

Spine width: 48.0mm

Width: 188.0mm

Height: 231.0mm

Weight: 1270g

Pages: 912

About the Author

DAFYDD STUTTARD is an independent security consultant, author, and software developer specializing in penetration testing of web applications and compiled software. Under the alias PortSwigger, Dafydd created the popular Burp Suite of hacking tools. MARCUS PINTO delivers security consultancy and training on web application attack and defense to leading global organizations in the financial, government, telecom, gaming, and retail sectors. The authors cofounded MDSec, a consulting company that provides training in attack and defense-based security.

More from Computing & Technology

View all

Why buy from us?

Book Hero is not a chain store or big box retailer. We're an independent 100% NZ-owned business on a mission to help more Kiwis rediscover a love of books and reading!

Service & Delivery

Service & Delivery

Our warehouse in Auckland holds over 80,000 books and puzzles in-stock so you're not waiting for your order to arrive from overseas.

Auckland Bookstore

Auckland Bookstore

We're primarily an online store, but for your convenience you can pick up your order for free from our bookstore, which is right next door to our warehouse in Hobsonville.

Our Gifting Service

Our Gifting Service

Books make wonderful thoughtful gifts and we're here to help with gift-wrapping and cards. We can even send your gift directly to your loved one.