Real-world Bug Hunting : A Field Guide to Web Hacking

Real-world Bug Hunting : A Field Guide to Web Hacking


Learn how people break websites and how you can, too. Real-World Bug Hunting is the premier field guide to finding software bugs. Whether you're a cyber-security beginner who wants to make the internet safer or a seasoned developer who wants to write secure code, ethical hacker Peter Yaworski will show you how it's done. You'll learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery. Using real-life case studies of rewarded vulnerabilities from applications like Twitter, Facebook, Google, and Uber, you'll see how hackers manage to invoke race conditions while transferring money, use URL parameter to cause users to like unintended tweets, and more. Each chapter introduces a vulnerability type accompanied by a series of actual reported bug bounties. The book's collection of tales from the field will teach you how attackers trick users into giving away their sensitive information and how sites may reveal their vulnerabilities to savvy users. You'll even learn how you could turn your challenging new hobby into a successful career. You'll learn: - How the internet works and basic web hacking concepts
- How attackers compromise websites
- How to identify functionality commonly associated with vulnerabilities
- How to find bug bounty programs and submit effective vulnerability reports Real-World Bug Hunting is a fascinating soup-to-nuts primer on web security vulnerabilities, filled with stories from the trenches and practical wisdom. With your new understanding of site security and weaknesses, you can help make the web a safer place--and profit while you're at it.

Similar Books

ISBN 10: 1118026470
ISBN 13: 9781118026472

07 Oct 2011
Dafydd Stuttard

ISBN 10: 1494295504
ISBN 13: 9781494295509

11 Feb 2014
Ben Clark

ISBN 10: 1980901759
ISBN 13: 9781980901754

02 May 2018
Peter Kim

ISBN 10: 1593271441
ISBN 13: 9781593271442

01 Feb 2008
Jon Erickson

ISBN 10: 1593278268
ISBN 13: 9781593278267

23 Nov 2017
Jean-Philippe Aumasson

ISBN 10: 1593272901
ISBN 13: 9781593272906

28 Mar 2012
Michael Sikorski

ISBN 10: 1593277504
ISBN 13: 9781593277505

29 Dec 2017
James Forshaw

ISBN 10: 1593279949
ISBN 13: 9781593279943

03 Jul 2020
Malcolm McDonald

ISBN 10: 1593278659
ISBN 13: 9781593278656

06 Feb 2020
Chris Patten

ISBN 10: 1593273886
ISBN 13: 9781593273880

13 Dec 2011
Michal Zalewski

ISBN 10: 1593275900
ISBN 13: 9781593275907

20 Jan 2015
Justin Seitz

ISBN 10: 1593278632
ISBN 13: 9781593278632

31 Jul 2018
Matt Burrough