Learn how people break websites and how you can, too.
Real-World Bug Hunting is the premier field guide to finding software bugs. Whether you're a cyber-security beginner who wants to make the internet safer or a seasoned developer who wants to write secure code, ethical hacker Peter Yaworski will show you how it's done.
You'll learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery. Using real-life case studies of rewarded vulnerabilities from applications like Twitter, Facebook, Google, and Uber, you'll see how hackers manage to invoke race conditions while transferring money, use URL parameter to cause users to like unintended tweets, and more.
Each chapter introduces a vulnerability type accompanied by a series of actual reported bug bounties. The book's collection of tales from the field will teach you how attackers trick users into giving away their sensitive information and how sites may reveal their vulnerabilities to savvy users. You'll even learn how you could turn your challenging new hobby into a successful career. You'll learn:
"synopsis" may belong to another edition of this title.
Peter Yaworski is a self-taught developer and ethical hacker who began building websites exclusively with Drupal. Since then, he has expanded his interest to Rails, Android app development, and software security, while producing over 100 video tutorials and interviews on YouTube covering ethical hacking, web development, and Android to help teach others what he's learned. Peter continues to be an active bug bounty participant with thanks from Shopify, HackerOne, Salesforce, Twitter, Starbucks and the US Department of Defense among others.
"About this title" may belong to another edition of this title.
FREE shipping within U.S.A.
Destination, rates & speedsSeller: SecondSale, Montgomery, IL, U.S.A.
Condition: Good. Item in good condition. Textbooks may not include supplemental items i.e. CDs, access codes etc. Seller Inventory # 00091780555
Quantity: 2 available
Seller: Better World Books, Mishawaka, IN, U.S.A.
Condition: Good. Former library book; may include library markings. Used book that is in clean, average condition without any missing pages. Seller Inventory # 39781352-20
Quantity: 1 available
Seller: Dream Books Co., Denver, CO, U.S.A.
Condition: like_new. In unread excellent condition. Pages are crisp and clean with no markings. Item may have minor shelf wear on the cover, spine, pages, or dust cover. Item may contain remainder marks on edges. Seller Inventory # DBV.1593278616.LN
Quantity: 1 available
Seller: Used Book Company, Egg Harbor Township, NJ, U.S.A.
Condition: LikeNew. Shows very minimal signs of wear and previous use. A portion of your purchase benefits nonprofits! - Note: Edition format may differ from what is shown in stock photo item details. May not include supplementary material (toys, access code, dvds, etc). Seller Inventory # 584XQ4000DAS_ns
Quantity: 1 available
Seller: INDOO, Avenel, NJ, U.S.A.
Condition: As New. Unread copy in mint condition. Seller Inventory # RH9781593278618
Quantity: Over 20 available
Seller: GreatBookPrices, Columbia, MD, U.S.A.
Condition: New. Seller Inventory # 29653073-n
Quantity: 15 available
Seller: INDOO, Avenel, NJ, U.S.A.
Condition: New. Brand New. Seller Inventory # 9781593278618
Quantity: Over 20 available
Seller: Friends of Pima County Public Library, Tucson, AZ, U.S.A.
Condition: Good. Paperback. Ex Library with usual markings, stamps and/or stickers. This item is in good condition. Index. May show moderate signs of use. Until further notice, USPS Priority Mail only reliable option for Hawaii. Proceeds benefit the Pima County Public Library system, which serves Tucson and southern Arizona. Seller Inventory # 529XQR0003BZ
Quantity: 1 available
Seller: GreatBookPrices, Columbia, MD, U.S.A.
Condition: As New. Unread book in perfect condition. Seller Inventory # 29653073
Quantity: 15 available
Seller: Grand Eagle Retail, Mason, OH, U.S.A.
Paperback. Condition: new. Paperback. Learn how people break websites and how you can, too.Learn how people break websites and how you can, too.Real-World Bug Hunting is the premier field guide to finding software bugs. Whether you're a cyber-security beginner who wants to make the internet safer or a seasoned developer who wants to write secure code, ethical hacker Peter Yaworski will show you how it's done.You'll learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery. Using real-life case studies of rewarded vulnerabilities from applications like Twitter, Facebook, Google, and Uber, you'll see how hackers manage to invoke race conditions while transferring money, use URL parameter to cause users to like unintended tweets, and more.Each chapter introduces a vulnerability type accompanied by a series of actual reported bug bounties. The book's collection of tales from the field will teach you how attackers trick users into giving away their sensitive information and how sites may reveal their vulnerabilities to savvy users. You'll even learn how you could turn your challenging new hobby into a successful career. You'll learn-How the internet works and basic web hacking conceptsHow attackers compromise websitesHow to identify functionality commonly associated with vulnerabilitiesHow to find bug bounty programs and submit effective vulnerability reportsReal-World Bug Hunting is a fascinating soup-to-nuts primer on web security vulnerabilities, filled with stories from the trenches and practical wisdom. With your new understanding of site security and weaknesses, you can help make the web a safer place--and profit while you're at it. Uses real-world bug reports to teach programmers and InfoSec professionals how to discover and protect vulnerabilities in web applications. Shipping may be from multiple locations in the US or from the UK, depending on stock availability. Seller Inventory # 9781593278618
Quantity: 1 available