Chapter 12: Mastering Web App Security

"Web applications are everywhere, attackers nowadays invest a lot of energy in understanding their attack surface and exploiting their vulnerabilities. We, on the other hand, need to do exactly the same."

– Cristian Rodríguez, Offensive Security Certified Professional (OSCP) | Offensive Security Web Expert (OSWE)

Indeed, we must protect our web applications, and that is why we created a super exciting chapter in which you will acquire all the knowledge needed to master the skills of securing web applications. First, we will start by showing you how much information others may know about your site or web application and the importance of obfuscating all that public information.

Then, it will be time to get into more technical stuff, and we will introduce you to one of the most common attacks for web applications: Cross-Site Scripting (XSS). After that, the rest of the chapter will be very techy and hands-on.

...