Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Free Learning

You're reading from Hands-On Bug Hunting for Penetration Testers A practical guide to help ethical hackers discover web application security flaws

Product type Paperback

Published in Sep 2018

Publisher Packt

ISBN-13 9781789344202

Length 250 pages

Edition 1st Edition

Languages

Python

Tools

Kali Linux

Concepts

Application Security

Authors (2):

Himanshu Sharma

Joe Marshall

View More author details

Table of Contents (16) Chapters

Preface

1. Joining the Hunt FREE CHAPTER

2. Choosing Your Hunting Ground

3. Preparing for an Engagement

4. Unsanitized Data – An XSS Case Study

5. SQL, Code Injection, and Scanners

6. CSRF and Insecure Session Authentication

7. Detecting XML External Entities

8. Access Control and Security Through Obscurity

9. Framework and Application-Specific Vulnerabilities

10. Formatting Your Report

11. Other Tools

12. Other (Out of Scope) Vulnerabilities

13. Going Further

14. Assessment

15. Other Books You May Enjoy

Leave a review - let other readers know what you think

Questions

Why are DoS/DDoS attacks typically out-of-scope? What's a scenario where a DoS/DDoS-related bug would merit a reward?
What is Self-XSS? Why does it not usually merit an award?
What's the potential damage of leaving HTTP's OPTIONS method enabled?
Why don't BEAST and other SSL vulnerabilities typically qualify for bug bounty programs?
What is clickjacking?

What is physical testing?
What are some things that can make a CSRF vulnerability out-of-scope?
What are dark patterns?
Why aren't brute force-related vulnerabilities rewarded with payouts?

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

Joe Marshall

Joseph Marshall is a web application developer and freelance writer with credits from The Atlantic, Kirkus Review, and the SXSW film blog. He also enjoys moonlighting as a freelance security researcher, working with third-party vulnerability marketplaces such as Bugcrowd and HackerOne. His background and education include expertise in development, nonfiction writing, linguistics, and instruction/teaching. He lives in Austin, TX.

See other products by Joe Marshall

Himanshu Sharma

Himanshu Sharma has been in the field of security since 2009 and has been listed in the halls of fame of Apple, Google, Microsoft, Facebook, and many more. He has helped celebrities such as Harbhajan Singh in recovering their hacked accounts. He has been a speaker at various conferences worldwide such as BotConf, CONFidence, Hack In the Box, SINCON, Sec-T, Hackcon, and numerous others. Currently, he is the co-founder of BugsBounty. He also authored multiple bestsellers titled "Kali Linux - An Ethical Hacker's Cookbook", " Hands-On Red Team Tactics" and "Hands-On Web Pentesting with Metasploit."

See other products by Himanshu Sharma