Skip to content

Web Security Testing Cookbook Systematic Techniques to Find Problems Fast

Best in textbook rentals since 2012!

ISBN-10: 0596514832

ISBN-13: 9780596514839

Edition: 2008 (Revised)

Authors: Paco Hope, Ben Walther, Paco Hope

List price: $39.99
Blue ribbon 30 day, 100% satisfaction guarantee!
what's this?
Rush Rewards U
Members Receive:
Carrot Coin icon
XP icon
You have reached 400 XP and carrot coins. That is the daily max!

Description:

Web Security Testing Cookbook gives developers and testers the tools they need to make security testing a regular part of their development lifecycle. You'll find recipes related to manual, exploratory testing as well as recipes for automated security testing that you can make part of your regression cycle. The recipes cover the basics like observing messages between clients and servers, to multi-phase tests that script the login and execution of web application features. This book provides developers the techniques they need to consider security in their unit tests. Testers will find a wealth of techniques for building web security test cases and executing them. Web Security Testing…    
Customers also bought

Book details

List price: $39.99
Copyright year: 2008
Publisher: O'Reilly Media, Incorporated
Publication date: 10/27/2008
Binding: Paperback
Pages: 312
Size: 6.97" wide x 9.13" long x 0.87" tall
Weight: 0.946
Language: English

Paco Hope is a Technical Manager at Cigital, Inc. and co-author of Mastering FreeBSD and OpenBSD Security (April 2005, O'Reilly, ISBN 0596006268). Mr. Hope has also published articles on Misuse and Abuse Cases and PKI. He has been invited to conferences to speak on topics such as software security re-quirements, web application security, and embedded system security. At Cigi-tal, he has served as a subject matter expert to MasterCard International for security policies and has assisted a Fortune 500 hospitality company in writ-ing software security policy. He also trains software developers and testers in the fundamentals of software security. In the gaming and mobile communica-tions…    

Ben Walther is a consultant at Cigital and contributor to the Edit Cookies tool. He has a hand in both normal Quality Assurance and Software Security. Day to day, he designs and executes tests - and so he understands the need for simple recipes, in the hectic QA world. Yet he has also given talks on web ap-plication testing tools to members of the Open Web Application Security Pro-ject (OWASP). Through Cigital, he tests systems ranging from financial data processing to slot machines. Mr. Walther has a B.S. in Information Science from Cornell University.

Introduction
Installing Some Free Tools
Basic Observation
Web-Oriented Data Encoding
Tampering with Input
Automated Bulk Scanning
Automating Specific Tasks with cURL
Automating with LibWWWPerl
Seeking Design Flaws
Attacking AJAX
Manipulating Sessions
Multifaceted Tests
Index