Professional Pen-Testing For Web Application

DISCLAIMER: Following data/info/files are not owned/made/uploaded by latesttrickes On our last article about a lot of people asked about  Computer Hacking and this book is best for learning about Professional Pen testing For Web Application.

Index

Penetration Testing Web Applications

Web Applications—Some Basics

Discovery

Vulnerability Analysis

Attack Simulation Techniques and Tools—Web Server

Attack Simulation Techniques and Tools—Web Application

Attack Simulation Techniques and Tools—Known Exploits

Attack Simulation Techniques and Tools—Web Services

Documentation and Presentation

Remediation

Your Lab

Basic SQL

Basic LDAP
XPath and XQuery

Injection Attack 

About the Author

Andres Andreu, CISSP-ISSAP, GSEC currently operates neuroFuzz Application Security LLC (http://www.neurofuzz.com), and has a strong background with the U.S. government. He served the United States of America in Information Technology and Security capacities within a “3-Letter” federal law enforcement agency. The bulk of his time there was spent building the IT Infrastructure and working on numerous intelligence software programs for one of the largest Title III Interception Operations within the continental U.S. He worked there for a decade and during that time he was the recipient of numerous agency awards for outstanding performance.

He holds a bachelor’s degree in Computer Science, graduating Summa Cum Laude with a 3.9 GPA from the American College of Computer and Informational Sciences. Mr. Andreu specializes in software, application, and Web services security, working with XML security, TCP and HTTP(S) level proxying technology, and strong encryption. He has many years of experience with technologies like LDAP, Web services (SOA, SOAP, and so on), enterprise applications, and application integration.

DOWNLOAD NOW