Onofri Attacking and Exploiting Modern Web Applications

Discover the mindset, techniques, and tools to perform modern web attacks and exploitation
1. Auflage 2023
ISBN: 978-1-80181-196-5
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 338 Seiten

No detailed description available for "Attacking and Exploiting Modern Web Applications".

Autoren/Hrsg.

Onofri, Simone

Onofri, Donato

Weitere Mitwirkende

Meucci, Matteo

Fachgebiete

• Mathematik | Informatik EDV | Informatik Digital Lifestyle Internet, E-Mail, Social Media
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Web Services

Inhaltsverzeichnis

Table of Contents - Mindset and Methodologies
- Toolset for Web Attacks and Exploitation
- Attacking the Authentication Layer – a SAML Use Case
- Attacking Internet-Facing Web Applications – SQL Injection and Cross-Site Scripting (XSS) on WordPress
- Attacking IoT Devices – Command Injection and Path Traversal
- Attacking Electron JavaScript Applications – from Cross-Site Scripting (XSS) to Remote Command Execution (RCE)
- Attacking Ethereum Smart Contracts – Reentrancy, Weak Sources of Randomness, and Business Logic
- Continuing the Journey of Vulnerability Discovery

Über Autor(innen)

Onofri Simone:

Simone Onofri is a cybersecurity director with over two decades of experience in Red and Blue Teaming, vulnerability research, and product management. He has been an instructor at the Joint Intelligence and EW Training Centre and is associated with global companies such as HewlettPackard Enterprise. Simone has discovered various vulnerabilities and holds key certifications such as GXPN, GREM, GWAPT, OSCP, and OPSA. An active participant in organizations such as OWASP and ISECOM, he regularly speaks at major conferences, including TEDx. Simone is committed to inspiring and educating industry professionals and enthusiasts through his work, with a mission to create a positive influence.Onofri Donato:

Donato Onofri is a seasoned Red Team engineer. He has over a decade of experience in activities including reverse engineering, Red Teaming, threat research, and penetration testing. Passionate about both the offensive and defensive sides of cybersecurity, Donato has worked with industry leaders such as CrowdStrike and Hewlett-Packard Enterprise and as an advisor and engineer for governments and financial institutions. His research delves into state-of-the-art security techniques, malware analysis, and internals. He holds the GREM, GXPN, OSCP, OSCE, and OSWE certifications, and his expertise is underscored by multiple recognitions for vulnerability discovery.