Hands-on Penetration Testing for Web Applications: Run Web Security Testing on Modern Applications Using Nmap, Burp Suite and Wireshark - CyberSecurity Summary | OndaCast
A comprehensive guide for security professionals and testers, detailing methodologies for identifying and exploiting numerous web application vulnerabilities. It extensively covers topics like authentication flaws, session management issues, access controls, injection attacks (such as SQL and XML injection), and Cross-Site Scripting (XSS), using tools like Nmap, Burp Suite, and Wireshark. Furthermore, the book dedicates chapters to mitigation techniques, static code analysis (SAST), and automated attack tools, providing a thorough resource for improving application security posture.