or
Sign in to turn on 1-Click ordering.
 
 
More Buying Choices
26 used & new from £11.39

Have one to sell? Sell yours here
 
   
Professional Pen Testing for Web Applications (Programmer to Programmer)
 
 

Professional Pen Testing for Web Applications (Programmer to Programmer) (Paperback)

by Andres Andreu (Author)
5.0 out of 5 stars  See all reviews (1 customer review)
RRP: £25.99
Price: £16.80 & this item Delivered FREE in the UK with Super Saver Delivery. See details and conditions
You Save: £9.19 (35%)
o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o
In stock.
Dispatched from and sold by Amazon.co.uk. Gift-wrap available.

Only 3 left in stock--order soon (more on the way).

Want guaranteed delivery by Tuesday, November 24? Choose Express delivery at checkout. See Details
20 new from £11.48 6 used from £11.39

Special Offers and Product Promotions


Frequently Bought Together

Professional Pen Testing for Web Applications (Programmer to Programmer) + The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws + How to Break Web Software: Functional and Security Testing of Web Applications and Web Services
Price For All Three: £49.85

Show availability and delivery details


Customers Who Bought This Item Also Bought

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws

by Dafydd Stuttard
5.0 out of 5 stars (3)  £20.59
How to Break Web Software: Functional and Security Testing of Web Applications and Web Services

How to Break Web Software: Functional and Security Testing of Web Applications and Web Services

by Mike Andrews
4.7 out of 5 stars (3)  £12.46
Cross Site Scripting Attacks: Cross Site Scripting Exploits and Defense

Cross Site Scripting Attacks: Cross Site Scripting Exploits and Defense

by Seth Fogie
4.3 out of 5 stars (3)  £31.15
Hacking Exposed Web 2.0: Web 2.0 Security Secrets and Solutions

Hacking Exposed Web 2.0: Web 2.0 Security Secrets and Solutions

by Rich Cannings
£17.57
Gray Hat Hacking, Second Edition: The Ethical Hacker's Handbook

Gray Hat Hacking, Second Edition: The Ethical Hacker's Handbook

by Shon Harris
5.0 out of 5 stars (3)  £19.64
Explore similar items

Product details

  • Paperback: 522 pages
  • Publisher: John Wiley & Sons (30 Jun 2006)
  • Language English
  • ISBN-10: 0471789666
  • ISBN-13: 978-0471789666
  • Product Dimensions: 22.9 x 18.3 x 3.3 cm
  • Average Customer Review: 5.0 out of 5 stars  See all reviews (1 customer review)
  • Amazon.co.uk Sales Rank: 346,387 in Books (See Bestsellers in Books)

    Popular in this category:

    #59 in  Books > Computing & Internet > Web Development > Software Testing
  • See Complete Table of Contents

Customers Viewing This Page May Be Interested in These Sponsored Links

  (What is this?)
   Performance Testing Tool opens new browser window
www.ocsystems.com  -  Measure performance for web apps. Free trial - install in 5 minutes 
   Web application testing opens new browser window
www.seapine.com  -  Web Application Testing Tool. Test FF / IE with QA Wizard Pro. 
   Website Testing Services opens new browser window
www.betabreakers.com  -  Software & Internet QA Solutions Testing Worldwide for Twenty Years 
  
 

Product Description

Product Description

There is no such thing as "perfect security" when it comes to keeping all systems intact and functioning properly. Good penetration (pen) testing creates a balance that allows a system to be secure while simultaneously being fully functional. With this book, you′ll learn how to become an effective penetrator (i.e., a white hat or ethical hacker) in order to circumvent the security features of a Web application so that those features can be accurately evaluated and adequate security precautions can be put in place.

After a review of the basics of web applications, you′ll be introduced to web application hacking concepts and techniques such as vulnerability analysis, attack simulation, results analysis, manuals, source code, and circuit diagrams. These web application hacking concepts and techniques will prove useful information for ultimately securing the resources that need your protection.

What you will learn from this book
∗ Surveillance techniques that an attacker uses when targeting a system for a strike
∗ Various types of issues that exist within the modern day web application space
∗ How to audit web services in order to assess areas of risk and exposure
∗ How to analyze your results and translate them into documentation that is useful for remediation
∗ Techniques for pen–testing trials to practice before a live project

Who this book is for

This book is for programmers, developers, and information security professionals who want to become familiar with web application security and how to audit it.

Wrox Professional guides are planned and written by working programmers to meet the real–world needs of programmers, developers, and IT professionals. Focused and relevant, they address the issues technology professionals face every day. They provide examples, practical solutions, and expert education in new technologies, all designed to help programmers do a better job.


From the Back Cover

There is no such thing as "perfect security" when it comes to keeping all systems intact and functioning properly. Good penetration (pen) testing creates a balance that allows a system to be secure while simultaneously being fully functional. With this book, you′ll learn how to become an effective penetrator (i.e., a white hat or ethical hacker) in order to circumvent the security features of a Web application so that those features can be accurately evaluated and adequate security precautions can be put in place.

After a review of the basics of web applications, you′ll be introduced to web application hacking concepts and techniques such as vulnerability analysis, attack simulation, results analysis, manuals, source code, and circuit diagrams. These web application hacking concepts and techniques will prove useful information for ultimately securing the resources that need your protection.

What you will learn from this book

  • Surveillance techniques that an attacker uses when targeting a system for a strike
  • Various types of issues that exist within the modern day web application space
  • How to audit web services in order to assess areas of risk and exposure
  • How to analyze your results and translate them into documentation that is useful for remediation
  • Techniques for pen–testing trials to practice before a live project

Who this book is for

This book is for programmers, developers, and information security professionals who want to become familiar with web application security and how to audit it.

Wrox Professional guides are planned and written by working programmers to meet the real–world needs of programmers, developers, and IT professionals. Focused and relevant, they address the issues technology professionals face every day. They provide examples, practical solutions, and expert education in new technologies, all designed to help programmers do a better job.


Inside This Book (Learn More)
Explore More
Concordance
Browse Sample Pages
Front Cover | Copyright | Table of Contents | Excerpt | Index | Back Cover
Search inside this book:

Tag this product

 (What's this?)
Think of a tag as a keyword or label you consider is strongly related to this product.
Tags will help all customers organize and find favorite items.
Your tags: Add your first tag
 

What Do Customers Ultimately Buy After Viewing This Item?


 

Customer Reviews

1 Review
5 star:
 (1)
4 star:    (0)
3 star:    (0)
2 star:    (0)
1 star:    (0)
 
 
 
 
 
Average Customer Review
5.0 out of 5 stars (1 customer review)
 
 
 
 
Share your thoughts with other customers:
Most Helpful Customer Reviews

 
4 of 4 people found the following review helpful:
5.0 out of 5 stars A must for web app security testing!, 3 Oct 2006
By J. C. Westcott "Infosec Consultant" (London, UK) - See all my reviews
(REAL NAME)   
If you're interested in web application security assessment then this is definately one for your book shelf. With the focus of penetration testing moving more and more toward web apps this book is a certainly a timely release..

The book is structured well covering all the areas one would expect of a title on this subject. Chapter one covers the need for penetration testing, business requirements and methodology. Some web application basics follow with an overview of technologies and architecture. After a chapter on discovery we get to the meat of the book covering vulnerability analysis, attack simulation, tools and exploits. Testing is addressed both from a manual standpoint and with automated tools. A short chapter on documenting and reporting findings is followed by one on remediation techniques. This gives guidance on how to approach remediation in general and on an ongoing basis rather than the specifics of vulnerability. I like the chapter on building a test environment, the tools required and perhaps most useful of all - how to setup a collection of web application test targets.

All in all a sound book - thoroughly recommended for anyone working or interested in web security testing.
Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)


Share your thoughts with other customers: Create your own review
 
 
 
Only search this product's reviews



Customer Discussions

This product's forum
Discussion Replies Latest Post
No discussions yet

Ask questions, Share opinions, Gain insight
Start a new discussion
Topic:
First post:
Prompts for sign-in
 

   


Listmania!


Look for similar items by category


Look for similar items by subject


Feedback

Ad

Your Recent History

 (What's this?)

After viewing product detail pages or search results, look here to find an easy way to navigate back to pages you are interested in.