Web Security Testing Cookbook. Systematic Techniques to Find Problems Fast - Helion

ebook

Autor: Paco Hope, Ben Walther
ISBN: 978-05-965-5403-3
stron: 314, Format: ebook
Data wydania: 2008-10-14
Księgarnia: Helion

Cena książki: 126,65 zł (poprzednio: 147,27 zł)
Oszczędzasz: 14% (-20,62 zł)

Osoby, które kupiły tę książkę, wybierały także »

Tagi: Bezpieczeństwo sieci | Bezpieczeństwo systemów | Bezpieczeństwo WWW | Hacking | Inne

Among the tests you perform on web applications, security testing is perhaps the most important, yet it's often the most neglected. The recipes in the Web Security Testing Cookbook demonstrate how developers and testers can check for the most common web security issues, while conducting unit tests, regression tests, or exploratory tests. Unlike ad hoc security assessments, these recipes are repeatable, concise, and systematic-perfect for integrating into your regular test suite.

Recipes cover the basics from observing messages between clients and servers to multi-phase tests that script the login and execution of web application features. By the end of the book, you'll be able to build tests pinpointed at Ajax functions, as well as large multi-step tests for the usual suspects: cross-site scripting and injection attacks. This book helps you:

Obtain, install, and configure useful-and free-security testing tools
Understand how your application communicates with users, so you can better simulate attacks in your tests
Choose from many different methods that simulate common attacks such as SQL injection, cross-site scripting, and manipulating hidden form fields
Make your tests repeatable by using the scripts and examples in the recipes as starting points for automated tests

Don't live in dread of the midnight phone call telling you that your site has been hacked. With Web Security Testing Cookbook and the free tools used in the book's examples, you can incorporate security coverage into your test suite, and sleep in peace.

Osoby które kupowały "Web Security Testing Cookbook. Systematic Techniques to Find Problems Fast", wybierały także:

Windows Server 2003. Bezpieczeństwo sieci 74,69 zł, (23,90 zł -68%)
Spring Security. Kurs video. Metody zabezpieczania aplikacji webowych 69,00 zł, (31,05 zł -55%)
Cyberbezpieczeństwo w bashu. Jak za pomocą wiersza poleceń prowadzić działania zaczepne i obronne 69,00 zł, (34,50 zł -50%)
Informatyka w kryminalistyce. Praktyczny przewodnik. Wydanie II 149,00 zł, (74,50 zł -50%)
Wojny w cyberprzestrzeni. Koncepcje, strategie i taktyki, dzięki którym przetrwasz i ocalisz swoją organizację 58,98 zł, (29,49 zł -50%)

Spis treści

Web Security Testing Cookbook. Systematic Techniques to Find Problems Fast eBook -- spis treści

Web Security Testing Cookbook
- SPECIAL OFFER: Upgrade this ebook with OReilly
- Foreword
- Preface
  - Who This Book Is For
  - Leveraging Free Tools
  - About the Cover
  - Organization
    - Section One: Basics
    - Section Two: Testing Techniques
    - Section Three: Advanced Techniques
  - Conventions Used in This Book
    - Typographic Conventions
    - Conventions in Examples
  - Using Code Examples
  - Safari Books Online
  - Comments and Questions
  - Acknowledgments
    - Paco Hope
    - Ben Walther
    - Our Reviewers
    - OReilly
- 1. Introduction
  - What Is Security Testing?
    - Providing Evidence
    - Fulfilling Requirements
    - Security Testing Is More of the Same
      - Boundary values
      - Equivalence classes
      - Security classes
  - What Are Web Applications?
    - Terminology
    - Fundamentals of HTTP
      - HTTP is client-server
      - HTTP is stateless
      - HTTP is simple text
  - Web Application Fundamentals
    - Building Blocks
      - The technology stack
    - Web Application Structures
      - Common components
      - One-layer web applications
      - Two-layer web applications
      - Three-layer web applications
      - The effect of layers on testing
  - Web App Security Testing
  - Its About the How
    - How, Not Why
    - How, Not What
    - How, Not Where
    - How, Not Who
    - How, Not When
    - Software Security, Not IT Security
- 2. Installing Some Free Tools
  - 2.1. Installing Firefox
    - Problem
    - Solution
    - Discussion
  - 2.2. Installing Firefox Extensions
    - Problem
    - Solution
    - Discussion
  - 2.3. Installing Firebug
    - Problem
    - Solution
    - Discussion
  - 2.4. Installing OWASPs WebScarab
    - Problem
    - Solution
    - Discussion
  - 2.5. Installing Perl and Packages on Windows
    - Problem
    - Solution
    - Discussion
  - 2.6. Installing Perl and Using CPAN on Linux, Unix, or OS X
    - Problem
    - Solution
    - Discussion
  - 2.7. Installing CAL9000
    - Problem
    - Solution
    - Discussion
  - 2.8. Installing the ViewState Decoder
    - Problem
    - Solution
    - Discussion
  - 2.9. Installing cURL
    - Problem
    - Solution
    - Discussion
  - 2.10. Installing Pornzilla
    - Problem
    - Solution
    - Discussion
  - 2.11. Installing Cygwin
    - Problem
    - Solution
    - Discussion
  - 2.12. Installing Nikto 2
    - Problem
    - Solution
    - Discussion
  - 2.13. Installing Burp Suite
    - Problem
    - Solution
    - Discussion
  - 2.14. Installing Apache HTTP Server
    - Problem
    - Solution
    - Discussion
- 3. Basic Observation
  - 3.1. Viewing a Pages HTML Source
    - Problem
    - Solution
    - Discussion
  - 3.2. Viewing the Source, Advanced
    - Problem
    - Solution
    - Discussion
  - 3.3. Observing Live Request Headers with Firebug
    - Problem
    - Solution
    - Discussion
  - 3.4. Observing Live Post Data with WebScarab
    - Problem
    - Solution
    - Discussion
  - 3.5. Seeing Hidden Form Fields
    - Problem
    - Solution
    - Discussion
  - 3.6. Observing Live Response Headers with TamperData
    - Problem
    - Solution
    - Discussion
  - 3.7. Highlighting JavaScript and Comments
    - Problem
    - Solution
    - Discussion
  - 3.8. Detecting JavaScript Events
    - Problem
    - Solution
    - Discussion
  - 3.9. Modifying Specific Element Attributes
    - Problem
    - Solution
    - Discussion
  - 3.10. Track Element Attributes Dynamically
    - Problem
    - Solution
    - Discussion
  - 3.11. Conclusion
- 4. Web-Oriented Data Encoding
  - 4.1. Recognizing Binary Data Representations
    - Problem
    - Solution
      - Hexadecimal data
      - Octal data
      - Base 36
    - Discussion
  - 4.2. Working with Base 64
    - Problem
    - Solution
      - Decode a string
      - Encode the entire contents of a file
      - Encode a simple string
    - Discussion
      - Recognizing Base 64
      - Other tools
  - 4.3. Converting Base-36 Numbers in a Web Page
    - Problem
    - Solution
    - Discussion
  - 4.4. Working with Base 36 in Perl
    - Problem
    - Solution
    - Discussion
  - 4.5. Working with URL-Encoded Data
    - Problem
    - Solution
      - Encode
      - Decode
    - Discussion
  - 4.6. Working with HTML Entity Data
    - Problem
    - Solution
    - Discussion
      - Variations on a theme
  - 4.7. Calculating Hashes
    - Problem
    - Solution
      - MD5
      - SHA1
    - Discussion
      - MD5 hashes
      - SHA-1 hashes
  - 4.8. Recognizing Time Formats
    - Problem
    - Solution
    - Discussion
  - 4.9. Encoding Time Values Programmatically
    - Problem
    - Solution
    - Discussion
  - 4.10. Decoding ASP.NETs ViewState
    - Problem
    - Solution
    - Discussion
  - 4.11. Decoding Multiple Encodings
    - Problem
    - Solution
    - Discussion
- 5. Tampering with Input
  - 5.1. Intercepting and Modifying POST Requests
    - Problem
    - Solution
    - Discussion
  - 5.2. Bypassing Input Limits
    - Problem
    - Solution
    - Discussion
  - 5.3. Tampering with the URL
    - Problem
    - Solution
    - Discussion
  - 5.4. Automating URL Tampering
    - Problem
    - Solution
    - Discussion
  - 5.5. Testing URL-Length Handling
    - Problem
    - Solution
    - Discussion
  - 5.6. Editing Cookies
    - Problem
    - Solution
    - Discussion
  - 5.7. Falsifying Browser Header Information
    - Problem
    - Solution
    - Discussion
  - 5.8. Uploading Files with Malicious Names
    - Problem
    - Solution
    - Discussion
      - Code injection
        
        Cross-site-scripting
        
        SQL injection
  - 5.9. Uploading Large Files
    - Problem
    - Solution
    - Discussion
  - 5.10. Uploading Malicious XML Entity Files
    - Problem
    - Solution
    - Discussion
  - 5.11. Uploading Malicious XML Structure
    - Problem
    - Solution
    - Discussion
  - 5.12. Uploading Malicious ZIP Files
    - Problem
    - Solution
    - Description
  - 5.13. Uploading Sample Virus Files
    - Problem
    - Solution
    - Description
  - 5.14. Bypassing User-Interface Restrictions
    - Problem
    - Solution
    - Discussion
- 6. Automated Bulk Scanning
  - 6.1. Spidering a Website with WebScarab
    - Problem
    - Solution
    - Discussion
  - 6.2. Turning Spider Results into an Inventory
    - Problem
    - Solution
    - Discussion
  - 6.3. Reducing the URLs to Test
    - Problem
    - Solution
    - Discussion
  - 6.4. Using a Spreadsheet to Pare Down the List
    - Problem
    - Solution
    - Discussion
  - 6.5. Mirroring a Website with LWP
    - Problem
    - Solution
    - Discussion
  - 6.6. Mirroring a Website with wget
    - Problem
    - Solution
    - Discussion
  - 6.7. Mirroring a Specific Inventory with wget
    - Problem
    - Solution
    - Discussion
  - 6.8. Scanning a Website with Nikto
    - Problem
    - Solution
    - Discussion
  - 6.9. Interpretting Niktos Results
    - Problem
    - Solution
    - Discussion
  - 6.10. Scan an HTTPS Site with Nikto
    - Problem
    - Solution
    - Discussion
  - 6.11. Using Nikto with Authentication
    - Problem
    - Solution
    - Discussion
  - 6.12. Start Nikto at a Specific Starting Point
    - Problem
    - Solution
    - Discussion
  - 6.13. Using a Specific Session Cookie with Nikto
    - Problem
    - Solution
    - Discussion
  - 6.14. Testing Web Services with WSFuzzer
    - Problem
    - Solution
    - Discussion
  - 6.15. Interpreting WSFuzzers Results
    - Problem
    - Solution
    - Discussion
- 7. Automating Specific Tasks with cURL
  - 7.1. Fetching a Page with cURL
    - Problem
    - Solution
    - Discussion
  - 7.2. Fetching Many Variations on a URL
    - Problem
    - Solution
    - Discussion
  - 7.3. Following Redirects Automatically
    - Problem
    - Solution
    - Discussion
  - 7.4. Checking for Cross-Site Scripting with cURL
    - Problem
    - Solution
    - Discussion
  - 7.5. Checking for Directory Traversal with cURL
    - Problem
    - Solution
    - Discussion
  - 7.6. Impersonating a Specific Kind of Web Browser or Device
    - Problem
    - Solution
    - Discussion
      - Providing customized content
      - Reacting to User-Agent is rare
  - 7.7. Interactively Impersonating Another Device
    - Problem
    - Solution
    - Discussion
  - Imitating a Search Engine with cURL
    - Problem
    - Solution
    - Discussion
  - 7.8. Faking Workflow by Forging Referer Headers
    - Problem
    - Solution
    - Discussion
  - 7.9. Fetching Only the HTTP Headers
    - Problem
    - Solution
    - Discussion
  - 7.10. POSTing with cURL
    - Problem
    - Solution
    - Discussion
  - 7.11. Maintaining Session State
    - Problem
    - Solution
    - Discussion
  - 7.12. Manipulating Cookies
    - Problem
    - Solution
    - Discussion
  - 7.13. Uploading a File with cURL
    - Problem
    - Solution
    - Discussion
  - 7.14. Building a Multistage Test Case
    - Problem
    - Solution
    - Discussion
      - Notes on execution
      - The pages that are fetched
      - How to build this script
  - 7.15. Conclusion
- 8. Automating with LibWWWPerl
  - 8.1. Writing a Basic Perl Script to Fetch a Page
    - Problem
    - Solution
    - Discussion
  - 8.2. Programmatically Changing Parameters
    - Problem
    - Solution
    - Discussion
  - 8.3. Simulating Form Input with POST
    - Problem
    - Solution
    - Discussion
  - 8.4. Capturing and Storing Cookies
    - Problem
    - Solution
    - Discussion
  - 8.5. Checking Session Expiration
    - Problem
    - Solution
    - Discussion
      - Bad session expirations
  - 8.6. Testing Session Fixation
    - Problem
    - Solution
    - Discussion
  - 8.7. Sending Malicious Cookie Values
    - Problem
    - Solution
    - Discussion
  - 8.8. Uploading Malicious File Contents
    - Problem
    - Solution
    - Description
  - 8.9. Uploading Files with Malicious Names
    - Problem
    - Solution
    - Description
  - 8.10. Uploading Viruses to Applications
    - Problem
    - Solution
    - Description
  - 8.11. Parsing for a Received Value with Perl
    - Problem
    - Solution
    - Discussion
  - 8.12. Editing a Page Programmatically
    - Problem
    - Solution
    - Discussion
  - 8.13. Using Threading for Performance
    - Problem
    - Solution
    - Discussion
- 9. Seeking Design Flaws
  - 9.1. Bypassing Required Navigation
    - Problem
    - Solution
    - Discussion
  - 9.2. Attempting Privileged Operations
    - Problem
    - Solution
    - Discussion
  - 9.3. Abusing Password Recovery
    - Problem
    - Solution
    - Discussion
  - 9.4. Abusing Predictable Identifiers
    - Problem
    - Solution
    - Discussion
  - 9.5. Predicting Credentials
    - Problem
    - Solution
    - Discussion
  - 9.6. Finding Random Numbers in Your Application
    - Problem
    - Solution
    - Discussion
  - Testing Random Numbers
    - Problem
    - Solution
    - Discussion
  - 9.7. Abusing Repeatability
    - Problem
    - Solution
    - Discussion
  - 9.8. Abusing High-Load Actions
    - Problem
    - Solution
    - Discussion
  - 9.9. Abusing Restrictive Functionality
    - Problem
    - Solution
    - Discussion
  - 9.10. Abusing Race Conditions
    - Problem
    - Solution
    - Description
- 10. Attacking AJAX
  - 10.1. Observing Live AJAX Requests
    - Problem
    - Solution
    - Discussion
  - 10.2. Identifying JavaScript in Applications
    - Problem
    - Solution
    - Discussion
  - 10.3. Tracing AJAX Activity Back to Its Source
    - Problem
    - Solution
    - Discussion
  - 10.4. Intercepting and Modifying AJAX Requests
    - Problem
    - Solution
    - Discussion
  - 10.5. Intercepting and Modifying Server Responses
    - Problem
    - Solution
    - Discussion
  - 10.6. Subverting AJAX with Injected Data
    - Problem
    - Solution
    - Discussion
  - 10.7. Subverting AJAX with Injected XML
    - Problem
    - Solution
    - Discussion
  - 10.8. Subverting AJAX with Injected JSON
    - Problem
    - Solution
    - Discussion
  - 10.9. Disrupting Client State
    - Problem
    - Solution
    - Discussion
  - 10.10. Checking for Cross-Domain Access
    - Problem
    - Solution
    - Discussion
  - 10.11. Reading Private Data via JSON Hijacking
    - Problem
    - Solution
    - Discussion
- 11. Manipulating Sessions
  - 11.1. Finding Session Identifiers in Cookies
    - Problem
    - Solution
  - 11.2. Finding Session Identifiers in Requests
    - Problem
    - Solution
    - Discussion
  - 11.3. Finding Authorization Headers
    - Problem
    - Solution
    - Discussion
  - 11.4. Analyzing Session ID Expiration
    - Problem
    - Solution
    - Discussion
  - 11.5. Analyzing Session Identifiers with Burp
    - Problem
    - Solution
    - Discussion
  - 11.6. Analyzing Session Randomness with WebScarab
    - Problem
    - Solution
    - Discussion
  - 11.7. Changing Sessions to Evade Restrictions
    - Problem
    - Solution
    - Discussion
  - 11.8. Impersonating Another User
    - Problem
    - Solution
    - Description
  - 11.9. Fixing Sessions
    - Problem
    - Solution
    - Description
  - 11.10. Testing for Cross-Site Request Forgery
    - Problem
    - Solution
    - Description
- 12. Multifaceted Tests
  - 12.1. Stealing Cookies Using XSS
    - Problem
    - Solution
    - Discussion
  - 12.2. Creating Overlays Using XSS
    - Problem
    - Solution
    - Discussion
  - 12.3. Making HTTP Requests Using XSS
    - Problem
    - Solution
    - Discussion
  - 12.4. Attempting DOM-Based XSS Interactively
    - Problem
    - Solution
    - Discussion
  - 12.5. Bypassing Field Length Restrictions (XSS)
    - Problem
    - Solution
    - Discussion
  - 12.6. Attempting Cross-Site Tracing Interactively
    - Problem
    - Solution
    - Discussion
  - 12.7. Modifying Host Headers
    - Problem
    - Solution
    - Discussion
  - 12.8. Brute-Force Guessing Usernames and Passwords
    - Problem
    - Solution
    - Discussion
  - 12.9. Attempting PHP Include File Injection Interactively
    - Problem
    - Solution
    - Discussion
  - 12.10. Creating Decompression Bombs
    - Problem
    - Solution
    - Discussion
  - 12.11. Attempting Command Injection Interactively
    - Problem
    - Solution
    - Discussion
  - 12.12. Attempting Command Injection Systematically
    - Problem
    - Solution
    - Discussion
  - 12.13. Attempting XPath Injection Interactively
    - Problem
    - Solution
    - Discussion
  - 12.14. Attempting Server-Side Includes (SSI) Injection Interactively
    - Problem
    - Solution
    - Discussion
  - 12.15. Attempting Server-Side Includes (SSI) Injection Systematically
    - Problem
    - Solution
    - Discussion
  - 12.16. Attempting LDAP Injection Interactively
    - Problem
    - Solution
    - Discussion
  - 12.17. Attempting Log Injection Interactively
    - Problem
    - Solution
    - Discussion
- Index
- About the Authors
- Colophon
- SPECIAL OFFER: Upgrade this ebook with OReilly