Hands-on Penetration Testing for Web Applications:

Run Web Security Testing on Modern Applications Using Nmap, Burp Suite and Wireshark (Paperback)

Author: Richa Gupta

Richa Gupta (Author)
Visit Author Page
Books by him and info about author and more.

Are you a Author?
Learn more here

Save 16%
MRP: 99900
You Pay: 84915
You save: 149.85
Leadtime to ship in days (default): Usually ships in 2 days
In stock
Reward points: 8 points
Our advantages
  • — SMS notification
  • — Return and exchange
  • — Different payment methods
  • — Best price
  • — Personalised Service
AuthorRicha Gupta Leadtime to ship in days (default)Usually ships in 2 days

Learn how to build an end-to-end Web application security testing framework

Key Features
● Exciting coverage on vulnerabilities and security loopholes in modern web applications.
● Practical exercises and case scenarios on performing pentesting and identifying security breaches.
● Cutting-edge offerings on implementation of tools including nmap, burp suite and wireshark.

Hands-on Penetration Testing for Web Applications offers readers with knowledge and skillset to identify, exploit and control the security vulnerabilities present in commercial web applications including online banking, mobile payments and e-commerce applications.

We begin with exposure to modern application vulnerabilities present in web applications. You will learn and gradually practice the core concepts of penetration testing and OWASP Top Ten vulnerabilities including injection, broken authentication and access control, security misconfigurations and cross-site scripting (XSS). You will then gain advanced skillset by exploring the methodology of security testing and how to work around security testing as a true security professional. This book also brings cutting-edge coverage on exploiting and detecting vulnerabilities such as authentication flaws, session flaws, access control flaws, input validation flaws etc. You will discover an end-to-end implementation of tools such as nmap, burp suite, and wireshark. You will then learn to practice how to execute web application intrusion testing in automated testing tools and also to analyze vulnerabilities and threats present in the source codes.

By the end of this book, you will gain in-depth knowledge of web application testing framework and strong proficiency in exploring and building high secured web applications.

What you will learn
● Complete overview of concepts of web penetration testing.
● Learn to secure against OWASP TOP 10 web vulnerabilities.
● Practice different techniques and signatures for identifying vulnerabilities in the source code of the web application.
● Discover security flaws in your web application using most popular tools like nmap and wireshark.
● Learn to respond modern automated cyber attacks with the help of expert-led tips and tricks.
● Exposure to analysis of vulnerability codes, security automation tools and common security flaws.

Who this book is for
This book is for Penetration Testers, ethical hackers, and web application developers. People who are new to security testing will also find this book useful. Basic knowledge of HTML, JavaScript would be an added advantage.

Table of Contents
1. Why Application Security?
2. Modern application Vulnerabilities
3. Web Pentesting Methodology
4. Testing Authentication
5. Testing Session Management
6. Testing Secure Channels
7. Testing Secure Access Control
8. Sensitive Data and Information disclosure
9. Testing Secure Data validation
10. Attacking Application Users: Other Techniques
11. Testing Configuration and Deployment
12. Automating Custom Attacks
13. Pentesting Tools
14. Static Code Analysis
15. Mitigations and Core Defense Mechanisms

About the Author
Richa Gupta is a Senior Security test engineer at Altran, where she is responsible for delivering Security Solutions to different financial, digital and retail verticals. Her 7 years of experience in the industry have been dominated by the technical aspects of application security, from the dual perspectives of a consulting and end-user implementation role. She has done attack-based security assessment and penetration testing. She has worked extensively with large-scale web application deployments in the Retail services industry. She has worked on many cloud solutions like AWS, Azure, GCP.

She is a certified penetration tester holding Certified Ethical Hacking (CEH) certification.

Richa Gupta
Condition Type
Country Origin
Gift Wrap
Leadtime to ship in days (default)
Usually ships in 2 days
BPB Publications
Find similar

No posts found

Have you used the product?

Tell us something about it and help others to make the right decision

Write a review
Possibly you may be interested
  • Forthcoming/Pre-Order
  • Bestsellers
  • Recently Viewed
Fast and high quality delivery

Our company makes delivery all over the country

Quality assurance and service

We offer only those goods, in which quality we are sure

Returns within 30 days

You have 30 days to test your purchase