KaliLinuxWeb渗透测试第3版 pdf下载

　　《Kali Linux Web渗透测试 第3版（影印版）》展示了如何设置实验室，帮助你了解网站攻击的本质和机制，并且深入解释了经典的攻击方法。第3版针对新的Kali Linux改动以及最近的网络攻击进行了大量更新。在客户端攻击，尤其是模糊测试方面，Kali Linux的表现非常出色。
　　《Kali Linux Web渗透测试 第3版（影印版）》首先将为你全面的介绍黑客攻击和渗透测试的概念，你会看到在Kali Linux中使用的与Web应用程序攻击相关的工具。你将深入了解典型的SQL、命令注入缺陷以及多种利用这些缺陷的手法。Web渗透测试还需要对客户端攻击具备一般性的了解，而这可以通过对脚本和输入验证缺陷的长时间讨论来解决。还有一个非常重要的章节是关于加密算法实现上的缺陷，在这章里我们讨论了网络栈中与加密层有关的新问题。这类攻击的严重性不容小觑，对其的防范与大多数互联网用户密切相关，当然其中也少不了渗透测试员。
　　在《Kali Linux Web渗透测试 第3版（影印版）》的结尾，你会使用一种称为模糊测试的自动化技术来识别Web应用程序中的缺陷。最终，你将了解Web应用程序漏洞以及借助Kali Linux中的工具利用这些漏洞的方法

　　Gilberto Najera-Gutierrez is an experienced penetration tester currently working for one ofthe top security testing service providers in Australia. He obtained leading security andpenetration testing certifications， namely Offensive Security Certified Professional （OSCP），EC-Council Certified Security Administrator （ECSA）， and GIAC Exploit Researcher andAdvanced Penetration Tester （GXPN）； he also holds a Master's degree in Computer Sciencewith specialization in Artificial Intelligence.
　　Gilberto has been working as a penetration tester since 2013， and he has been a securityenthusiast for almost 20 years. He has successfully conducted penetration tests on networksand applications of some the biggest corporations， government agencies， and financialinstitutions in Mexico and Australia.

Preface

Chapter 1： Introduction to Penetration Testing and Web Applications
Proactive security testing
Different testing methodologies
Ethical hacking
Penetration testing
Vulnerability assessment
Security audits
Considerations when performing penetration testing
Rules of Engagement
The type and scope of testing
Client contact details
Client IT team notifications
Sensitive data handling
Status meeting and reports
The limitations of penetration testing
The need for testing web applications
Reasons to guard against attacks on web applications
Kali Linux
A web application overview for penetration testers
HTTP protocol
Knowing an HTTP request and response
The request header
The response header
HTTP methods
The GET method
The POST method
The HEAD method
The TRACE method
The PUT and DELETE methods
The OPTIONS method
Keeping sessions in HTTP
Cookies
Cookie flow between server and client
Persistent and nonpersistent cookies
Cookie parameters
HTML data in HTTP response
The server-side code
Multilayer web application
Three-layer web application design
Web services
Introducing SOAP and REST web services
HTTP methods in web services
XML and JSON
AJAX
Building blocks of AJAX
The AJAX workflow
HTML5
WebSockets
Summary

Chapter 2： Setting Up Your Lab with Kali Linux
Kali Linux
Latest improvements in Kali Linux
Installing Kali Linux
Virtualizing Kali Linux versus installing it on physical hardware
Installing on VirtualBox
Creating the virtual machine
Installing the system
Important tools in Kali Linux
CMS & Framework Identification
WPScan
JoomScan
CMSmap
Web Application Proxies
Burp Proxy
Customizing client interception
Modifying requests on the fly
Burp Proxy with HTTPS websites
Zed Attack Proxy
ProxyStrike
Web Crawlers and Directory Bruteforce
……

Chapter 3： Reconnaissance and Profiling the Web Sewer
Reconnaissance
Chapter 4： Authentication and Session Management Flaws
Authentication schemes in web applications
Chapter 5： Detecting and Exploiting Injection-Based Flaws
Command injection
Chapter 6： Finding and Exploiting Cross-Site Scripting （XSS）
Vulnerabilities
Chapter 7： Cross-Site Request Forgery， Identification， and
Exploitation
Chapter 8： Attacking Flaws in Cryptographic Implementations
Chapter 9： AJAX， HTML5， and Client-Side Attacks
Crawling AJAX applications
Chapter 10： Other Common Security Flaws in Web Applications
Insecure direct object references
Chapter 11 ： Using Automated Scanners on Web Applications
Considerations before using an automated scanner
Web application vulnerability scanners in Kali Linux

Index

　　Web applications， and more recently， web services are now a part of our daily life-from govemment procedures to soaal media to banking applications； they are even on mobile applications that send and receive information through the use of web services. Companies and people in general use web applications excessively daily. This fact alone makes web applications an attractive target for information thieves and other criminals. Hence， protecting these applications and their infrastructure from attacks is of prime importance for developers and owners.
　　In recent months， there has been news， the world over， of massive data breaches， abuse of the functionalities of applications for generating misinformation， or collection of user's information， which is then sold to advertising companies. People are starting to be more concerned of how their information is used and protected by the companies the trust with it. So， companies need to take proactive actions to prevent such leaks or attacks from happening. This is done in many fronts， from stricter quality controls during the development process to PR and managing the media presence when an incident is detected.
　　Because development cycles are shorter and much more dynamic with currentmethodologies， increasing the complexity in the multitude of technologies is required to create a modem web application. Also， some inherited bad practices developers are not able to fully test their web application from a security perspective， given that their priority is to deliver a working product on time. This complexity in web applications and in the development process itself creates the need for a professional specialized in security testing， who gets involved in the process and takes responsibility of putting the application to test from a security perspective， more speafically， from an attacker's point of view. This professional is a penetration tester.
　　In this book， we go from the basic concepts of web applications and penetration testing to cover every phase in the methodology； from gaining information to identifying possible weak spots to exploiting vulnerabilities. A key task of a penetration tester is this： once they find and verify a vulnerability， they need to advise the developers on how to fix such flaws and prevent them from recuning. Therefore， all the chapters in this book that are dedicated to identification and exploiration of vulnerabilities also include a section briefly covering how to prevent and mitigate each of such attacks.