“XSS Attacks: Cross Site Scripting Exploits and Defense” is a book written by Seth Fogie and Jeremiah Grossman. It is a comprehensive guide to understanding, identifying, and defending against cross-site scripting (XSS) attacks, which are one of the most common and potentially damaging types of web application vulnerabilities.
The book covers a wide range of topics related to XSS attacks, including:
- Introduction to XSS Attacks: The book begins by defining what XSS attacks are and explaining how they work, including the different types of XSS attacks (reflected, stored, and DOM-based).
- Identifying XSS Vulnerabilities: This section covers the process of identifying XSS vulnerabilities in web applications, including using tools like Burp Suite and OWASP ZAP.
- Exploiting XSS Vulnerabilities: This section covers the process of exploiting XSS vulnerabilities, including using techniques like cookie theft and keylogging.
- Defending Against XSS Attacks: This section covers various techniques for defending against XSS attacks, including using input validation, output encoding, and Content Security Policy (CSP).
- Real-World Examples: The book includes real-world examples of XSS attacks, including high-profile attacks like the MySpace worm and the Samy worm.
Overall, “XSS Attacks: Cross Site Scripting Exploits and Defense” is a comprehensive guide to understanding and defending against XSS attacks. It’s suitable for both beginners and experienced professionals looking to enhance their knowledge of web application security.
Download
Buy
The post XSS Attacks – Cross Site Scripting Exploits and Defense appeared first on Book Drive.