Penetration Testing with Java : A step-by-step pen testing handbook for Java applications

Description: The book provides a comprehensive exploration of Java security and penetration testing, starting with foundational topics such as secure coding practices and the OWASP Top 10 for web applications. The early chapters introduce penetration testing methodologies, including Java web applica...

全面介紹

Enregistré dans:
書目詳細資料
主要作者: Snoke, Nancy
格式: Livre numérique
語言:Anglais
出版: New Delhi : BPB Publications 2025.
Paris : Cyberlibris
在線閱讀:Accès Université d'Orléans et IFPM
提示: Couverture. https://static2.cyberlibris.com/books_upload/136pix/9789365899351.jpg
Cyberlibris (ScholarVox) corpus Informatique
Autres localisations: Voir dans le Sudoc
Edition sous un autre format:• Penetration Testing with Java, A step-by-step pen testing handbook for Java applications, Nancy Snoke, New Delhi, BPB Publications, 2025, 1 vol. (473 p.), 978-93-6589-935-1
LEADER 04181nam a22002177a 4500
001 1289600
008 250324s2025 xxg ||| |||| 00| 0 eng d
009 PPN283899999
041 0 |a eng 
100 1 |a Snoke, Nancy. 
245 1 0 |a Penetration Testing with Java :  |b A step-by-step pen testing handbook for Java applications   |c Nancy Snoke. 
260 |a New Delhi :  |b BPB Publications. 
260 |a Paris :  |b Cyberlibris,  |c 2025. 
500 |a Couverture. https://static2.cyberlibris.com/books_upload/136pix/9789365899351.jpg 
500 |a Cyberlibris (ScholarVox) corpus Informatique 
505 0 |a 1. Introduction: Java Security, Secure Coding, and Penetration Testing -- 2. Reconnaissance and Mapping -- 3. Hands-on with Web Proxies -- 4. Observability with SQL Injections -- 5. Misconfiguration with Default Values -- 6. CORS Exploitation -- 7. Exploring Vectors with DoS Attacks -- 8. Executing Business Logic Vulnerabilities -- 9. Authentication Protocols -- 10. Session Management -- 11. Authorization Practices -- 12. Java Deserialization Vulnerabilities -- 13. Java Remote Method Invocation Vulnerabilities -- 14. Java Native Interface Vulnerabilities -- 15. Static Analysis of Java Android Applications -- 16. Dynamic Analysis of Java Android Applications -- 17. Network Analysis of Java Android ApplicationsAppendix 
506 |a L'accès en ligne est réservé aux établissements ou bibliothèques ayant souscrit l'abonnement. Cyberlibris 
520 |a Description: The book provides a comprehensive exploration of Java security and penetration testing, starting with foundational topics such as secure coding practices and the OWASP Top 10 for web applications. The early chapters introduce penetration testing methodologies, including Java web application-specific mapping and reconnaissance techniques. The gathering of information through OSINT and advanced search techniques is highlighted, laying the crucial groundwork for testing. Proxy tools like Burp Suite and OWASP Zap are shown, offering insights into their configurations and capabilities for web application testing.Each chapter does a deep dive into specific vulnerabilities and attack vectors associated with Java web and mobile applications. Key topics include SQL injection, cross-site scripting (XSS), authentication flaws, and session management issues. Each chapter supplies background information, testing examples, and practical secure coding advice to prevent these vulnerabilities. There is a distinct focus on hands-on testing methodologies, which prepares readers for real-world security challenges.By the end of this book, you will be a confident Java security champion. You will understand how to exploit vulnerabilities to mimic real-world attacks, enabling you to proactively patch weaknesses before malicious actors can exploit them. Key Features: Learn penetration testing basics for Java applications ; Discover web vulnerabilities, testing techniques, and secure coding practices ; Explore Java Android security, SAST, DAST, and vulnerability mitigation. What you will learn: Study the OWASP Top 10 and penetration testing methods ; Gain secure coding and testing techniques for vulnerabilities like XSS and CORS ; Find out about authentication, cookie management, and secure session practices ; Master access control and authorization testing, including IDOR and privilege escalation ; Discover Android app security and tools for SAST, DAST, and exploitation. Who this book is for: This book is for Java developers, software developers, application developers, quality engineers, software testing teams, and security analysts. Prior knowledge of Java is required. Some application security knowledge is helpful 
776 0 |t Penetration Testing with Java  |o A step-by-step pen testing handbook for Java applications  |f Nancy Snoke  |c New Delhi  |n BPB Publications  |d 2025  |p 1 vol. (473 p.)  |z 978-93-6589-935-1 
856 4 |5 452349901:846855828  |u https://ezproxy.univ-orleans.fr/login?url=https://univ.scholarvox.com/book/88967980  |z Accès Université d'Orléans et IFPM 
997 |0 1289600  |1 Livre numérique  |a Ressource numérique  |b INSA  |b ENSA  |c 0/Bibliothèque numérique/  |c 1/Bibliothèque numérique/ScholarVox (ebooks)/