This section contains a list of Top Books useful for learning Penetration-Testing/Ethical Hacking regarding Web Application and Mobile.
Application Security
The only sustainable competitive advantage is the ability to learn faster than your competitors.
About
LinkedIn
- Follow Application Security on WordPress.com
Categories
- Attacks & Defence
- Apache MultiViews
- ASP.NET View State
- Blind XSS
- Change Password – Weak
- ClickJacking
- Content Security Policy
- Content sniffing
- Cookie Attributes
- Cross Domain Hijacking
- Cross Site Scripting
- Cross Site Tracing – XST
- CursorJacking
- Drag & Drop ClickJacking
- Error Codes & Custom 404s
- HTTP Header Injection
- HTTP Headers
- HTTP Parameter Pollution
- HTTP Strict Transport Security (HSTS)
- HTTPOnly Cookie
- Mime Sniffing
- Open Redirect
- QR Codes
- Reflected File Download (RFD)
- Server Side Request Forgery – SSRF
- ShellShock – bWAPP
- Spear Phishing
- TabNapping
- Unicode Transformation Issue
- Web Defacement – XSS
- ISSUES & INFOSEC
- Base 64 Encoding & Decoding
- Bash : 'Shell Shock' Vulnerabilty
- Blind XSS – PayPal
- Bypass antiXSS filter in Chrome and Safari
- Computer Security Best Practice
- DREAD – Threat Risk Modeling
- Fingerprint Scanning
- Flash Zero-Day
- FreakAttack
- Heartbleed OpenSSL bug
- HTML5 WebRTC – Local IP discovery
- IIS server vulnerability (MS15-034)
- Information Security Vulnerabilities & Threats
- Kerberos CVE-2014-068
- OpenSSL Patches
- Password Reuse – LinkedIn
- POODLE SSLv3 Vulnerability
- Reflected File Download (RFD)
- SANS – SWAT Developer Checklist
- SuperFish Adware- Lenovo
- Tweetdeck XSS – Self retweeting tweet with Twitter
- Twitter’s 3rd Party Application Threat
- Windows XP Registry Hack – 2019 Updates
- WinShock – Bug
- Kali – Backtrack
- Malware
- Network
- Reports
- 2013 – Application
- 2013 Global Security Report
- Climate Change to Climate Control: Securing the Cloud Computing Environment
- eForensics Magazine – Keep Your Web Applications Secure
- OS & Hardware Vulnerability Report
- PenTest Magazine – A Controlled Intrusion
- Rolling Stones Article – Hackers – The Geeks On The Front Line
- The Hack Back Strategy
- Test Standards
- Tools
- Training
- Vulnerabilities
- Attacks & Defence
- 2013 Apache Application Security ASP ASP.NET Bash Biometric Bug bWAPP clickjacking content security Cross Site Scripting CursorJacking Encryption environment variables Error Codes ethical hacking Exploit File Upload Fingerprint Scanning Firefox frame options google Google Chrome Browser Hackers hacking Hacking Browser HTML5 HTTP Headers HTTP Parameter Pollution IIS Information Disclosure internet iPhone IPV4 IPV6 it-security JSON Kali linkedin MIME sniffing Networking Network Security Nmap OpenSSL owasp OWASP Zap phishing Proxy QR Codes Reflected File Download RFD Rolling Stones SANS security security Add-ons Security Awarness Security Report Shell Shock TabNapping technology Testing test standards Tools Training Twitter Unicode url redirection Vulnerabilities vulnerability Vulnerability Scanner Web Defacement Web Development Windows XSS
