Hacking exposed Web applications
Joel Scambray, Mike Shema · Medical Entomology and Zoology · 2002
Part I: Reconnaissance 1: Introduction to Web Applications and Security 2: Profiling 3: Hacking Web Servers 4: Surveying the Application Part II: The Attack 5: Authentication 6: Authorization 7: Attacking Session State Management 8: Input Validation Attacks 9: Attacking Web Datastores 10: Attacking Web Services 11: Hacking Web Application Management 12: Web Client Hacking 13: Case Studies Part III: Appendixes A: Web Site Security Checklist B: Web Hacking Tools and Techniques Cribsheet C: Using Libwhisker D: UrlScan Installation and Configuration E: About the Companion Web Site