Web Application Hacking

Abstract

During the early computing era, hackers and attackers targeted operating systems and infrastructure-level components to compromise the systems. But today’s operating systems and other infrastructure components are comparatively mature in terms of security, making it hard for attackers to intrude. With increasing demand for and use of web applications, attackers are now targeting web application vulnerabilities to compromise systems. This chapter introduces common web application vulnerabilities, like SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), and others, along with testing methodology and mitigations.