You need to be aware of numerous vulnerabilities in web development that could turn your code into a gateway for hackers and malware. This practical guide shows you the dangers lurking in your web applications, from authentication problems to cross-site scripting, from code injections to architecture attacks. It includes commented code examples of real malware and sample applications to try out.

From the contents:

These vulnerabilities you need to know about:

• The OWASP Top 10
• Test environment, tools, and utilities
• Exploring targets, gathering information
• State-based attacks: cookies, URLs, sessions, authentication, password security, hashes
• Cross-site scripting: reflected, persistent, DOM-based XSS
• SQL injections
• Other injections: OS code, XPATH, SOAP, SMTP, LDAP
• Directory traversal basics: buffer overflows, format strings.