Burp Suite Cookbook - Second Edition: Web application security made easy with Burp Suite (in English)
Synopsis "Burp Suite Cookbook - Second Edition: Web application security made easy with Burp Suite (in English)"
Find and fix security vulnerabilities in your web applications with Burp SuiteKey FeaturesSet up and optimize Burp Suite to maximize its effectiveness in web application security testingExplore how Burp Suite can be used to execute various OWASP test casesGet to grips with the essential features and functionalities of Burp SuitePurchase of the print or Kindle book includes a free PDF eBookBook DescriptionWith its many features, easy-to-use interface, and flexibility, Burp Suite is the top choice for professionals looking to strengthen web application and API security.This book offers solutions to challenges related to identifying, testing, and exploiting vulnerabilities in web applications and APIs. It provides guidance on identifying security weaknesses in diverse environments by using different test cases. Once you've learned how to configure Burp Suite, the book will demonstrate the effective utilization of its tools, such as Live tasks, Scanner, Intruder, Repeater, and Decoder, enabling you to evaluate the security vulnerability of target applications. Additionally, you'll explore various Burp extensions and the latest features of Burp Suite, including DOM Invader.By the end of this book, you'll have acquired the skills needed to confidently use Burp Suite to conduct comprehensive security assessments of web applications and APIs.What you will learnPerform a wide range of tests, including authentication, authorization, business logic, data validation, and client-side attacksUse Burp Suite to execute OWASP test cases focused on session managementConduct Server-Side Request Forgery (SSRF) attacks with Burp SuiteExecute XML External Entity (XXE) attacks and perform Remote Code Execution (RCE) using Burp Suite's functionalitiesUse Burp to help determine security posture of applications using GraphQLPerform various attacks against JSON Web Tokens (JWTs)Who this book is forIf you are a beginner- or intermediate-level web security enthusiast, penetration tester, or security consultant preparing to test the security posture of your applications and APIs, this is the book for you.Table of ContentsGetting Started with Burp SuiteGetting to Know the Burp Suite of ToolsConfiguring, Crawling, Auditing, and Reporting with BurpAssessing Authentication SchemesAssessing Authorization ChecksAssessing Session Management MechanismsAssessing Business LogicEvaluating Input Validation ChecksAttacking the ClientWorking with Burp Suite Macros and ExtensionsImplementing Advanced Topic Attacks
