Over 80 recipes on how to identify, exploit, and test web application security with Kali Linux 2About This BookFamiliarize yourself with the most common web vulnerabilities a web application faces, and understand how attackers take advantage of themSet up a penetration testing lab to conduct a preliminary assessment of attack surfaces and run exploitsLearn how to prevent vulnerabilities in web applications before an attacker can make the most of itWho This Book Is ForThis book is for IT professionals, web developers, security enthusiasts, and security professionals who want an accessible reference on how to find, exploit, and prevent security vulnerabilities in web applications. You should know the basics of operating a Linux environment and have some exposure to security technologies and tools.What You Will LearnSet up a penetration testing laboratory in a secure wayFind out what information is useful to gather when performing penetration tests and where to look for itUse crawlers and spiders to investigate an entire website in minutesDiscover security vulnerabilities in web applications in the web browser and using command-line toolsImprove your testing efficiency with the use of automated vulnerability scannersExploit vulnerabilities that require a complex setup, run custom-made exploits, and prepare for extraordinary scenariosSet up Man in the Middle attacks and use them to identify and exploit security flaws within the communication between users and the web serverCreate a malicious site that will find and exploit vulnerabilities in the user's web browserRepair the most common web vulnerabilities and understand how to prevent them becoming a threat to a site's securityIn DetailWeb applications are a huge point of attack for malicious hackers and a critical area for security professionals and penetration testers to lock down and secure. Kali Linux is a Linux-based penetration testing platform and operating system that provides a huge array of testing tools, many of which can be used specifically to execute web penetration testing.This book will teach you, in the form step-by-step recipes, how to detect a wide array of vulnerabilities, exploit them to analyze their consequences, and ultimately buffer attackable surfaces so applications are more secure, for you and your users.Starting from the setup of a testing laboratory, this book will give you the skills you need to cover every stage of a penetration test: from gathering information about the system and the application to identifying vulnerabilities through manual testing and the use of vulnerability scanners to both basic and advanced exploitation techniques that may lead to a full system compromise. Finally, we will put this into the context of OWASP and the top 10 web application vulnerabilities you are most likely to encounter, equipping you with the ability to combat them effectively. By the end of the book, you will have the required skills to identify, exploit, and prevent web application vulnerabilities.Style and approachTaking a recipe-based approach to web security, this book has been designed to cover each stage of a penetration test, with de*ions on how tools work and why certain programming or configuration practices can become security vulnerabilities that may put a whole system, or network, at risk. Each topic is presented as a sequence of tasks and contains a proper explanation of why each task is performed and what it accomplishes.

This is a stepbystep guide that will help you understand disaster recovery using VMware vSphere Replication 5.5 and VMware vCenter Site Recovery Manager (SRM) 5.5. The topics and configuration procedures are accompanied with relevant screenshots, flowcharts, and logical diagrams that makes grasping the concepts easier. This book is a guide for anyone who is keen on using vSphere Replication or vCenter Site Recovery Manager as a disaster recovery solution. This is an excellent handbook for solution architects, administrators, on-field engineers, and support professionals. Although the book assumes that the reader has some basic knowledge of data center virtualization using VMware vSphere, it can still be a very good reference for anyone who is new to virtualization.

Written in an easy-to-follow, example-driven format, there are plenty of stepbystep instructions to help get you started! The book has a friendly approach, with the opportunity to learn by experimenting. If you are a BI and Data Warehouse developer new to Microsoft Business Intelligence, and looking to get a good understanding of the different components of Microsoft SQL Server for Business Intelligence, this book is for you. It’s assumed that you will have some experience in databases systems and T-SQL. This book is will give you a good upshot view of each component and scenarios featuring the use of that component in Data Warehousing and Business Intelligence systems.

This book is an easytofollow guide full of handson examples of administration tasks and valuable information about security. Each topic is explained and placed in context, and for the more inquisitive readers, there are more indepth details of the concepts used. If you are an application server administrator or a Java developer with some experience with previous versions of JBoss AS and you want to familiarize yourself with WildFly, then this book is ideal for you.

Filled with practical, step-by-step instructions and clear explanations for the most important and useful tasks. This is a Packt Instant How-to guide, which provides concise and clear recipes for getting started with Hadoop.This book is for big data enthusiasts and would-be Hadoop programmers. It is also meant for Java programmers who either have not worked with Hadoop at all, or who know Hadoop and MapReduce but are not sure how to deepen their understanding.

This book is a detailed, practical, handson guide packed with reallife scenarios and examples which will show you how to implement an ElasticSearch search engine on your own websites. If you are a web developer or a user who wants to learn more about ElasticSearch, then this is the book for you. You do not need to know anything about ElastiSeach, Java, or Apache Lucene in order to use this book, though basic knowledge about databases and queries is required.

This book is a step-by-step tutorial with a lot of screenshots that help to explain the concept better. This book will cover the building of a 3D game for Windows Phone using XNA. We won’t explain the C# programming language itself, nor object-oriented programming.We will however explain the aspects of game development thoroughly, so don’t worry if you have never written a 3D game. We will cover all the basics, included the much dreaded math. This is the right book for anyone, regardless of age and gender, if: You are interested in game development You want to start building games for Windows Phone You have some programming knowledge. In this book, we will first go over the technical topics, and end up building a 3D game for Windows Phone 7 together!

This is a stepbystep, taskbased, practical guide to learning and getting your basic XenDesktop 7.x site up and running. It is fast, easy, and makes learning desktop and application virtualization simple. If you are a system administrator, consultant, or beginner who wants to implement and administer Citrix XenDesktop sites, then this book is for you. Familiarity with virtualization of desktops and applications and datacenter concepts will be helpful. The ability to read network diagrams and understand servers, data flow, clients, devices, and the interworking of these pieces will be beneficial.

This is a handson guide that provides exemplary coverage of all the features and concepts related to PTVS. The book is intended for developers who are aiming to enhance their productivity in Python projects with automation tools that Visual Studio provides for the .Net community. Some basic knowledge of Python programming is essential.

A comprehensive guide that covers advanced tasks performed with the CryENGINE system using interesting examples and illustrations demonstrating each of its features. This book is designed for developers who already have a basic understanding of CryENGINE and who want to take their skills to the next level. Whether you are a hobbyist developer or you are working on an AAA project, Mastering CryENGINE will help you enhance your CryENGINE proficiency.

Written as an interactive tutorial, this book covers the core of Kali Linux with realworld examples and stepbystep instructions to provide professional guidelines and recommendations for you. The book is designed in a simple and intuitive manner that allows you to explore the whole Kali Linux testing process or study parts of it individually. If you are an IT security professional who has a basic knowledge of Unix/Linux operating systems, including an awareness of information security factors, and want to use Kali Linux for penetration testing, then this book is for you.

This book is a tutorial guide that covers each topic in depth with examples. The stepbystep approach will help you better understand each task as you will have to perform them frequently when utilizing the services. If you are a Dynamics AX developer, new or experienced who wants to implement services with Microsoft Dynamics AX 2012, then this book is for you. A basic understanding of MorphX and X++ is assumed, but the stepbystep instructions are easy to follow even for beginners. Some examples use C# and .NET, so experience with Visual Studio is a plus but not a must.

This book follows a stepbystep tutorial approach with some realworld scenarios that vSphere businesses will be required to overcome every day. This book also discusses creating and configuring virtual machines and also covers monitoring virtual machine performance and resource allocation options. This book is for VMware administrators who want to build their knowledge of virtual machine administration and configuration. It’s assumed that you have some experience with virtualization administration and vSphere.

This book uses a stepbystep approach to teach you how to design, deploy, and manage a Horizon Workspace based on real world experience. Written in an easytofollow style, this book explains the terminology in a clear and concise manner. Each feature is explained starting at a high level and then drilling down into the technical detail, using diagrams and screenshots. This book is perfect for IT administrators who want to deploy a solution to centrally manage access to corporate applications, data, and virtual desktops using Horizon Workspace. You need to have some experience in delivering BYOD initiatives and delivering applications from the Cloud (SaaS).

A handson certification guide with practical examples and sample questions and answers to help BizTalk developers pass the Microsoft BizTalk Server 2010 (70595) exam. If you are an intermediate level BizTalk developer who wants to pass the Microsoft BizTalk Server 2010 (70595) exam, then this book is for you. A working knowledge of fundamental BizTalk concepts around the core messaging engine and building business processes using orchestrations is assumed but not required. In addition, core knowledge of Windows Communication Foundation (WCF) and a basic understanding of Electronic Data Interchange (EDI) is recommended.

This book is perfect for IT administrators who are looking to enhance their skills on system and asset management. A fair understanding of the core elements and applications related to SCCM would be helpful.

This book is for new BeagleBone owners who are looking to quickly get their microboard up and running. It would be helpful to have an understanding of embedded concepts or Linux but neither is essential.

This book is a simple stepbystep, exampleoriented guide with a focus on providing the practical skills necessary to develop and customize apps with Apps Script. If you are an application developer with no knowledge of App Script, and would like to learn to build apps using Google Apps * from scratch, then this book is for you. Basic JavaScript knowledge is required.

An easytouse book, containing 10 engaging projects that will help you learn how to build video games with the easy to use Scratch 2.0 environment. If you are a new, or current Scratch user and would like to improve your understanding of the new Scratch 2.0 interface, and learn how to make video games, this book is ideal for you. Each project is explained indepth from start to finish, so everyone can follow along, even if you don’t have much previous experience with the software. If you want to become a video game designer, this book is an easy to use and friendly guide about the world of interactive media. It will teach, challenge, and inspire you to create great interactive projects.

This book breaks down the fundamental topics of SDL Trados Studio into clear, taskoriented steps that will help you apply them to your translation work speedily and efficiently. This book is designed for translators who are new and have some knowledge of SDL Trados Studio. This book will get you acquainted with its features quickly and enhance your knowledge to get the best out of this tool. Previous knowledge of SDL Trados would be useful but not required but working knowledge of translating tools is assumed

If you're a JavaScript developer interested in a deeper understanding of how to create and design Node.js applications, this is the book for you.