Have a personal or library account? Click to login
Web Penetration Testing with Kali Linux 2.0, Second Edition Cover

Web Penetration Testing with Kali Linux 2.0, Second Edition

Build your defense against web attacks with Kali Linux 2.0

Paid access
|Sep 2025
Product purchase options

Build your defense against web attacks with Kali Sana

Key Features

    Book Description

    Kali Linux 2.0 is the new generation of the industry-leading BackTrack Linux penetration testing and security auditing Linux distribution. It contains several hundred tools aimed at various information security tasks such as penetration testing, forensics, and reverse engineering.
    At the beginning of the book, you will be introduced to the concepts of hacking and penetration testing and will get to know about the tools used in Kali Linux 2.0 that relate to web application hacking. Then, you will gain a deep understanding of SQL and command injection flaws and ways to exploit the flaws. Moving on, you will get to know more about scripting and input validation flaws, AJAX, and the security issues related to AJAX.
    At the end of the book, you will use an automated technique called fuzzing to be able to identify flaws in a web application. Finally, you will understand the web application vulnerabilities and the ways in which they can be exploited using the tools in Kali Linux 2.0.

    What you will learn

    • Set up your lab with Kali Linux 2.0
    • Identify the difference between hacking a web application and network hacking
    • Understand the different techniques used to identify the flavor of web applications
    • Expose vulnerabilities present in web servers and their applications using serverside attacks
    • Use SQL and crosssite scripting (XSS) attacks
    • Check for XSS flaws using the burp suite proxy
    • Find out about the mitigation techniques used to negate the effects of the Injection and Blind SQL attacks

    Who this book is for

    If you are already working as a network penetration tester and want to expand your knowledge of web application hacking, then this book tailored for you. Those who are interested in learning more about the Kali Sana tools that are used to test web applications will find this book a thoroughly useful and interesting guide.

    Table of Contents

    1. Introduction to Web Application Hacking
    2. Setting up your Lab with Kali Linux
    3. Reconnaissance and Profiling the Web server
    4. Major Flaws in Today's Web Application
    5. Attacking the server using Injection Based Flaws
    6. Exploiting Clients using XSS and CSRF flaws
    7. Attacking SSL based websites
    8. Exploiting the Client using Attack Frameworks in kali Linux
    9. AJAX and its Inherent Security issues due to Increased Attack surface
    10. Fuzzing Web Application
    PDF ISBN: 978-1-78355-400-3
    Publisher: Packt Publishing Limited
    Copyright owner: © 2015 Packt Publishing Limited
    Publication date: 2025
    Language: English
    Pages: 312