Attacking and Exploiting Modern Web Applications

Table of Contents

1. Mindset and Methodologies
2. Toolset for Web Attacks and Exploitation
3. Attacking the Authentication Layer – a SAML Use Case
4. Attacking Internet-Facing Web Applications – SQL Injection and Cross-Site Scripting (XSS) on WordPress
5. Attacking IoT Devices – Command Injection and Path Traversal
6. Attacking Electron JavaScript Applications – from Cross-Site Scripting (XSS) to Remote Command Execution (RCE)
7. Attacking Ethereum Smart Contracts – Reentrancy, Weak Sources of Randomness, and Business Logic
8. Continuing the Journey of Vulnerability Discovery