Dafydd Stuttard has more than 10 years' experience in the area of web application security. He is the lead author of Web Application Hacker's Handbook 1e and 2e, has performed penetration testing training around the world. Marcus Pinto is co-author of Web Application Hacker's Handbook 1e and 2e and has over 10 years' experience within web application security. He has delivered a variety of training courses to technical audiences and speaks at security events around and outside of the UK. Michael Hale Ligh is the lead author of The Malware Analyst's Cookbook and Director of Malware Research of the The Volatility Project. Michael is a regular presenter at DefCon conferences. Matt Richard is and is the Malicious Code Operations Lead at Raytheon Corporation and has written a number of testing tools. Steven Adair is a security researcher with The Shadowserver Foundation and co-author of The Malware Analyst's Cookbook and deals with cyber attacks of all kinds esp. those linked to cyber espionage. Blake Hartstein conducts incident response and intrusion detection for Bloomberg and previously for VeriSign. The biggest and best companies worldwide depend on him for intelligence about attacks affecting their organization.

• WEB APPLICATION HACKER’S HANDBOOK 2E Chapter 1: Web Application (In)security 1Chapter 2: Core Defense Mechanisms 17Chapter 3: Web Application Technologies 39Chapter 4: Mapping the Application 73Chapter 5: Bypassing Client-Side Controls 117Chapter 6: Attacking Authentication 159Chapter 7: Attacking Session Management 205Chapter 8: Attacking Access Controls 257Chapter 9: Attacking Data Stores 287Chapter 10: Attacking Back-End Components 357Chapter 11: Attacking Application Logic 405Chapter 12: Attacking Users: Cross-Site Scripting 431Chapter 13: Attacking Users: Other Techniques 501Chapter 14: Automating Customized Attacks 571Chapter 15: Exploiting Information Disclosure 615Chapter 16: Attacking Native Compiled Applications 633Chapter 17: Attacking Application Architecture 647Chapter 18: Attacking the Application Server 669Chapter 19: Finding Vulnerabilities in Source Code 701Chapter 20: A Web Application Hacker’s Toolkit 747Chapter 21: A Web Application Hacker’s Methodology 791MALWARE ANALYST’S COOKBOOK AND DVDChapter 1: Anonymizing Your Activities 1Chapter 2: Honeypots 27Chapter 3: Malware Classifi cation 51Chapter 4: Sandboxes and Multi-AV Scanners 89Chapter 5: Researching Domains and IP Addresses 119Chapter 6: Documents, Shellcode, and URLs 155Chapter 7: Malware Labs 211Chapter 8: Automation 239Chapter 9: Dynamic Analysis 283Chapter 10: Malware Forensics 337Chapter 11: Debugging Malware 395Chapter 12: De-Obfuscation 441Chapter 13: Working with DLLs 487Chapter 14: Kernel Debugging 511Chapter 15: Memory Forensics with Volatility 571Chapter 16: Memory Forensics: Code Injection and Extraction 601Chapter 17: Memory Forensics: Rootkits 637Chapter 18: Memory Forensics: Network and Registry 673

Dafydd Stuttard has more than 10 years' experience in the area of web application security. He is the lead author of Web Application Hacker's Handbook 1e and 2e, has performed penetration testing training around the world. Marcus Pinto is co-author of Web Application Hacker's Handbook 1e and 2e and has over 10 years' experience within web application security. He has delivered a variety of training courses to technical audiences and speaks at security events around and outside of the UK. Michael Hale Ligh is the lead author of The Malware Analyst's Cookbook and Director of Malware Research of the The Volatility Project. Michael is a regular presenter at DefCon conferences. Matt Richard is and is the Malicious Code Operations Lead at Raytheon Corporation and has written a number of testing tools. Steven Adair is a security researcher with The Shadowserver Foundation and co-author of The Malware Analyst's Cookbook and deals with cyber attacks of all kinds esp. those linked to cyber espionage. Blake Hartstein conducts incident response and intrusion detection for Bloomberg and previously for VeriSign. The biggest and best companies worldwide depend on him for intelligence about attacks affecting their organization.

• WEB APPLICATION HACKER’S HANDBOOK 2E Chapter 1: Web Application (In)security 1Chapter 2: Core Defense Mechanisms 17Chapter 3: Web Application Technologies 39Chapter 4: Mapping the Application 73Chapter 5: Bypassing Client-Side Controls 117Chapter 6: Attacking Authentication 159Chapter 7: Attacking Session Management 205Chapter 8: Attacking Access Controls 257Chapter 9: Attacking Data Stores 287Chapter 10: Attacking Back-End Components 357Chapter 11: Attacking Application Logic 405Chapter 12: Attacking Users: Cross-Site Scripting 431Chapter 13: Attacking Users: Other Techniques 501Chapter 14: Automating Customized Attacks 571Chapter 15: Exploiting Information Disclosure 615Chapter 16: Attacking Native Compiled Applications 633Chapter 17: Attacking Application Architecture 647Chapter 18: Attacking the Application Server 669Chapter 19: Finding Vulnerabilities in Source Code 701Chapter 20: A Web Application Hacker’s Toolkit 747Chapter 21: A Web Application Hacker’s Methodology 791MALWARE ANALYST’S COOKBOOK AND DVDChapter 1: Anonymizing Your Activities 1Chapter 2: Honeypots 27Chapter 3: Malware Classifi cation 51Chapter 4: Sandboxes and Multi-AV Scanners 89Chapter 5: Researching Domains and IP Addresses 119Chapter 6: Documents, Shellcode, and URLs 155Chapter 7: Malware Labs 211Chapter 8: Automation 239Chapter 9: Dynamic Analysis 283Chapter 10: Malware Forensics 337Chapter 11: Debugging Malware 395Chapter 12: De-Obfuscation 441Chapter 13: Working with DLLs 487Chapter 14: Kernel Debugging 511Chapter 15: Memory Forensics with Volatility 571Chapter 16: Memory Forensics: Code Injection and Extraction 601Chapter 17: Memory Forensics: Rootkits 637Chapter 18: Memory Forensics: Network and Registry 673

Dafydd Stuttard has more than 10 years' experience in the area of web application security. He is the lead author of Web Application Hacker's Handbook 1e and 2e, has performed penetration testing training around the world. Marcus Pinto is co-author of Web Application Hacker's Handbook 1e and 2e and has over 10 years' experience within web application security. He has delivered a variety of training courses to technical audiences and speaks at security events around and outside of the UK. Michael Hale Ligh is the lead author of The Malware Analyst's Cookbook and Director of Malware Research of the The Volatility Project. Michael is a regular presenter at DefCon conferences. Matt Richard is and is the Malicious Code Operations Lead at Raytheon Corporation and has written a number of testing tools. Steven Adair is a security researcher with The Shadowserver Foundation and co-author of The Malware Analyst's Cookbook and deals with cyber attacks of all kinds esp. those linked to cyber espionage. Blake Hartstein conducts incident response and intrusion detection for Bloomberg and previously for VeriSign. The biggest and best companies worldwide depend on him for intelligence about attacks affecting their organization.

• WEB APPLICATION HACKER’S HANDBOOK 2E Chapter 1: Web Application (In)security 1Chapter 2: Core Defense Mechanisms 17Chapter 3: Web Application Technologies 39Chapter 4: Mapping the Application 73Chapter 5: Bypassing Client-Side Controls 117Chapter 6: Attacking Authentication 159Chapter 7: Attacking Session Management 205Chapter 8: Attacking Access Controls 257Chapter 9: Attacking Data Stores 287Chapter 10: Attacking Back-End Components 357Chapter 11: Attacking Application Logic 405Chapter 12: Attacking Users: Cross-Site Scripting 431Chapter 13: Attacking Users: Other Techniques 501Chapter 14: Automating Customized Attacks 571Chapter 15: Exploiting Information Disclosure 615Chapter 16: Attacking Native Compiled Applications 633Chapter 17: Attacking Application Architecture 647Chapter 18: Attacking the Application Server 669Chapter 19: Finding Vulnerabilities in Source Code 701Chapter 20: A Web Application Hacker’s Toolkit 747Chapter 21: A Web Application Hacker’s Methodology 791MALWARE ANALYST’S COOKBOOK AND DVDChapter 1: Anonymizing Your Activities 1Chapter 2: Honeypots 27Chapter 3: Malware Classifi cation 51Chapter 4: Sandboxes and Multi-AV Scanners 89Chapter 5: Researching Domains and IP Addresses 119Chapter 6: Documents, Shellcode, and URLs 155Chapter 7: Malware Labs 211Chapter 8: Automation 239Chapter 9: Dynamic Analysis 283Chapter 10: Malware Forensics 337Chapter 11: Debugging Malware 395Chapter 12: De-Obfuscation 441Chapter 13: Working with DLLs 487Chapter 14: Kernel Debugging 511Chapter 15: Memory Forensics with Volatility 571Chapter 16: Memory Forensics: Code Injection and Extraction 601Chapter 17: Memory Forensics: Rootkits 637Chapter 18: Memory Forensics: Network and Registry 673