Gilberto Najera-Gutierrez is an experienced penetration tester currently working for one of the top security testing service providers in Australia. He obtained leading security and penetration testing certifications, namely Offensive Security Certified Professional (OSCP), EC-Council Certified Security Administrator (ECSA), and GIAC Exploit Researcher and Advanced Penetration Tester (GXPN). Gilberto has been working as a penetration tester since 2013, and he has been a security enthusiast for almost 20 years. He has successfully conducted penetration tests on networks and applications of some of the biggest corporations, government agencies, and financial institutions in Mexico and Australia. Juned Ahmed Ansari is a cyber security researcher based out of Mumbai. He currently leads the penetration testing and offensive security team in a prodigious MNC. Juned has worked as a consultant for large private sector enterprises, guiding them on their cyber security program. He has also worked with start-ups, helping them make their final product secure. Juned has conducted several training sessions on advanced penetration testing, which were focused on teaching students stealth and evasion techniques in highly secure environments. His primary focus areas are penetration testing, threat intelligence, and application security research.  Daniel Teixeira is an IT security expert, author, and trainer, specializing in red team engagements, penetration testing, and vulnerability assessments. His main areas of focus are adversary simulation, emulation of modern adversarial tactics, techniques and procedures; vulnerability research, and exploit development. Abhinav Singh is a well-known information security researcher. He is the author of Metasploit Penetration Testing Cookbook (first and second editions) and Instant Wireshark Starter, by Packt. He is an active contributor to the security community—paper publications, articles, and blogs. His work has been quoted in several security and privacy magazines, and digital portals. He is a frequent speaker at eminent international conferences—Black Hat and RSA. His areas of expertise include malware research, reverse engineering,  and cloud security.

• Table of ContentsIntroduction to Penetration Testing and Web ApplicationsSetting Up Your Lab with Kali LinuxReconnaissance and Profiling the Web ServerAuthentication and Session Management FlawsDetecting and Exploiting Injection-Based FlawsFinding and Exploiting Cross-Site Scripting (XSS) VulnerabilitiesCross-Site Request Forgery, Identification, and ExploitationAttacking Flaws in Cryptographic ImplementationsUsing Automated Scanners on Web ApplicationsMetasploit Quick Tips for Security ProfessionalsInformation Gathering and ScanningServer-Side ExploitationMeterpreterPost-ExploitationUsing MSFvenomClient-Side Exploitation and Antivirus BypassSocial-Engineer ToolkitWorking with Modules for Penetration Testing

Gilberto Najera-Gutierrez is an experienced penetration tester currently working for one of the top security testing service providers in Australia. He obtained leading security and penetration testing certifications, namely Offensive Security Certified Professional (OSCP), EC-Council Certified Security Administrator (ECSA), and GIAC Exploit Researcher and Advanced Penetration Tester (GXPN). Gilberto has been working as a penetration tester since 2013, and he has been a security enthusiast for almost 20 years. He has successfully conducted penetration tests on networks and applications of some of the biggest corporations, government agencies, and financial institutions in Mexico and Australia. Juned Ahmed Ansari is a cyber security researcher based out of Mumbai. He currently leads the penetration testing and offensive security team in a prodigious MNC. Juned has worked as a consultant for large private sector enterprises, guiding them on their cyber security program. He has also worked with start-ups, helping them make their final product secure. Juned has conducted several training sessions on advanced penetration testing, which were focused on teaching students stealth and evasion techniques in highly secure environments. His primary focus areas are penetration testing, threat intelligence, and application security research.  Daniel Teixeira is an IT security expert, author, and trainer, specializing in red team engagements, penetration testing, and vulnerability assessments. His main areas of focus are adversary simulation, emulation of modern adversarial tactics, techniques and procedures; vulnerability research, and exploit development. Abhinav Singh is a well-known information security researcher. He is the author of Metasploit Penetration Testing Cookbook (first and second editions) and Instant Wireshark Starter, by Packt. He is an active contributor to the security community—paper publications, articles, and blogs. His work has been quoted in several security and privacy magazines, and digital portals. He is a frequent speaker at eminent international conferences—Black Hat and RSA. His areas of expertise include malware research, reverse engineering,  and cloud security.

• Table of ContentsIntroduction to Penetration Testing and Web ApplicationsSetting Up Your Lab with Kali LinuxReconnaissance and Profiling the Web ServerAuthentication and Session Management FlawsDetecting and Exploiting Injection-Based FlawsFinding and Exploiting Cross-Site Scripting (XSS) VulnerabilitiesCross-Site Request Forgery, Identification, and ExploitationAttacking Flaws in Cryptographic ImplementationsUsing Automated Scanners on Web ApplicationsMetasploit Quick Tips for Security ProfessionalsInformation Gathering and ScanningServer-Side ExploitationMeterpreterPost-ExploitationUsing MSFvenomClient-Side Exploitation and Antivirus BypassSocial-Engineer ToolkitWorking with Modules for Penetration Testing

Gilberto Najera-Gutierrez is an experienced penetration tester currently working for one of the top security testing service providers in Australia. He obtained leading security and penetration testing certifications, namely Offensive Security Certified Professional (OSCP), EC-Council Certified Security Administrator (ECSA), and GIAC Exploit Researcher and Advanced Penetration Tester (GXPN). Gilberto has been working as a penetration tester since 2013, and he has been a security enthusiast for almost 20 years. He has successfully conducted penetration tests on networks and applications of some of the biggest corporations, government agencies, and financial institutions in Mexico and Australia. Juned Ahmed Ansari is a cyber security researcher based out of Mumbai. He currently leads the penetration testing and offensive security team in a prodigious MNC. Juned has worked as a consultant for large private sector enterprises, guiding them on their cyber security program. He has also worked with start-ups, helping them make their final product secure. Juned has conducted several training sessions on advanced penetration testing, which were focused on teaching students stealth and evasion techniques in highly secure environments. His primary focus areas are penetration testing, threat intelligence, and application security research.  Daniel Teixeira is an IT security expert, author, and trainer, specializing in red team engagements, penetration testing, and vulnerability assessments. His main areas of focus are adversary simulation, emulation of modern adversarial tactics, techniques and procedures; vulnerability research, and exploit development. Abhinav Singh is a well-known information security researcher. He is the author of Metasploit Penetration Testing Cookbook (first and second editions) and Instant Wireshark Starter, by Packt. He is an active contributor to the security community—paper publications, articles, and blogs. His work has been quoted in several security and privacy magazines, and digital portals. He is a frequent speaker at eminent international conferences—Black Hat and RSA. His areas of expertise include malware research, reverse engineering,  and cloud security.

• Table of ContentsIntroduction to Penetration Testing and Web ApplicationsSetting Up Your Lab with Kali LinuxReconnaissance and Profiling the Web ServerAuthentication and Session Management FlawsDetecting and Exploiting Injection-Based FlawsFinding and Exploiting Cross-Site Scripting (XSS) VulnerabilitiesCross-Site Request Forgery, Identification, and ExploitationAttacking Flaws in Cryptographic ImplementationsUsing Automated Scanners on Web ApplicationsMetasploit Quick Tips for Security ProfessionalsInformation Gathering and ScanningServer-Side ExploitationMeterpreterPost-ExploitationUsing MSFvenomClient-Side Exploitation and Antivirus BypassSocial-Engineer ToolkitWorking with Modules for Penetration Testing