Other books that might interest you

• 

  Penetration Testing of Computer...

  Dr. Hidaia Mahmood Alassouli

  • 0
  • 0
  • 0

  Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
  Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
  In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
  Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
  1. Installing and Configuring BurpSuite
  2. BurpSuite Intruder.
  3. Installing XMAPP and DVWA App in Windows System.
  4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
  5. Scanning Kali-Linux and Windows Using .
  6. Understanding Netcat, Reverse Shells and Bind Shells.
  7. Adding Burps Certificate to Browser.
  8. Setting up Target Scope in BurpSuite.
  9. Scanning Using BurpSuite.
  10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
  11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
  12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
  13. Exploiting File Upload Vulnerability.
  14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
  15. Exploiting File Inclusion Vulnerability.
  16. References.

  Show book

• 

  Human-Centered Security - How to...

  Heidi Trost, Adam Shostack

  • 0
  • 0
  • 0

  In our interconnected world, we face a complex cybersecurity ecosystem where digital vulnerabilities can have far-reaching consequences. Threats to digital infrastructure often impact critical physical systems, potentially causing real-world harm. With AI agents set to handle extensive personal information, data security and privacy are more crucial than ever. 
   
  Human-Centered Security targets professionals designing digital products that handle sensitive data: UX designers, engineers, and product managers. It's also for those responsible for securing organizational data and systems: security engineers, CISOs, CIOs, and teams focused on risk management, legal, privacy, and compliance. 
   
  These professionals influence security-related behaviors and possess deep knowledge of threats to their products or organizations. This places a significant responsibility on them to design resilient systems that encourage safer outcomes. 
   
  This book will help you focus on areas of the user experience where security impacts users the most; understand the dynamics of the security ecosystem; find your security UX allies; ask better questions when talking to your cross-disciplinary team; and more.

  Show book

• 

  Why Science Does Not Disprove God

  Amir Aczel

  • 0
  • 0
  • 0

  The renowned science writer, mathematician, and bestselling author of Fermat's Last Theorem masterfully refutes the overreaching claims the "New Atheists," providing millions of educated believers with a clear, engaging explanation of what science really says, how there's still much space for the Divine in the universe, and why faith in both God and empirical science are not mutually exclusive. 
  A highly publicized coterie of scientists and thinkers, including Richard Dawkins, the late Christopher Hitchens, and Lawrence Krauss, have vehemently contended that breakthroughs in modern science have disproven the existence of God, asserting that we must accept that the creation of the universe came out of nothing, that religion is evil, that evolution fully explains the dazzling complexity of life, and more. In this much-needed book, science journalist Amir Aczel profoundly disagrees and conclusively demonstrates that science has not, as yet, provided any definitive proof refuting the existence of God. 
  Why Science Does Not Disprove God is his brilliant and incisive analyses of the theories and findings of such titans as Albert Einstein, Roger Penrose, Alan Guth, and Charles Darwin, all of whose major breakthroughs leave open the possibility— and even the strong likelihood—of a Creator. Bolstering his argument, Aczel lucidly discourses on arcane aspects of physics to reveal how quantum theory, the anthropic principle, the fine-tuned dance of protons and quarks, the existence of anti-matter and the theory of parallel universes, also fail to disprove God.

  Show book

• 

  Five Nights Out

  Hugh Warwick

  • 0
  • 0
  • 0

  It can be easy to think that we live in a daylight world – we see the flowers, hear the birds, watch butterflies then we go to bed and it all stops. Or rather, we stop paying attention. However, what goes on at night is every bit as exciting. 
  Five Nights Out takes us on a journey through Hugh’s interactions with some of our favourite nocturnal creatures including hedgehogs, bats, owls and more. Including many facts about each creature and a re-telling of some of Hugh’s own journeys trying to view them, Five Nights Out is a perfect read for any naturalist.

  Show book

• 

  Field Guide to Medicinal Wild...

  Bradford Angier

  • 1
  • 1
  • 0

  A revision of the definitive reference, containing plant characteristics, distribution, and medicinal qualities, an updated taxonomy, and fifteen new species.   The Field Guide to Medicinal Wild Plants is the ultimate handbook for identifying and using wild plants for medicinal purposes. This illustrated guide to North American wild medicinals has been a nature classic for over thirty years. In this second edition, David K. Foster revises Bradford Angier's invaluable reference, updating the taxonomy and adding more than a dozen species, including the purple coneflower, popularly known as echinacea, as well as ephedra, jewelweed, goldenseal, and more. Scientific information for a general audience and full-color illustrations combine with intriguing accounts of the plants’ uses, making this a practical guide for anyone interested in the medicinal uses of wild plants.

  Show book

• 

  Data as a Product - Elevating...

  Chuck Sherman

  • 0
  • 0
  • 0

  In the digital age, data has become the lifeblood of the modern world. From businesses and industries to governments and individuals, the value of information cannot be overstated. "Data as a Product: Elevating Information into a Valuable Product" is a comprehensive and enlightening exploration of the role data plays in shaping our world and how it can be transformed into a valuable asset. 
  This book delves into the foundations of data, providing readers with a clear understanding of what data is and the different types it comes in. From structured data in databases to unstructured data in texts and images, readers will grasp the diverse forms of information that drive decision-making processes. 
  Building upon the foundations, the book explores data collection, storage, preprocessing, and cleaning techniques. Readers will gain practical insights into managing data quality and integrity, ensuring that the information they work with is accurate and reliable. 
  With data at hand, the book takes readers on a journey into the world of data analysis and visualization. Through exploratory data analysis and statistical techniques, readers will learn to extract valuable insights from raw data and present them in compelling visualizations. 
  As the book progresses, it dives into the realm of data-driven decision-making. Readers will discover how data can be harnessed to drive strategic business decisions, creating a competitive edge in a data-centric world. Monetizing data assets is also explored, uncovering various models and strategies for transforming data into revenue-generating products and services. 
  Through practical examples, real-world case studies, and a forward-looking perspective, readers will be equipped with the knowledge and tools needed to navigate the data-rich landscape and unleash the true potential of data in their endeavors. 
   

  Show book