Hands-On Bug Hunting for Penetration Testers

Bugbountieshavequicklybecomeacriticalpartofthesecurityeconomy.Thisbookshowsyouhowtechnicalprofessionalswithaninterestinsecuritycanbeginproductively—andprofitably—participatinginbugbountyprograms.YouwilllearnaboutSQli,NoSQLi,XSS,XXE,andotherformsofcodeinjection.You’llseehowtocreateCSRFPoCHTMLsnippets,howtodiscoverhiddencontent(andwhattodowithitonceit’sfound),andhowtocreatethetoolsforautomatedpentestingworkflows.Then,you’llformatallofthisinformationwithinthecontextofabugreportthatwillhavethegreatestchanceofearningyoucash.Withdetailedwalkthroughsthatcoverdiscovering,testing,andreportingvulnerabilities,thisbookisidealforaspiringsecurityprofessionals.Youshouldcomeawayfromthisworkwiththeskillsyouneedtonotonlyfindthebugsyou'relookingfor,butalsothebestbugbountyprogramstoparticipatein,andhowtogrowyourskillsmovingforwardinfreelancesecurityresearch.