도서소개
저자소개
목차소개
# 저자 소개
# 안내 및 감사의 말씀
# 독자 후기
01. Cross-Site Scripting(XSS)
1. Cross Site Scripting
02. Access Control Flaws
1. Insecure Direct Object References
2. Missing Function Level Access Control
03. Insecure Communication
1. Insecure Login
04. Insecure Deserialization
1. Insecure Deserialization
05. Request Forgeries
1. Cross-Site Request Forgeries
06. Vulnerable Components
1. Vulnerable Components
07. Client Side
1. Bypass front-end restrictions
2. Client side filtering
3. HTML tampering
08. Challenges
1. WebGoat Challenge
2. Admin lost password
3. Without password
4. Creating a new account
5. Admin password reset
6. Without account