Web Server Through the Eyes of a Hacker

The security system of web servers and typical mistakes made by developers when writing web applications are considered. Examples of hacking real websites with vulnerabilities, including popular ones, are presented. Common hacker attacks such as DoS, SQL injection, cross-site scripting, the use of CSRF and XSS vulnerabilities, authentication bypass, and others are examined both theoretically and practically. Basic defense techniques against attacks and recommendations for writing secure code, configuration, and methods to bypass CAPTCHA are presented. The fourth edition discusses new examples of real mistakes, the most relevant vulnerabilities, modern types of hacker attacks, and methods of defense against them.