artsMay 22, 202530:48pending
Web Hacking Arsenal: A Practical Guide to Modern Web Pentesting
About this episode
A practical guide to modern web penetration testing authored by Rafay Baloch and published by CRC Press in 2025. The content covers a wide range of web security topics, beginning with fundamentals of web and browser interaction, including HTTP, encoding, and browser security policies. It progresses through techniques for intelligence gathering and enumeration, identifying server-side vulnerabilities like SQL injection, command injection, and template injection, and analyzing business logic flaws. The text also examines client-side attacks such as cross-site scripting and cross-site request forgery, file system vulnerabilities, authentication and authorization weaknesses including those in JWT and OAuth, and attacks against web services like SOAP, REST, and GraphQL. Finally, it discusses techniques for evading Web Application Firewalls and best practices for pentest report writing.
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cyber_security_summary
Get the Book now from Amazon:
https://www.amazon.com/Web-Hacking-Arsenal-Practical-Pentesting/dp/1032447192?&linkCode=ll1&tag=cvthunderx-20&linkId=f8e0c086d09ecefde10236ae0f9381ba&language=en_US&ref_=as_li_ss_tl
Discover our free courses in tech and cybersecurity, Start learning today:
https://linktr.ee/cybercode_academy
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cyber_security_summary
Get the Book now from Amazon:
https://www.amazon.com/Web-Hacking-Arsenal-Practical-Pentesting/dp/1032447192?&linkCode=ll1&tag=cvthunderx-20&linkId=f8e0c086d09ecefde10236ae0f9381ba&language=en_US&ref_=as_li_ss_tl
Discover our free courses in tech and cybersecurity, Start learning today:
https://linktr.ee/cybercode_academy
Get every episode summarized
Each time CyberSecurity Summary publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from CyberSecurity Summary
Building Telegram Bots: Develop Bots in 12 Programming Languages using the Teleg...
CyberSecurity Summary
Apr 14, 202619:01failed
What You Need to Know about Docker: The absolute essentials you need to get Dock...
CyberSecurity Summary
Apr 13, 202624:01failed
Build Your Own Website: A Comic Guide to HTML, CSS, and WordPress
CyberSecurity Summary
Apr 12, 202620:02failed
Azure DevOps Explained: Get started with Azure DevOps and develop your DevOps pr...
CyberSecurity Summary
Apr 11, 202620:53failed