Buy new:
$32.90
FREE delivery Thursday, May 2 on orders shipped by Amazon over $35
Ships from: Amazon.com
Sold by: Amazon.com
List Price: $59.00 Details

The List Price is the suggested retail price of a new product as provided by a manufacturer, supplier, or seller. Except for books, Amazon will display a List Price if the product was purchased by customers on Amazon or offered by other retailers at or above the List Price in at least the past 90 days. List prices may not necessarily reflect the product's prevailing market price.
Learn more
Save: $26.10 (44%)
Get Fast, Free Shipping with Amazon Prime FREE Returns
FREE delivery Thursday, May 2 on orders shipped by Amazon over $35
Or fastest delivery Wednesday, May 1. Order within 8 hrs 8 mins
In Stock
$$32.90 () Includes selected options. Includes initial monthly payment and selected options. Details
Price
Subtotal
$$32.90
Subtotal
Initial payment breakdown
Shipping cost, delivery date, and order total (including tax) shown at checkout.
Ships from
Amazon.com
Ships from
Amazon.com
Sold by
Amazon.com
Sold by
Amazon.com
Returns
Eligible for Return, Refund or Replacement within 30 days of receipt
Eligible for Return, Refund or Replacement within 30 days of receipt
This item can be returned in its original condition for a full refund or replacement within 30 days of receipt.
Read full return policy
Returns
Eligible for Return, Refund or Replacement within 30 days of receipt
This item can be returned in its original condition for a full refund or replacement within 30 days of receipt.
Read full return policy
Payment
Secure transaction
Your transaction is secure
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
Payment
Secure transaction
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
Get Fast, Free Shipping with Amazon Prime
FREE delivery Thursday, May 2 on orders shipped by Amazon over $35. Order within 13 hrs 23 mins
Used: Good | Details
Sold by MaxZen
Fulfilled by Amazon
Condition: Used: Good
Comment: No highlighting no writing. Corners are curled a bit . Good condition

Fulfillment by Amazon (FBA) is a service we offer sellers that lets them store their products in Amazon's fulfillment centers, and we directly pack, ship, and provide customer service for these products. Something we hope you'll especially enjoy: FBA items qualify for FREE Shipping and Amazon Prime.

If you're a seller, Fulfillment by Amazon can help you grow your business. Learn more about the program.

Access codes and supplements are not guaranteed with used items.
Amazon book clubs early access
Loading your book clubs
There was a problem loading your book clubs. Please try again.
Not in a club? Learn more
Amazon book clubs early access

Join or create book clubs

Choose books together

Track your books
Bring your club to Amazon Book Clubs, start a new book club and invite your friends to join, or find a club that’s right for you for free.
Explore Amazon Book Clubs
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

Follow the authors

Joel Scambray
Follow
Vincent Liu
Follow
Something went wrong. Please try your request again later.

Hacking Exposed Web Applications, Third Edition 3rd Edition

by Joel Scambray (Author), Vincent Liu (Author), Caleb Sima (Author)
4.0 4.0 out of 5 stars 23 ratings
See all formats and editions
{"desktop_buybox_group_1":[{"displayPrice":"$32.90","priceAmount":32.90,"currencySymbol":"$","integerValue":"32","decimalSeparator":".","fractionalValue":"90","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"NdJm4olClzFVna2%2FPcccBHHD4bkR3nEZ58BlPZtkaFzQwvjkW00t%2FvT0madrJLw69VWtbdsfFdMnZaWc%2FXR9ybBCcDFUU37HIguJxt3xgKGNi0QjxQ6fUQiW%2B4udZC14QCx7KUVDSL8%3D","locale":"en-US","buyingOptionType":"NEW","aapiBuyingOptionIndex":0}, {"displayPrice":"$10.00","priceAmount":10.00,"currencySymbol":"$","integerValue":"10","decimalSeparator":".","fractionalValue":"00","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"NdJm4olClzFVna2%2FPcccBHHD4bkR3nEZ%2BYosulv%2BT%2Flpo8q5Li%2FtP7NYYht85nabdf7ZHAgmgCVShjnwNPH22roeVqdmVsCBgF2aQFNdURd3MNXF82scPCdPDbskG9TOKkW0IhJZwTrdYiGJOsNQlLpwG%2FdQwCmW4Zz2Gxc%2FfK6%2BnKwG329XDDfVH4thUpOz","locale":"en-US","buyingOptionType":"USED","aapiBuyingOptionIndex":1}]}

Purchase options and add-ons

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.


The latest Web app attacks and countermeasures from world-renowned practitioners

Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource.

  • Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster
  • See new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation
  • Understand how attackers defeat commonly used Web authentication technologies
  • See how real-world session attacks leak sensitive data and how to fortify your applications
  • Learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques
  • Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments
  • Safety deploy XML, social networking, cloud computing, and Web 2.0 services
  • Defend against RIA, Ajax, UGC, and browser-based, client-side exploits
  • Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures
Previous page
  1. ISBN-10
    0071740643
  2. ISBN-13
    978-0071740647
  3. Edition
    3rd
  4. Publisher
    McGraw Hill
  5. Publication date
    November 5, 2010
  6. Part of series
    Hacking Exposed
  7. Language
    English
  8. Dimensions
    7.3 x 0.93 x 9 inches
  9. Print length
    482 pages
  10. See all details
Next page
Amazon First Reads | Editors' picks at exclusive prices

Frequently bought together

Hacking Exposed Web Applications, Third Edition
$32.90
Get it as soon as Thursday, May 2
In Stock
Ships from and sold by Amazon.com.
+
Hacking Exposed Linux, 3rd Edition
$36.42
Get it as soon as Wednesday, May 1
Only 2 left in stock (more on the way).
Ships from and sold by Amazon.com.
+
Hacking Exposed Windows: Microsoft Windows Security Secrets and Solutions, Third Edition 3rd edition by Scambray, Joel (2007)
$37.62
Get it as soon as Monday, May 6
Only 1 left in stock - order soon.
Sold by OGZ Design and ships from Amazon Fulfillment.
Total price:
To see our price, add these items to your cart.
Details
Added to Cart
Some of these items ship sooner than the others.
Show details Hide details
Choose items to buy together.

Editorial Reviews

From the Publisher

Joel Scambray, CISSP, is co-founder and CEO of Consciere, provider of strategic security advisory services. He has worked in Internet security assessment and defense for nearly 15 years at Microsoft, Foundstone, Ernst & Young, and other organizations. Joel is an internationally renowned speaker and author of multiple security books, including 12 editions in the Hacking Exposed series.

Vincent Liu, CISSP, is a managing partner at Stach & Liu. He previously led the Attack & Penetration and Reverse Engineering teams at Honeywell's Global Security group, was a consultant with the Ernst & Young Advanced Security Centers, and was an analyst at the National Security Agency. Vincent speaks at industry conferences, including Black Hat, ToorCon, and Microsoft's BlueHat.

Caleb Sima is CEO of Armorize Technologies, provider of integrated Web application security solutions. He founded SPI Dynamics, a Web security technology company, and was an early innovator at Internet Security Systems/IBM's elite X-Force team. Caleb presents at key industry conferences, such as RSA and Black Hat.

About the Author

Caleb Sima is the co-founder and CTO of SPI Dynamics, a web application security products company, and has more than 12 years of security experience. His pioneering efforts and expertise in web security have helped define the direction the web application security industry has taken. Caleb is a frequent speaker and expert resource for the press on Internet attacks and has been featured in the Associated Press. He is also a contributing author to various magazines and online columns. Caleb is a member of ISSA and is one of the founding visionaries of the Application Vulnerability Description Language (AVDL) standard within OASIS, as well as a founding member of the Web Application Security Consortium (WASC).

Joel Scambray, CISSP, is co-founder and CEO of Consciere, provider of strategic security advisory services. He has worked in Internet security assessment and defense for nearly 15 years at Microsoft, Foundstone, Ernst & Young, and other organizations. Joel is an internationally renowned speaker and author of multiple security books, including 12 editions in the Hacking Exposed series.

Vincent Liu, CISSP, is a managing partner at Stach & Liu. He previously led the Attack & Penetration and Reverse Engineering teams at Honeywell's Global Security group, was a consultant with the Ernst & Young Advanced Security Centers, and was an analyst at the National Security Agency. Vincent speaks at industry conferences, including Black Hat, ToorCon, and Microsoft's BlueHat.

Caleb Sima is CEO of Armorize Technologies, provider of integrated Web application security solutions. He founded SPI Dynamics, a Web security technology company, and was an early innovator at Internet Security Systems/IBM's elite X-Force team. Caleb presents at key industry conferences, such as RSA and Black Hat.

McGraw-Hill authors represent the leading experts in their fields and are dedicated to improving the lives, careers, and interests of readers worldwide

Product details

  • Publisher ‏ : ‎ McGraw Hill; 3rd edition (November 5, 2010)
  • Language ‏ : ‎ English
  • Paperback ‏ : ‎ 482 pages
  • ISBN-10 ‏ : ‎ 0071740643
  • ISBN-13 ‏ : ‎ 978-0071740647
  • Item Weight ‏ : ‎ 1.7 pounds
  • Dimensions ‏ : ‎ 7.3 x 0.93 x 9 inches
  • Customer Reviews:
    4.0 4.0 out of 5 stars 23 ratings

About the authors

Follow authors to get new release updates, plus improved recommendations.
Previous page
  1. Joel Scambray

    Joel Scambray

    Brief content visible, double tap to read full content.
    Full content visible, double tap to read brief content.

    Discover more of the author’s books, see similar authors, read author blogs and more

    See more on the author's page
  2. Vincent Liu

    Vincent Liu

    Brief content visible, double tap to read full content.
    Full content visible, double tap to read brief content.

    Vincent Liu (CISSP) is a Partner at Bishop Fox (formerly Stach & Liu), a security consulting firm providing services to the Fortune 500, global financial institutions, and high-tech startups. In this role, he oversees firm strategy, practice development, and client matters.

    Vincent is a recognized expert with regular columns in Dark Reading and SecurityWeek. He has presented at Black Hat, ToorCon, InfoSec World, SANS, and Microsoft BlueHat. In addition to regularly being cited by the press, Vincent has been interviewed and quoted in Al Jazeera, USA Today, NPR, and CSO Magazine. He has also co-authored several industry best-selling books, including: Hacking Exposed Wireless 1st and 2nd Edition; Hacking Exposed Web Applications 3rd Edition, and most recently Web Application Security: A Beginner’s Guide.

    Prior to founding Bishop Fox, Vincent led the Attack & Penetration team for the Global Security unit at Honeywell International. Before that, he was a consultant with the Ernst & Young Advanced Security Centers and an analyst at the National Security Agency.

    Vincent holds a Bachelor of Science and Engineering from the University of Pennsylvania with a major in Computer Science and Engineering and a minor in Psychology.

    See more on the author's page
Next page

Customer reviews

4 out of 5 stars
4 out of 5
23 global ratings

Top reviews from the United States

W. Vogt
5.0 out of 5 stars really helpful
Reviewed in the United States on December 9, 2013
Verified Purchase
I learned more from this in an hour of sitting and flipping than I have from hours upon hours of searching the web for answers on similar topics. Extremely helpful book for those concerned with web security... covers topics that I've never heard others mention. Also, a lot of people online... specifically with say, PHP programming, will tell you some basic rule or procedure for verifying user input, but they don't explain fully the how and the why---it's like that all over the place---but this book does a very good job of explaining why the procedures and such in PHP or other languages are necessary, and in my case helped me to understand exactly why certain procedures should be employed. (Such as making sure user-submitted data is in the expected encoding, i.e. UTF8, etc.)
3 people found this helpful
Helpful
 Report
owen1
5.0 out of 5 stars HACKING EXPOSED BOOKS ARE GREAT!!
Reviewed in the United States on November 1, 2013
Verified Purchase
I own every hacking exposed book ever printed that i am aware of. These are great sources for learning and structuring skills in many valuable situations. They are based on theory and have great examples when you would use the necessary solutions to achieve of overcome challenges.

They are Great Books!! ---That is my opinion!
One person found this helpful
Helpful
 Report
J. M. Nye
4.0 out of 5 stars Web Security: Something most authors avoid in books written about building Web sites
Reviewed in the United States on December 10, 2013
Verified Purchase
This book has some good advice on security issues that continue to develop and impact on innocent people's lives in unexpected ways. At the very least it puts you on alert to the risks and dangers present on the Web today, and gives some useful pointers on what to watch out for and how to ward off some of the assaults on rights and freedoms. It would appear that the Web has become a bit of a free for all where people now disregard and break the law on a daily basis with impunity. In the last few years the Web has made a joke of copyright as theft of property has become commonplace.
One person found this helpful
Helpful
 Report
Brian
1.0 out of 5 stars Want to test web apps, BUY ANOTHER BOOK, and learn else where! you will reguardless
Reviewed in the United States on September 2, 2015
Verified Purchase
If you are looking for only an informative book, w/ NO instructional advice, this book might be for you. But DO NOT think that you will have learned anything to actually get you going hacking web applications. you can read this from front to back, and still not be able to hack any web application. Unless your looking for theory this is the wrong book for you. this book will ONLY expand your web application vocabulary. Big Deal!
One person found this helpful
Helpful
 Report
PingJockey
5.0 out of 5 stars Excellent read!
Reviewed in the United States on October 5, 2015
Verified Purchase
Outstanding! Great layout, tips, tricks, and explanations! As a penetration tester, I recommend this book, paired with the other Hacking Exposed books!
Helpful
 Report
Costa
5.0 out of 5 stars I love it
Reviewed in the United States on May 9, 2013
Verified Purchase
Very nice to help me secure my own application on php. I am debted to you for this book that help me more.
Helpful
 Report
Richard K
5.0 out of 5 stars Five Stars
Reviewed in the United States on December 1, 2015
Verified Purchase
Very useful information and study guide..
Helpful
 Report
A Guy
4.0 out of 5 stars Good reference but far from comprehensive
Reviewed in the United States on October 21, 2014
Verified Purchase
Some of the content is outdated but for the most part it did what I needed it to. I was looking for an intro into Web app vulnerabilities as I begin taking on more responsibility in that at work. I do like the layout as it is easy to understand and it walks me through the use of the various tools well. You can write volumes on each chapter that this book covers so know that this is an overview and you will be happy with the money that you spent on it.
One person found this helpful
Helpful
 Report

Top reviews from other countries

sunny
5.0 out of 5 stars Clear and Easy to understand
Reviewed in Canada on June 2, 2015
Verified Purchase
Woth the money
Report
Amazon Customer
5.0 out of 5 stars Thank you.
Reviewed in the United Kingdom on April 18, 2015
Verified Purchase
Thank you. Excellent service. Item is as described and arrived in good condition.
Report
KRISTEL ENGEL
5.0 out of 5 stars Five Stars
Reviewed in the United Kingdom on March 10, 2016
Verified Purchase
good book
Report