At the end of this chapter, I will provide a practical sample of an ATM document. If you feel that any of the items that I'm trying to discuss here are not clear (very theoretical), then I invite you to look at the example at the end of this chapter. If you want your team to be successful during the pentest phase, then you must do an ATM document prior to your penetration test activities. Let's take an example that I witness on a daily basis when I use this approach. A new project comes in, and the Project Manager (PM) contacts management, asking for an expert in application security, because they're going to build a new website. The management team then assigns you to that new project, which is still in the Architecture phase. You attend a couple of meetings to understand the contents of the project. Most probably, another...
Practical Web Penetration Testing
By :
Practical Web Penetration Testing
By:
Overview of this book
Companies all over the world want to hire professionals dedicated to application security. Practical Web Penetration Testing focuses on this very trend, teaching you how to conduct application security testing using real-life scenarios.
To start with, you’ll set up an environment to perform web application penetration testing. You will then explore different penetration testing concepts such as threat modeling, intrusion test, infrastructure security threat, and more, in combination with advanced concepts such as Python scripting for automation. Once you are done learning the basics, you will discover end-to-end implementation of tools such as Metasploit, Burp Suite, and Kali Linux. Many companies deliver projects into production by using either Agile or Waterfall methodology. This book shows you how to assist any company with their SDLC approach and helps you on your journey to becoming an application security specialist.
By the end of this book, you will have hands-on knowledge of using different tools for penetration testing.
Related Content you might be interested in
Current Title:
Practical Web Penetration Testing
Table of Contents (18 chapters)
Preface
Free Chapter
Building a Vulnerable Web Application Lab
Kali Linux Installation
Delving Deep into the Usage of Kali Linux
All About Using Burp Suite
Understanding Web Application Vulnerabilities
Application Security Pre-Engagement
Application Threat Modeling
Source Code Review
Network Penetration Testing
Web Intrusion Tests
Pentest Automation Using Python
Nmap Cheat Sheet
Metasploit Cheat Sheet
Netcat Cheat Sheet
Networking Reference Section
Python Quick Reference
Other Books You May Enjoy
Customer Reviews