Real-world Bug Hunting (a Field Guide To Web Hacking)

By (author) Peter Yaworski; By (author) Yaworski, Peter
Short description/annotation
Uses real-world bug reports to teach programmers and InfoSec professionals how to discover and protect vulnerabilities in web applications.
Description
Real-World Bug Hunting is a field guide to finding software bugs. Ethical hacker Peter Yaworski breaks down common types of bugs, then contextualises them with real bug bounty reports released by hackers on companies like Twitter, Facebook, Google, Uber, and Starbucks. As you read each report, you''ll gain deeper insight into how the vulnerabilities work and how you might find similar ones.
Review quote
"I am quite sure that [this book is] going to be one of the most recommended books for web app pen-testing. If it is not already."
—Sudo Realm

"A brilliant resource for anyone who aspires to be a professional bug hunter."
—Dana Epp, Security Boulevard
Biographical note
Peter Yaworski is a self-taught developer and ethical hacker who began building websites exclusively with Drupal. Since then, he has expanded his interest to Rails, Android app development, and software security, while producing over 100 video tutorials and interviews on YouTube covering ethical hacking, web development, and Android to help teach others what he''s learned. Peter continues to be an active bug bounty participant with thanks from Shopify, HackerOne, Salesforce, Twitter, Starbucks and the US Department of Defense among others.
Promotional headline
Uses real-world bug reports (vulnerabilities in software or in this case web applications) to teach programmers and InfoSec professionals how to discover and protect vulnerabilities in web applications.