Understand web technologies and their security implications. This appendix covers the fundamentals of web servers, protocols, and session management that are essential for web application testing.
Topics Covered
- G1 Web Servers and Their Flaws - Apache, IIS, Nginx vulnerabilities
- G2 Web Site Structure Discovery - Directory enumeration and site mapping
- G3 Session Management Flaws - Cookie security, session fixation, and hijacking
- G4 Web Protocols - HTTP/HTTPS, headers, and request methods