Malcolm McDonald has been writing code for nearly 20 years. Realizing there was a lack of direct, practical learning material on the internet on web security, he created www.hacksplaining.com, an online security training program for web developers.

• Chapter 1: Let’s Hack a WebsiteChapter 2: How the Internet WorksChapter 3: How Browsers WorkChapter 4: How Web Servers WorkChapter 5: How Programmers WorkChapter 6: Injection AttacksChapter 7: Cross-Site Scripting AttacksChapter 8: Cross-Site Request Forgery AttacksChapter 9: Comprising AuthenticationChapter 10: Session HijackingChapter 11: PermissionsChapter 12: Information LeaksChapter 13: EncryptionChapter 14: Third-Party CodeChapter 15: XML AttacksChapter 16: Don’t Be an AccessoryChapter 17: Denial-of-Service Attacks

"Reads easily and provides essential knowledge to aspiring web developers."—Help Net Security"You can frame the usefulness of this book several ways: It’s well suited to those who are transitioning from development to security. It’s also another great security beginner-level read, providing introductions to an array of pen testing tools that will help you do your job better. And finally, it’s a terrific resource for developers looking to build more secure applications." —Britt Kemp, Bishop Fox Labs

Malcolm McDonald has been writing code for nearly 20 years. Realizing there was a lack of direct, practical learning material on the internet on web security, he created www.hacksplaining.com, an online security training program for web developers.

• Chapter 1: Let’s Hack a WebsiteChapter 2: How the Internet WorksChapter 3: How Browsers WorkChapter 4: How Web Servers WorkChapter 5: How Programmers WorkChapter 6: Injection AttacksChapter 7: Cross-Site Scripting AttacksChapter 8: Cross-Site Request Forgery AttacksChapter 9: Comprising AuthenticationChapter 10: Session HijackingChapter 11: PermissionsChapter 12: Information LeaksChapter 13: EncryptionChapter 14: Third-Party CodeChapter 15: XML AttacksChapter 16: Don’t Be an AccessoryChapter 17: Denial-of-Service Attacks

"Reads easily and provides essential knowledge to aspiring web developers."—Help Net Security"You can frame the usefulness of this book several ways: It’s well suited to those who are transitioning from development to security. It’s also another great security beginner-level read, providing introductions to an array of pen testing tools that will help you do your job better. And finally, it’s a terrific resource for developers looking to build more secure applications." —Britt Kemp, Bishop Fox Labs

Malcolm McDonald has been writing code for nearly 20 years. Realizing there was a lack of direct, practical learning material on the internet on web security, he created www.hacksplaining.com, an online security training program for web developers.

• Chapter 1: Let’s Hack a WebsiteChapter 2: How the Internet WorksChapter 3: How Browsers WorkChapter 4: How Web Servers WorkChapter 5: How Programmers WorkChapter 6: Injection AttacksChapter 7: Cross-Site Scripting AttacksChapter 8: Cross-Site Request Forgery AttacksChapter 9: Comprising AuthenticationChapter 10: Session HijackingChapter 11: PermissionsChapter 12: Information LeaksChapter 13: EncryptionChapter 14: Third-Party CodeChapter 15: XML AttacksChapter 16: Don’t Be an AccessoryChapter 17: Denial-of-Service Attacks

"Reads easily and provides essential knowledge to aspiring web developers."—Help Net Security"You can frame the usefulness of this book several ways: It’s well suited to those who are transitioning from development to security. It’s also another great security beginner-level read, providing introductions to an array of pen testing tools that will help you do your job better. And finally, it’s a terrific resource for developers looking to build more secure applications." —Britt Kemp, Bishop Fox Labs