Hands-on Penetration Testing for Web Applications; Web security testing on modern applications, 2nd Edition

Hands-on Penetration Testing for Web Applications offers readers with the knowledge and skillset to identify, exploit, and control the security vulnerabilities present in commercial web applications, including online banking, mobile payments, and e-commerce applications. 

Table of Contents
1. Introduction to Security Threats
2. Web Application Security Essentials
3. Web Pentesting Methodology
4. Testing Authentication Failures
5. Testing Secure Session Management
6. Testing Broken Access Control
7. Testing Sensitive Data Exposure
8. Testing Secure Data Validation
9. Techniques to Attack Application Users
10. Testing Security Misconfigurations
11. Automating Security Attacks
12. Penetration Testing Tools
13. Pen Test Management and Reporting
14. Defense In Depth
15. Security Testing in Cloud