Books by splitShops
Web Application Security: Exploitation and Countermeasures for Modern Web Applications - Paperback
$65.99
In stock
Shipping charges, applicable taxes, the final order total, and available payment methods are shown during checkout before payment. Delivery timing varies by item and fulfillment origin. Standard U.S. returns are by mail for eligible new, unopened items within 30 days of carrier delivery. Customers pay standard return shipping; there is no restocking fee. Approved refunds are issued within 5 business days after the return is received and inspected. Standard exchanges are not offered.
Cindi Book items have a flat $9.99 shipping charge. Shopify Collective items use shipping rates set by the supplier. Orders containing items from different fulfillment sources may include more than one shipping charge. Your full shipping total is shown at checkout before payment.
Return eligibility is subject to the full policy. Opened, read, or unsealed books with broken seals or visible wear are final sale. Digital downloads, gift cards, and personalized products are non-refundable. Original shipping charges are not refunded for standard returns. Contact us within 7 days of delivery about damaged, defective, or incorrect items.
by Andrew Hoffman (Author)
In the first edition of this critically acclaimed book, Andrew Hoffman defined the three pillars of application security: reconnaissance, offense, and defense. In this revised and updated second edition, he examines dozens of related topics, from the latest types of attacks and mitigations to threat modeling, the secure software development lifecycle (SSDL/SDLC), and more.
Hoffman, senior staff security engineer at Ripple, also provides information regarding exploits and mitigations for several additional web application technologies such as GraphQL, cloud-based deployments, content delivery networks (CDN) and server-side rendering (SSR). Following the curriculum from the first book, this second edition is split into three distinct pillars comprising three separate skill sets:
- Pillar 1: Recon--Learn techniques for mapping and documenting web applications remotely, including procedures for working with web applications
- Pillar 2: Offense--Explore methods for attacking web applications using a number of highly effective exploits that have been proven by the best hackers in the world. These skills are valuable when used alongside the skills from Pillar 3.
- Pillar 3: Defense--Build on skills acquired in the first two parts to construct effective and long-lived mitigations for each of the attacks described in Pillar 2.
Pay with
Available payment methods and your final total are shown at checkout before payment.
Clear Information Before You Order
Cindi Book is the trade name of Cindi Book LLC, a Texas-registered online-only retailer. We provide clear contact, shipping, return, and checkout information so customers can make informed purchasing decisions.
Business & Customer Care
Cindi Book LLC
Administrative office only; no storefront or local pickup.
214-308-1733 · info@cindibook.com
Monday–Friday, 8:00 AM–5:00 PM CT
Shipping Transparency
Orders ship within the United States. Cindi Book branded titles typically arrive in 5–9 business days, including 0–2 business days of handling and 5–7 business days in transit. Supplier-fulfilled items typically arrive in 8–11 business days, including 1–3 business days of handling and 7–8 business days in transit. Business days are Monday–Friday, excluding U.S. federal holidays. Delivery estimates are not guarantees. Cindi Book items have a flat $9.99 shipping charge. Shopify Collective items use shipping rates set by the supplier. Orders containing items from different fulfillment sources may include more than one shipping charge. Your full shipping total is shown at checkout before payment.
Returns & Refunds
Standard U.S. returns are accepted for eligible new, unopened items within 30 days of carrier delivery. Returns are by mail. Customers are responsible for standard return shipping, there is no restocking fee, and standard exchanges are not offered. Once an approved return is received and inspected, the refund is issued to the original payment method within 5 business days. Damaged, defective, or incorrect items are handled at no return-shipping cost to the customer.
Return eligibility is subject to the full policy. Opened, read, or unsealed books with broken seals or visible wear are final sale. Digital downloads, gift cards, and personalized products are non-refundable. Original shipping charges are not refunded for standard returns. Contact us within 7 days of delivery about damaged, defective, or incorrect items.
Payment & Checkout
Checkout is processed securely through Shopify. Shipping charges, applicable taxes, the final order total, and available payment methods are shown before you submit payment.
Order Responsibility
Some items may ship from Cindi Book or U.S.-based publishing, manufacturing, or distribution suppliers that fulfill orders for Cindi Book. Cindi Book LLC remains the customer-service contact for order questions, delivery support, returns, and refunds.