دانلود کتاب JavaScript for hackers: Learn to think like a hacker

فهرست مطالب :

Table of Contents Chapter one - Introduction Environment Set a goal Fuzzing Persistence and luck Social media The basics Summary Chapter two - JavaScript without parentheses Calling functions without parentheses Calling functions with arguments without parentheses Throw expressions Tagged templates Has instance symbol Summary Chapter three - Fuzzing The truth Fuzzing JavaScript URLs Fuzzing HTTP URLs Fuzzing HTML Fuzzing known behaviours Fuzzing escapes Summary Chapter four - DOM for hackers Where's my window? Scope of a HTML event DOM clobbering Summary Chapter five - Browser exploits Introduction Firefox incorrect handling of cross origin URLs Safari assignments to cross origin hostnames Internet Explorer full SOP bypass Chrome partial SOP infoleak Safari full SOP bypass Opera SOP bypass Summary Chapter six - Prototype pollution Introduction Client-side prototype pollution Server-side prototype pollution Summary Chapter seven - Non-alphanumeric JavaScript Writing non-alphanumeric JavaScript Non-alpha without parentheses The six character wall Infinity and beyond Summary Chapter eight - XSS Closing scripts Comments inside scripts HTML entities inside SVG script Script without closing script Window name payloads Source maps to create pingbacks New redirection sink JavaScript comments New lines Whitespace Dynamic imports XHTML namespace in XML SVG uploads SVG use elements HTML entities Events Summary Credits