TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Web Hacking 101 [pdf]

111 点作者 bikeshack将近 10 年前

5 条评论

vezzy-fnord将近 10 年前
A mediocre, haphazardly put together cheat sheet with often application-specific examples. Pick up <i>The Web Application Hacker&#x27;s Handbook</i> instead, or read the OWASP Testing Guide.
评论 #9635936 未加载
评论 #9636555 未加载
评论 #9637121 未加载
catlover99将近 10 年前
This is a good rough draft but it lacks a lot of basic background information. It reminds me of trying to teach programming by only providing a collection of code snippets, these are useful but they won&#x27;t replace true guidance and they can become a dangerous learning crutch. Don&#x27;t forget who your audience is (or who you&#x27;re attracting with a title like Web Hacking 101) and remember that when you write you should be focusing on making it as easy to read and understand as easy as possible for them. Explain the whys behind taking certain steps such as why you should be google searching for sql errors (saves you time, it&#x27;s easy, google cache pages can show details about errors that are not longer visible on the live site, and most importantly what sql is and the implications of an error).<p>While it&#x27;s not about technical writing I think Kurt Vonnegut&#x27;s advice will help you to make a better write up. Specifically #7. -- Pitty the Readers[0]<p>Vonnegut mentions The Elements of Style[1] which you&#x27;ll find useful if you&#x27;re struggling to give detailed explanations<p>[0] <a href="http:&#x2F;&#x2F;peterstekel.com&#x2F;PDF-HTML&#x2F;Kurt%20Vonnegut%20advice%20to%20writers.htm" rel="nofollow">http:&#x2F;&#x2F;peterstekel.com&#x2F;PDF-HTML&#x2F;Kurt%20Vonnegut%20advice%20t...</a><p>[1] <a href="http:&#x2F;&#x2F;faculty.washington.edu&#x2F;heagerty&#x2F;Courses&#x2F;b572&#x2F;public&#x2F;StrunkWhite.pdf" rel="nofollow">http:&#x2F;&#x2F;faculty.washington.edu&#x2F;heagerty&#x2F;Courses&#x2F;b572&#x2F;public&#x2F;S...</a>
评论 #9636612 未加载
spydum将近 10 年前
not sure if im just old hat, but it always cracks me up when i see security advice in a PDF. I know PDF readers might have improved their track record (actually, have they?), but to me they still give me chills like opening some random .doc off the internets
评论 #9637588 未加载
评论 #9637457 未加载
bgilroy26将近 10 年前
There are some targets to practice on (such as WebGoat[1]) in the answers to this security.stackexchange question:<p><a href="http:&#x2F;&#x2F;security.stackexchange.com&#x2F;questions&#x2F;21523&#x2F;sample-vulnerable-web-apps-to-test-pentesting-platforms" rel="nofollow">http:&#x2F;&#x2F;security.stackexchange.com&#x2F;questions&#x2F;21523&#x2F;sample-vul...</a><p>[1] <a href="https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;Category%3aOWASP_WebGoat_Project" rel="nofollow">https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;Category%3aOWASP_WebGoat_Pro...</a>
评论 #9636573 未加载
oneeyedpigeon将近 10 年前
This is about &#x27;cracking&#x27; - security exploits etc. - rather than a general guide to web programming (which is what I expected).