I believe most people know this. Recently, a new book of which I am one of the authors, "Web Vulnerability Analysis and Practical Attack and Defense Combat", was published:
This book is actually something that Wang Fang and everyone took the lead when they were in Changting in 2019. Although Master Fang later left Changting, he still insisted on completing the writing and promoting the publication of the book, and finally made "Web Vulnerability Analysis and "Offensive and Defense Actual Combat" will be available to you in 2023.
I am ashamed to say that my contribution in it is not too great, but I am very happy that we successfully used Vulhub as a platform for practical case demonstrations in this book. Most chapters are followed by at least one actual case in Vulhub as an experimental link. This is a good opportunity for more security enthusiasts to know about and actually use Vulhub.
April is the book pre-sale period, but some friends have actually gotten the physical books, even earlier than me... Yes, I haven't gotten the book until today, and my book is still drifting in the Pacific. Leaving its hometown, I don’t know when it will land in my hands. Therefore, I cannot sign books and donate books like my friends in China.
During this time, we also received some positive feedback, such as:
Although there are some criticisms of other books in the comments that I don't necessarily agree with, I am very happy to receive everyone's recognition and support, and I hope it can help more people.
For me, I would recommend this book to the following types of people:
For information security students , if you are still struggling with the lack of a systematic introductory book on security, "Web Vulnerability Analysis and Attack and Defense Practice" can be used as a large and comprehensive study manual to get started with zero foundation.
Information security practitioners , if you are dissatisfied with your current work status and think that the work content is boring and cannot bring much help to your growth, "Web Vulnerability Analysis and Attack and Defense Practice" will be a book to improve your hard power and escape from the status quo. Good book.
Web security researcher , if you are often exposed to various vulnerabilities in your daily work, but you never have the motivation or energy to summarize the knowledge you have mastered, and the content in your mind is seriously fragmented, then read "Web Vulnerability Analysis and Attack and Defense Practice" is also a good opportunity to clarify your knowledge system.
Programmers or operation and maintenance personnel , if you feel some "volume" and anxiety in the cold winter of the Internet, you can also try to understand some security-oriented content, calm down and read "Web Vulnerability Analysis and Attack and Defense Practice", I believe that no matter what it is for you In terms of main business or career change, it will be of great help.
Compared with some traditional security books, the advantages of our book can be summarized as follows:
The content is detailed and focused . This book uses a thickness and length that is acceptable to everyone. It contains almost all new and old major vulnerabilities in the field of Web security, analysis of principles, and practical testing processes. It highlights what should be highlighted and what should be omitted. It is not perfunctory or redundant.
The content is new enough . The field of Web security has made great progress in the past ten years, and a lot of new content has emerged. This book devotes a lot of space to introducing this part of the content, including many techniques that can be used in actual combat.
Experimental environment that can be started with one click . This is of course due to Vulhub. Although Vulhub is an open source project, there is basically not much content on the principles of vulnerabilities. Combined with this book, you will have a deeper understanding of the principles and practices of vulnerabilities.
In the past few days, thanks to everyone's support and love, this book has also ranked first on JD.com's "Computer and Internet Books Best-Selling List." If you are interested, you can scan the QR code below to purchase:
A few days ago, we organized a book donation event in the "Code Audit" Knowledge Planet. The top 5 in April and May will receive 5 books each. For fans of the "Code Audit" public account, I will also organize a It is a zero-threshold lottery event. There is no need to publish posts or articles. You only need to follow the public account and forward this article to your circle of friends to participate in the lottery. The lottery will be held at 8 pm on April 28th to give away three copies of "Web Vulnerability Analysis and Attack and Defense Practice".