- 1:Bab satu - Pendahuluan
- 1.1:Tentang penulis
- 1.2:Hasrat
- 1.3:Lingkungan
- 1.4:Tetapkan Tujuan
- 1.5:Pengujian Fuzzer
- 1.6:Ketekunan dan Keberuntungan
- 1.7:Media Sosial
- 1.8:Dasar-Dasar
- 1.9:Ringkasan
- 2:Bab dua - JavaScript tanpa tanda kurung
- 2.1:Memanggil fungsi tanpa tanda kurung
- 2.2:Memanggil fungsi dengan argumen tanpa tanda kurung
- 2.3:Ekspresi Throw
- 2.4:Template bertanda
- 2.5:Simbol instance has
- 2.6:Ringkasan
- 3:Bab tiga - Fuzzing
- 3.1:Kebenaran
- 3.2:Fuzzing URL JavaScript
- 3.3:Fuzzing URL HTTP
- 3.4:Fuzzing HTML
- 3.5:Fuzzing perilaku yang diketahui
- 3.6:Fuzzing escape
- 3.7:Ringkasan
- 4:Bab empat - DOM untuk hacker
- 4.1:Di mana window saya?
- 4.2:Cakupan Peristiwa HTML
- 4.3:DOM clobbering
- 4.4:Ringkasan
- 5:Bab lima - Eksploitasi browser
- 5.1:Pendahuluan
- 5.2:Penanganan URL lintas asal yang salah pada Firefox
- 5.3:Penugasan Safari ke nama host lintas asal
- 5.4:Bypass SOP penuh di Internet Explorer
- 5.5:Kebocoran informasi parsial SOP di Chrome
- 5.6:Bypass SOP penuh Safari
- 5.7:Bypass SOP Opera
- 5.8:Ringkasan
- 6:Bab enam - Pencemaran prototipe
- 6.1:Pengantar
- 6.2:Pencemaran prototipe sisi klien
- 6.3:Pencemaran prototipe sisi server
- 6.4:Ringkasan
- 7:Bab tujuh - JavaScript Non-alfanumerik
- 7.1:Menulis JavaScript Non-alfanumerik
- 7.2:Non-alpha tanpa tanda kurung
- 7.3:Dinding enam karakter
- 7.4:Tak terbatas dan lebih jauh lagi
- 7.5:Ringkasan
- 8:Bab delapan - XSS
- 8.1:Menutup skrip
- 8.2:Komentar di dalam script
- 8.3:Entitas HTML di dalam skrip SVG
- 8.4:Skrip tanpa skrip penutup
- 8.5:Muatan nama jendela
- 8.6:Protokol yang Dapat Ditetapkan
- 8.7:Peta sumber untuk membuat pingbalik
- 8.8:Jalur pengalihan baru
- 8.9:Komentar JavaScript
- 8.10:Baris Baru
- 8.11:Karakter Spasi Putih
- 8.12:Impor dinamis
- 8.13:Namespace XHTML di XML
- 8.14:Unggahan SVG
- 8.15:Elemen use SVG
- 8.16:Entitas HTML
- 8.17:Peristiwa
- 8.18:XSS dalam input tersembunyi
- 8.19:Popovers
- 8.20:Ringkasan
- 9:Terima Kasih
- 1:Bab satu - Pendahuluan
JavaScript untuk hackers (Edisi Bahasa Indonesia)
Belajar berpikir seperti seorang hacker
Pelajari cara menemukan perilaku menarik dan cacat dalam JavaScript. Dengan membaca buku ini, Anda akan menemukan teknik-teknik terbaru dan terbaik untuk meretas JavaScript dan menghasilkan XSS payloads. Termasuk cara membangun JavaScript hanya dengan menggunakan karakter +[]()!. Belum pernah mendengar tentang DOM Clobbering? Buku ini memiliki semua detailnya.
This book is a translation into Indonesian of JavaScript for hackers which was originally written in English
Minimum price
$20.00
$35.00
You pay
$35.00Authors earn
$28.00PDF
EPUB
About
About the Book
Pernahkah Anda bertanya-tanya bagaimana seorang hacker menemukan kelemahan di browser dan JavaScript? Buku ini berbagi proses berpikir dan memberikan alat untuk menemukan kelemahan Anda sendiri. Buku ini membahas dasar-dasar hacking JavaScript, lalu menjelaskan cara membuat payload JavaScript yang tidak menggunakan tanda kurung.
- Menunjukkan bagaimana Anda dapat menemukan kelemahan dengan fuzzing dan cara cepat melakukan fuzzing jutaan karakter dalam hitungan detik.
- Ingin meretas DOM? Buku ini akan membantu Anda.
- Baca tentang berbagai bypass SOP browser yang ditemukan oleh penulis secara rinci.
- Tidak tahu tentang polusi prototipe sisi klien? Buku ini cocok untuk Anda!
- Ingin belajar teknik XSS terbaru dan terbaik? Anda perlu membeli buku ini.
Feedback
This book is a translation into Indonesian of JavaScript for hackers which was originally written in English
Author
About the Authors
Gareth Heyes
Peneliti PortSwigger Gareth Heyes mungkin paling dikenal karena karyanya dalam melarikan diri dari kotak pasir JavaScript, dan menciptakan vektor XSS yang sangat elegan. Di waktu luangnya, ia suka membuat ruangan 3D interaktif dan game dengan murni menggunakan CSS dan sering kali memposting tentang hal itu serta bereksperimen di situs webnya garethheyes.co.uk. Gareth adalah ayah dari dua gadis yang luar biasa dan suami dari seorang istri yang luar biasa, serta penggemar berat Liverpool FC.
Dalam kehidupan sehari-harinya di PortSwigger, Gareth sering kali menciptakan vektor XSS baru, meneliti teknik baru untuk menyerang aplikasi web, dan mempersiapkan diri untuk berbicara di konferensi di seluruh dunia. Sorotan terbaru adalah presentasinya "Server-side prototype pollution: Black-box detection without the DoS" di OWASP Global AppSec Dublin, 2023. Dia juga penulis dari XSS Cheat Sheet dari PortSwigger. Di waktu luangnya, ia senang menulis ekstensi BApp baru (dia adalah pencipta dari Hackvertor dan Taborator).
Episode 255
An Interview with Gareth Heyes
TranslateAI
Leanpub now has a TranslateAI service which uses AI to translate their book from English into up to 31 languages, or from one of those 31 languages into English. We also have a GlobalAuthor bundle which uses TranslateAI to translate English-language books into either 8 or 31 languages.
Leanpub exists to serve our authors. We want to help you reach as many readers as possible, in their preferred language. So, just as Leanpub automates the process of publishing a PDF and EPUB ebook, we've now automated the process of translating those books!
Translations
Translations
Contents
Table of Contents
The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.
You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!
So, there's no reason not to click the Add to Cart button, is there?
See full terms...
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earned over $15 million writing, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub
You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.