JavaScript untuk hackers (Edisi Bahasa Indonesia)

Belajar berpikir seperti seorang hacker

Pelajari cara menemukan perilaku menarik dan cacat dalam JavaScript. Dengan membaca buku ini, Anda akan menemukan teknik-teknik terbaru dan terbaik untuk meretas JavaScript dan menghasilkan XSS payloads. Termasuk cara membangun JavaScript hanya dengan menggunakan karakter +[]()!. Belum pernah mendengar tentang DOM Clobbering? Buku ini memiliki semua detailnya.

Gareth Heyes and TranslateAI

This is a book in Indonesian!

This book is a translation into Indonesian of JavaScript for hackers which was originally written in English

Minimum price

20ドル.00

35ドル.00

You pay

35ドル.00

Authors earn

28ドル.00

PDF

EPUB

About

About the Book

Pernahkah Anda bertanya-tanya bagaimana seorang hacker menemukan kelemahan di browser dan JavaScript? Buku ini berbagi proses berpikir dan memberikan alat untuk menemukan kelemahan Anda sendiri. Buku ini membahas dasar-dasar hacking JavaScript, lalu menjelaskan cara membuat payload JavaScript yang tidak menggunakan tanda kurung.

Menunjukkan bagaimana Anda dapat menemukan kelemahan dengan fuzzing dan cara cepat melakukan fuzzing jutaan karakter dalam hitungan detik.
Ingin meretas DOM? Buku ini akan membantu Anda.
Baca tentang berbagai bypass SOP browser yang ditemukan oleh penulis secara rinci.
Tidak tahu tentang polusi prototipe sisi klien? Buku ini cocok untuk Anda!
Ingin belajar teknik XSS terbaru dan terbaik? Anda perlu membeli buku ini.

Share this book

Feedback

Email the Authors

This book is a translation into Indonesian of JavaScript for hackers which was originally written in English

Author

About the Authors

Gareth Heyes

Peneliti PortSwigger Gareth Heyes mungkin paling dikenal karena karyanya dalam melarikan diri dari kotak pasir JavaScript, dan menciptakan vektor XSS yang sangat elegan. Di waktu luangnya, ia suka membuat ruangan 3D interaktif dan game dengan murni menggunakan CSS dan sering kali memposting tentang hal itu serta bereksperimen di situs webnya garethheyes.co.uk. Gareth adalah ayah dari dua gadis yang luar biasa dan suami dari seorang istri yang luar biasa, serta penggemar berat Liverpool FC.

Dalam kehidupan sehari-harinya di PortSwigger, Gareth sering kali menciptakan vektor XSS baru, meneliti teknik baru untuk menyerang aplikasi web, dan mempersiapkan diri untuk berbicara di konferensi di seluruh dunia. Sorotan terbaru adalah presentasinya "Server-side prototype pollution: Black-box detection without the DoS" di OWASP Global AppSec Dublin, 2023. Dia juga penulis dari XSS Cheat Sheet dari PortSwigger. Di waktu luangnya, ia senang menulis ekstensi BApp baru (dia adalah pencipta dari Hackvertor dan Taborator).

Leanpub Podcast

Episode 255

An Interview with Gareth Heyes

TranslateAI

Leanpub now has a TranslateAI service which uses AI to translate their book from English into up to 31 languages, or from one of those 31 languages into English. We also have a GlobalAuthor bundle which uses TranslateAI to translate English-language books into either 8 or 31 languages.

Leanpub exists to serve our authors. We want to help you reach as many readers as possible, in their preferred language. So, just as Leanpub automates the process of publishing a PDF and EPUB ebook, we've now automated the process of translating those books!

Table of Contents

- 1:Bab satu - Pendahuluan
  - 1.1:Tentang penulis
  - 1.2:Hasrat
  - 1.3:Lingkungan
  - 1.4:Tetapkan Tujuan
  - 1.5:Pengujian Fuzzer
  - 1.6:Ketekunan dan Keberuntungan
  - 1.7:Media Sosial
  - 1.8:Dasar-Dasar
  - 1.9:Ringkasan
- 2:Bab dua - JavaScript tanpa tanda kurung
  - 2.1:Memanggil fungsi tanpa tanda kurung
  - 2.2:Memanggil fungsi dengan argumen tanpa tanda kurung
  - 2.3:Ekspresi Throw
  - 2.4:Template bertanda
  - 2.5:Simbol instance has
  - 2.6:Ringkasan
- 3:Bab tiga - Fuzzing
  - 3.1:Kebenaran
  - 3.2:Fuzzing URL JavaScript
  - 3.3:Fuzzing URL HTTP
  - 3.4:Fuzzing HTML
  - 3.5:Fuzzing perilaku yang diketahui
  - 3.6:Fuzzing escape
  - 3.7:Ringkasan
- 4:Bab empat - DOM untuk hacker
  - 4.1:Di mana window saya?
  - 4.2:Cakupan Peristiwa HTML
  - 4.3:DOM clobbering
  - 4.4:Ringkasan
- 5:Bab lima - Eksploitasi browser
  - 5.1:Pendahuluan
  - 5.2:Penanganan URL lintas asal yang salah pada Firefox
  - 5.3:Penugasan Safari ke nama host lintas asal
  - 5.4:Bypass SOP penuh di Internet Explorer
  - 5.5:Kebocoran informasi parsial SOP di Chrome
  - 5.6:Bypass SOP penuh Safari
  - 5.7:Bypass SOP Opera
  - 5.8:Ringkasan
- 6:Bab enam - Pencemaran prototipe
  - 6.1:Pengantar
  - 6.2:Pencemaran prototipe sisi klien
  - 6.3:Pencemaran prototipe sisi server
  - 6.4:Ringkasan
- 7:Bab tujuh - JavaScript Non-alfanumerik
  - 7.1:Menulis JavaScript Non-alfanumerik
  - 7.2:Non-alpha tanpa tanda kurung
  - 7.3:Dinding enam karakter
  - 7.4:Tak terbatas dan lebih jauh lagi
  - 7.5:Ringkasan
- 8:Bab delapan - XSS
  - 8.1:Menutup skrip
  - 8.2:Komentar di dalam script
  - 8.3:Entitas HTML di dalam skrip SVG
  - 8.4:Skrip tanpa skrip penutup
  - 8.5:Muatan nama jendela
  - 8.6:Protokol yang Dapat Ditetapkan
  - 8.7:Peta sumber untuk membuat pingbalik
  - 8.8:Jalur pengalihan baru
  - 8.9:Komentar JavaScript
  - 8.10:Baris Baru
  - 8.11:Karakter Spasi Putih
  - 8.12:Impor dinamis
  - 8.13:Namespace XHTML di XML
  - 8.14:Unggahan SVG
  - 8.15:Elemen use SVG
  - 8.16:Entitas HTML
  - 8.17:Peristiwa
  - 8.18:XSS dalam input tersembunyi
  - 8.19:Popovers
  - 8.20:Ringkasan
- 9:Terima Kasih

The Leanpub 60 Day 100% Happiness Guarantee

Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.

You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!

So, there's no reason not to click the Add to Cart button, is there?

See full terms...

Earn 8ドル on a 10ドル Purchase, and 16ドル on a 20ドル Purchase

We pay 80% royalties on purchases of 7ドル.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between 0ドル.99 and 7ドル.98. You earn 8ドル on a 10ドル sale, and 16ドル on a 20ドル sale. So, if we sell 5000 non-refunded copies of your book for 20ドル, you'll earn 80,000ドル.

(Yes, some authors have already earned much more than that on Leanpub.)

In fact, authors have earned over 14ドル million writing, publishing and selling on Leanpub.

Learn more about writing on Leanpub

Free Updates. DRM Free.

If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).

Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.

Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.

Learn more about Leanpub's ebook formats and where to read them

Write and Publish on Leanpub

You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!

Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.

Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.

Learn more about writing on Leanpub

Leanpub Header

Leanpub Navigation