Gray Hat Hacking, Second Edition

石头

作者：Shon Harris, Allen Harper, Chris Eagle, Jonathan Ness
出版日期：December 20, 2007
出版社：McGraw-Hill
页数：550
ISBN：ISBN-10: 0071495681 ISBN-13: 978-0071495684
文件格式：PDF


Product Description

“A fantastic book for anyone looking to learn the toolsand techniques needed to break in and stay in.” –Bruce Potter, Founder,The Shmoo Group

“Very highly recommended whether you are a seasonedprofessional or just starting out in the security business.” –SimpleNomad, Hacker

From the Back Cover
Uncover, plug, and ethically disclose security flaws
Prevent catastrophic network attacks by exposing security flaws,fixing them, and ethically reporting them to the software author. Fullyexpanded to cover the hacker’s latest devious methods, Gray Hat Hacking: The Ethical Hacker’s Handbook, Second Editionlays out each exploit alongside line-by-line code samples, detailedcountermeasures, and moral disclosure procedures. Find out how toexecute effective penetration tests, use fuzzers and sniffers, performreverse engineering, and find security holes in Windows and Linuxapplications. You’ll also learn how to trap and autopsy stealth worms,viruses, rootkits, adware, and malware.

• Implement vulnerability testing, discovery, and reporting procedures that comply with applicable laws
• Learn the basics of programming, stack operations, buffer overflow and heap vulnerabilities, and exploit development
• Test and exploit systems using Metasploit and other tools
• Break in to Windows and Linux systems with perl scripts, Python scripts, and customized C programs
• Analyze source code using ITS4, RATS, FlawFinder, PREfast, Splint, and decompilers
• Understand the role of IDA Pro scripts, FLAIR tools, and third-party plug-ins in discovering software vulnerabilities
• Reverse-engineer software using decompiling, profiling, memory monitoring, and data flow analysis tools
• Reveal client-side web browser vulnerabilities with MangleMe, AxEnum, and AxMan
• Probe Windows Access Controls to discover insecure access tokens, security descriptors, DACLs, and ACEs
• Find and examine malware and rootkits using honeypots, honeynets, and Norman SandBox technology

majiajust

非常感谢

liuxingzhuiyue

非常感谢

liuxingzhuiyue

非常感谢
bjh