Foster Writing Security Tools and Exploits

1. Auflage 2006
ISBN: 978-0-08-049313-8
Verlag: Elsevier Science & Techn.
Format: PDF
Kopierschutz: 1 - PDF Watermark

E-Book, Englisch, 650 Seiten, Web PDF

Writing Security Tools and Exploits will be the foremost authority on vulnerability and security code and will serve as the premier educational reference for security professionals and software developers. The book will have over 600 pages of dedicated exploit, vulnerability, and tool code with corresponding instruction. Unlike other security and programming books that dedicate hundreds of pages to architecture and theory based flaws and exploits, this book will dive right into deep code analysis. Previously undisclosed security research in combination with superior programming techniques will be included in both the Local and Remote Code sections of the book.

The book will be accompanied with a companion Web site containing both commented and uncommented versions of the source code examples presented throughout the book. In addition to the book source code, the CD will also contain a copy of the author-developed Hacker Code Library v1.0. The Hacker Code Library will include multiple attack classes and functions that can be utilized to quickly create security programs and scripts. These classes and functions will simplify exploit and vulnerability tool development to an extent never before possible with publicly available software.

* Provides readers with working code to develop and modify the most common security tools including Nmap and Nessus
* Learn to reverse engineer and write exploits for various operating systems, databases, and applications
* Automate reporting and analysis of security log files

Zielgruppe

Academic/professional/technical: Research and professional

Autoren/Hrsg.

Foster, James C

Inhaltsverzeichnis

1;Cover;1
2;Front Matter;2
3;Contents;13
4;Chapter 1 Writing Exploits and Security Tools;25
5;Chapter 2 Assembly and Shellcode;47
6;Chapter 3 Exploits: Stack;123
7;Chapter 4 Exploits: Heap;185
8;Chapter 5 Exploits: Format Strings;225
9;Chapter 6 Writing Exploits I;265
10;Chapter 7 Writing Exploits II;287
11;Chapter 8 Coding for Ethereal;343
12;Chapter 9 Coding for Nessus;417
13;Chapter 10 Extending Metasploit I;477
14;Chapter 11 Extending Metasploit II;515
15;Chapter 12 Extending Metasploit III;563
16;Appendix A Data Conversion;621
17;Appendix B Syscall Reference;629
18;Appendix C Taps Currently;633
19;Appendix D Glossary;637
20;Index;647