|
||||||||||||||||||
|
||||||||||||||||||
|
||||||||||||||||||
Frequently Bought Together
Product Details
|
Product Description
Product Description
- This much-anticipated revision, written by the ultimate group of top security experts in the world, features 40 percent new content on how to find security holes in any operating system or application
- New material addresses the many new exploitation techniques that have been discovered since the first edition, including attacking "unbreakable" software packages such as McAfee's Entercept, Mac OS X, XP, Office 2003, and Vista
- Also features the first-ever published information on exploiting Cisco's IOS, with content that has never before been explored
- The companion Web site features downloadable code files
From the Back Cover
The black hats have kept up with security enhancements. Have you?
In the technological arena, three years is a lifetime. Since the first edition of this book was published in 2004, built-in security measures on compilers and operating systems have become commonplace, but are still far from perfect. Arbitrary-code execution vulnerabilities still allow attackers to run code of their choice on your system—with disastrous results.
In a nutshell, this book is about code and data and what happens when the two become confused. You'll work with the basic building blocks of security bugs—assembler, source code, the stack, the heap, and so on. You'll experiment, explore, and understand the systems you're running—and how to better protect them.
- Become familiar with security holes in Windows, Linux, Solaris, Mac OS X, and Cisco's IOS
Learn how to write customized tools to protect your systems, not just how to use ready-made ones
Use a working exploit to verify your assessment when auditing a network
Use proof-of-concept exploits to rate the significance of bugs in software you're developing
Assess the quality of purchased security products by performing penetration tests based on the information in this book
Understand how bugs are found and how exploits work at the lowest level
Inside This Book
(Learn More)
Front Cover | Copyright | Table of Contents | Excerpt | Index | Back Cover
Explore More
Concordance
Browse Sample PagesConcordance
Front Cover | Copyright | Table of Contents | Excerpt | Index | Back Cover
Suggested Tags from Similar Products(What's this?)Be the first one to add a relevant tag (keyword that's strongly related to this product)
|
What Other Items Do Customers Buy After Viewing This Item?
Customer Reviews
|
There are no customer reviews yet on Amazon.ca
|
||||||||||||||||||||
|
Most Helpful Customer Reviews on Amazon.com (beta)
Amazon.com:
3.2 out of 5 stars (4 customer reviews)
4 of 4 people found the following review helpful
4.0 out of 5 stars
Very good, explaing the basic, but... (read my review), Oct 21 2011
By Jean D'Elboux Diogo - Brazil - Published on Amazon.com
Amazon Verified Purchase(What's this?)
This review is from: The Shellcoder's Handbook: Discovering and Exploiting Security Holes (Paperback)
Basically this book is very good. It goes through the basic to some advanced techniques. The author tried to cover a lot of Operating Systems, from x86 (Windows and Linux) to Mac, Sparks and Cisco, so you should be aware whether this is your focus or not, if not you will take advantage of a few chapters of the book. In my case, I was interested just in x86 shellcode programming, so I should paid half of the price (just kidding). Also, it does not explain advanced techniques (such as code obfuscation, self-modification, etc), but it's very good for intermediate coders. Recommended.
2 of 3 people found the following review helpful
3.0 out of 5 stars
Good, but not ideal, Oct 11 2011
By W. Smartt - Published on Amazon.com
Amazon Verified Purchase(What's this?)
This book serves as a good introduction to shell coding. The first 6 chapters on linux are reasonably complete; if you read the material and take the time to learn the concepts you will be happy with your progress. However, as the book dives into other operating systems I feel that some of this completeness and solidarity are vanishing. As I get deeper and deeper into the text, there are more and more words and concepts which are prerequisite yet the authors never explained. It feels like they were very comprehensive and diligent in the first chapters, but got lazy and impatient as it progressed.
1 of 2 people found the following review helpful
1.0 out of 5 stars
Kindle version contains truncation errors, May 1 2012
By Eric - Published on Amazon.com
Amazon Verified Purchase(What's this?)
This review is about the Kindle formatting of the book, not the actual book content.The code samples are truncated when reading on the Kindle. Several characters are missing from longer lines.
Rotating the screen helps for some lines and makes others worse.
Listmania!
Look for similar items by category
Look for similar items by subject
Feedback
Would you like to update product info or give feedback on images?
|
