The Shellcoder's Handbook: Discovering and Exploiting Security Holes |
|
|
|
|
This book is also available, brand-new, from 3rd-party marketplace sellers at Amazon.com, from $28.56.
|
The HTML code below can be pasted onto your web-site, your MySpace page, or blog - or any number of similar places - to create a link to this page:
If, instead of a text link, you'd like to create a link to this page which will display the book cover, if it's available, then the code below will do exactly that:
Check for the same book at these other US book sites:
[ Abebooks ]
[ Alibris ]
[ Barnes & Noble ]
[ Half.com ]
[ Powells ]
… or check UK bookstores
|
Editorial Review / Publisher's Information:
Product Description
- This much-anticipated revision, written by the ultimate group of top security experts in the world, features 40 percent new content on how to find security holes in any operating system or application
- New material addresses the many new exploitation techniques that have been discovered since the first edition, including attacking "unbreakable" software packages such as McAfee's Entercept, Mac OS X, XP, Office 2003, and Vista
- Also features the first-ever published information on exploiting Cisco's IOS, with content that has never before been explored
- The companion Web site features downloadable code files
|
Other Items You May Enjoy:
Browse Books From These Related Subjects:
Customer Reviews:
Koziol Is Great.
06 September, 2005
This book is absolutely excellent. One of the best, if not the best security book I have ever read.
As previously stated numerous times, it will require you have Assembly and C knowledge. If you don't know either one the book will move lightning fast and you will probably not have the ability to keep up. If you do know both, you should be able to take the book at a nice and steady speed.
Aside from difficulty, the rumors that it contains syntax errors ARE true. There are a few little errors in places like this (showing a typical off-by-one error to prove that C doesn't check boundries on arrays):
#include
int main() {
int array[5] = {1,2,3,4,5};
printf("%d",array[5];
}
While these errors ARE numerous and slightly annoying, the important thing to understand is that you get the general concepts they are trying to teach you. Anybody can fix the syntax to work correctly but if they don't know the logic behind the syntax it's no different than a car mechanic trying to fix a F-16 jet.
I am willing to overlook the syntax and lexical errors that appear in this book and give it a 5/5. I may be too light, but I think it's an absolutely essential book that everybody should read.
If you find yourself wanting to get a book, whether it be Hacking: The Art of Exploitation, Reversing: Secrets of Reverse Engineering, Rootkits: subverting the Windows kernel, or The Art of Computer Virus Research and Defense, while all excellent books (which I highly recommend you all read if this book interests you), if you have the ability to get The Shellcoders Handbook: Discovering and Exploiting Security Holes, you should.
- Amazon Customer Review
The Best Out There, But Not So Different From The First Edition
28 May, 2008
Loved it, I think this is the best book on shellcode out there. The only downside is, there isn't so much new content compared to the first edition. Other than that, this book is definitely a must if you're after low-level knowledge on computer security.
- Amazon Customer Review
Excellent Book
26 September, 2005
In the last few months I've read several white hat/black hat books on security, and I must say that this one is the best. Not for the completely new to the subject, and a little too quick to explain some complex topics, but still a great book. I have only two complaints, which aren't making me give this book less than a 5:
1. There's a lot of errors in the content, and following such an advance book when you can't trust the code gets complicated.
2. There are a few chapters, particularly in section 3, where the style hasn't been neutralized, and you can absolutely tell that the book was written by 5 different people with almost no coordination.
Other than that, excellent book. I'm looking forward to buying Database Hacker's Handbook, by the same editor.
- Amazon Customer Review
The Hacker's Bible
05 January, 2007
Watching the series "24" I'm often impress by how Chloe O'Brian and Edgar Stiles get to break into any system they want to with ease. Reading this book I now know where they got their information from. This book is a classic,any kind of exploit is analyse by accomplished security experts. The coverage is pretty intence and even seniors c and assembler programmers will need to read some of the material a few times to make sure they get it. This is the kind of book you have to take your time reading, yes it is that deep. Eventhough the book was released four years ago the price of the book remain the same, which tell me the information in it is valuable. If exploiting is something that is something to want to get into, look no further this is the only book you need.
- Amazon Customer Review
Need Some Work.
27 September, 2006
As a security consultant and penetration tester I can say that this books is quite interesting and covers lots of software exploitation area but it still need some work. Mostly on how concept are explained, used and writen. You'll still find lots of papers on internet with better (more complete) explanation but still, this is a must have for every penetration testers and security auditor.
Be advise: This book is for not for beginners.
- Amazon Customer Review
|
|