Gray Hat Hacking: The Ethical Hackers Handbook

0.0

Gray Hat Hacking: The Ethical Hacker's Handbook, Third Edition details the most recent vulnerabilities and remedies along with legal disclosure methods. Learn from the experts how hackers target systems, defeat production schemes, write malicious code, and exploit flaws in Windows and Linux systems. Malware analysis, penetration testing, SCADA, VoIP, and Web security are also covered in this comprehensive resource. Develop and launch exploits using BackTrack and Metasploit Employ physical, social engineering, and insider attack techniques Build Perl, Python, and Ruby scripts that initiate stack buffer overflows Understand and prevent malicious content in Adobe, Office, and multimedia files Detect and block client-side, Web server, VoIP, and SCADA attacks Reverse engineer, fuzz, and decompile Windows and Linux software Develop SQL injection, cross-site scripting, and forgery exploits Trap malware and rootkits using honeypots and SandBoxes

0.0

Allen Harper CISSP, a retired Marine Corps Major, is the president and founder of N2NetSecurity, Inc., and a faculty member for the Institute for Applied Network Security, He has worked as a security consultant for the Internal Revenue Service and for Logical Security, LLC. Shon Harris CISSP, MCSE, is the president of Logical Security, a security consultant, a former engineer in the Air Force’s Information Warfare unit, an instructor, and a bestselling author. She was recognized as one of the top 25 women in the Information Security field by Information Security Magazine. Table of Contents Part I Introduction to Ethical Disclosure Chapter 1 Ethics of Ethical Hacking Chapter 2 Ethical Hacking and the Legal System Chapter 3 Proper and Ethical Disclosure Part II Penetration Testing and Tools Chapter 4 Social Engineering Attacks Chapter 5 Physical Penetration Attacks Chapter 6 Insider Attacks Chapter 7 Using the BackTrack Linux Distribution Chapter 8 Using Metasploit Chapter 9 Managing a Penetration Test Part III Exploiting Chapter 10 Programming Survival Skills Chapter 11 Basic Linux Exploits Chapter 12 Advanced Linux Exploits Chapter 13 Shellcode Strategies Chapter 14 Writing Linux Shellcode Chapter 15 Windows Exploits Chapter 16 Understanding and Detecting Content-Type Attacks Chapter 17 Web Application Security Vulnerabilities Chapter 18 VoIP Attacks Chapter 19 SCADA Attacks Part IV Vulnerability Analysis Chapter 20 Passive Analysis Chapter 21 Advanced Static Analysis with IDA Pro Chapter 22 Advanced Reverse Engineering Chapter 23 Client-Side Browser Exploits Chapter 24 Exploiting the Windows Access Control Model Chapter 25 Intelligent Fuzzing with Sulley Chapter 26 From Vulnerability to Exploit Chapter 27 Closing the Holes: Mitigation Part V Malware Analysis Chapter 28 Collecting Malware and Initial Analysis Chapter 29 Hacking Malware Index