Gray Hat Hacking The Ethical Hacker's Handbook

Description

Cover Title Page Copyright Page Contents Preface Acknowledgments Introduction Part I Crash Course: Preparing for the War Chapter 1 Ethical Hacking and the Legal System Why You Need to Understand Your Enemy’s Tactics The Ethical Hacking Process The Rise of Cyberlaw Vulnerability Disclosure Summary References For Further Reading Chapter 2 Programming Survival Skills C Programming Language Computer Memory Intel Processors Assembly Language Basics Debugging with gdb Python Survival Skills Summary References For Further Reading Chapter 3 Static Analysis Ethical Reverse Engineering Why Bother with Reverse Engineering? Source Code Analysis Binary Analysis Summary For Further Reading Chapter 4 Advanced Analysis with IDA Pro Static Analysis Challenges Extending IDA Pro Summary For Further Reading Chapter 5 World of Fuzzing Introduction to Fuzzing Choosing a Target Types of Fuzzers Getting Started Peach Fuzzing Framework Generation Fuzzers Summary For Further Reading Chapter 6 Shellcode Strategies User Space Shellcode Other Shellcode Considerations Kernel Space Shellcode Summary References For Further Reading Chapter 7 Writing Linux Shellcode Basic Linux Shellcode Implementing Port-Binding Shellcode Implementing Reverse Connecting Shellcode Encoding Shellcode Automating Shellcode Generation with Metasploit Summary For Further Study Part II From Vulnerability to Exploit Chapter 8 Spoofing-Based Attacks What Is Spoofing? ARP Spoofing DNS Spoofing NetBIOS Name Spoofing and LLMNR Spoofing Summary For Further Reading Chapter 9 Exploiting Cisco Routers Attacking Community Strings and Passwords SNMP and TFTP Attacking Cisco Passwords Middling Traffic with Tunnels Exploits and Other Attacks Summary For Further Reading Chapter 10 Basic Linux Exploits Stack Operations Buffer Overflows Local Buffer Overflow Exploits Exploit Development Process Summary For Further Reading Chapter 11 Advanced Linux Exploits Format String Exploits Memory Protection Schemes Summary References For Further Reading Chapter 12 Windows Exploits Compiling and Debugging Windows Programs Writing Windows Exploits Understanding Structured Exception Handling (SEH) Summary References For Further Reading Chapter 13 Bypassing Windows Memory Protections Understanding Windows Memory Protections (XP SP3, Vista, 7, 8, Server 2008, and Server 2012) Bypassing Windows Memory Protections Summary References For Further Reading Chapter 14 Exploiting the Windows Access Control Model Why Access Control Is Interesting to a Hacker How Windows Access Control Works Tools for Analyzing Access Control Configurations Special SIDs, Special Access, and “Access Denied” Analyzing Access Control for Elevation of Privilege Attack Patterns for Each Interesting Object Type What Other Object Types Are Out There? Summary For Further Reading Chapter 15 Exploiting Web Applications Overview of the Top 10 Web Vulnerabilities MD5 Hash Injection Multibyte Encoding Injection Hunting Cross-site Scripting (XSS) Unicode Normalization Forms Attack Summary References For Further Reading Chapter 16 Exploiting IE: Smashing the Heap Setting Up the Environment Introduction to Heap Spray Spraying with HTML5 DOM Element Property Spray (DEPS) HeapLib2 Technique Flash Spray with Byte Arrays Flash Spray with Integer Vectors Leveraging Low Fragmentation Heap (LFH) Summary References For Further Reading Chapter 17 Exploiting IE: Use-After-Free Technique Use-After-Free Overview Dissecting Use-After-Free (UAF) Leveraging the UAF Vulnerability Summary References For Further Reading Chapter 18 Advanced Client-Side Exploitation with BeEF BeEF Basics Hooking Browsers Fingerprinting with BeEF Browser Exploitation Automating Attacks Summary For Further Reading Chapter 19 One-Day Exploitation with Patch Diffing Introduction to Binary Diffing Binary Diffing Tools Patch Management Process Summary References For Further Reading Part III Advanced Malware Analysis Chapter 20 Dissecting Android Malware The Android Platform Malware Analysis Summary For Further Reading Chapter 21 Dissecting Ransomware History of Ransomware Options for Paying the Ransom Dissecting Ransomlock CryptoLocker Summary For Further Reading Chapter 22 Analyzing 64-bit Malware Overview of the AMD64 Architecture Decrypting C&C Domains Summary For Further Reading Chapter 23 Next-Generation Reverse Engineering Notable IDA Plug-ins Honeypots and Sandboxes Using TrapX Summary References For Further Reading Appendix About the Download Index A B C D E F G H I J K L M N O P R S T U V W X Y Z