Hacking - The art of exploitation

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • ponchersey
    Junior Member
    • 2009-Mar
    • 20

    #1

    Hacking - The art of exploitation




    - - - = = = ponchersey = = = ---
  • Xpl0it
    Junior Member
    • 2008-Dec
    • 4

    #2
    I am currently reading the book. It covers pretty in-depth coding and asm in a easy to follow way. Also comes with a LiveCD with example codes that you can modify and practice with. I am sure you could do something similar with BT.
    -Spl0it

    Comment

    • Dr_IDE
      Member
      • 2009-May
      • 33

      #3
      very good book, i would say that between this book and "Hacking Exposed" they pretty much gave me the base to complete OSCP.

      Comment

      • ponchersey
        Junior Member
        • 2009-Mar
        • 20

        #4
        I will take a look at "Hacking exposed"...

        About "The art of explotaition" it has a very good part one about network, sniff, spoof.. using several linux libraries. Also it gives a brief description of TCP/IP layers, a very good introduction in my opinion.

        - - - = = = ponchersey = = = ---

        Comment

        • Comrade
          Junior Member
          • 2009-Jun
          • 11

          #5
          This book is a classic, I recommend it to everyone. There is also a 2nd edition now, you can find it here:

          Comment

          • nick
            Junior Member
            • 2009-Aug
            • 27

            #6
            Another thumbs up for this. Had the 1st edition and am reading through the 2nd. The programming section is incredbily thorough and detailed, yet very readable and digestible. Covers ASCII polymorphic shellcode creation by hand. Come on, that just sounds cool.

            Comment

            • OS4834
              Junior Member
              • 2010-Jan
              • 6

              #7
              Just picked up a copy of the 2nd edition myself. Can't wait to get stuck in!

              Comment

              • hinoshori
                Junior Member
                • 2010-Jan
                • 24

                #8
                i'm halfway through this book, and im enjoying it very much.
                One pointer for anyone using this book (if your new to coding): type all the code examples as you go, it helps

                Comment

                • OS3083
                  Junior Member
                  • 2010-Oct
                  • 1

                  #9
                  I just wish that the publisher would put it out on the e-reader format.

                  Comment

                  • OS6250
                    Junior Member
                    • 2010-Dec
                    • 5

                    #10
                    Agree, it is good one. also have one publish in my local language so I bought two copy of them.

                    Comment

                    • OS7022
                      Junior Member
                      • 2011-Jun
                      • 5

                      #11
                      I read the first half of this book in the hopes of preparing myself for PWB.
                      I just started 3 days ago, but glancing at the TOC of the .pdf file - I'd say I'm well prepared for much of it.

                      Thumbs up from me!

                      Comment

                      • OS-11246
                        Junior Member
                        • 2013-Aug
                        • 5

                        #12
                        I can recommend this book,
                        I have already bought it some time ago, and it did provide me with a lot of pratical information and knowledge.

                        This is very useful when you want to test something in real time.

                        Comment

                        • OS-27070
                          Junior Member
                          • 2017-Jan
                          • 2

                          #13
                          I read this book many years ago and loved it, great for introducing low level hacking concepts. For anyone interested, I came across a new YouTube channel named LiveOverflow and the "Binary Hacking" playlist is basically a video remake of the concepts in this book: https://www.youtube.com/watch?v=iyAy...9mpkfPNfHkzyeN. The videos even discuss some of the things that have changed recently, which the book is too dated to cover. Speaking of, wish Jon Erickson would release an updated / enhanced v3 of the book, or even a new book altogether.

                          Comment

                          • OS-41743
                            Junior Member
                            • 2018-Sep
                            • 1

                            #14
                            This book is very useful for a beginner in binary exploitation BUT totally useless in 2018 due to ASRL, non executable stack.
                            The book should also be rewritten with 64 bit examples and with much more emphasis on evading modern protection systems like DEP and a lot more on ROPing.
                            It is a good resource if you want to practice on http://overthewire.org/wargames/.

                            I recommend http://pwnable.kr/ as that site has systems with modern kernels.

                            Comment

                            • OS-37848
                              Member
                              • 2018-Apr
                              • 30

                              #15
                              Originally posted by OS-41743
                              This book is very useful for a beginner in binary exploitation BUT totally useless in 2018 due to ASRL, non executable stack.
                              The book should also be rewritten with 64 bit examples and with much more emphasis on evading modern protection systems like DEP and a lot more on ROPing.
                              It is a good resource if you want to practice on http://overthewire.org/wargames/.

                              I recommend http://pwnable.kr/ as that site has systems with modern kernels.
                              What learning resource would you recommend instead then ?

                              Comment

                              Working...