- Paperback: 250 pages
- Publisher: NO STARCH PRESS; 1 edition (1 Nov 2003)
- Language English
- ISBN-10: 1593270070
- ISBN-13: 978-1593270070
- Product Dimensions: 23.4 x 18.5 x 2.3 cm
- Average Customer Review: 4.4 out of 5 stars See all reviews (9 customer reviews)
- Amazon Bestsellers Rank: 366,630 in Books (See Top 100 in Books)
- See Complete Table of Contents
 Trade In this Item for up to £0.25
Get an extra £5 when you trade in books worth £10 or more until June 30, 2012. Trade in Hacking: The Art of Exploitation for an Amazon.co.uk gift card of up to £0.25, which you can then spend on millions of items across the site. Trade-in values may vary (terms apply). Find more products eligible for trade-in.
|
|
There is a newer edition of this item:
|
Product details |
More About the Author
Product Description
Product Description
A comprehensive introduction to the techniques of
exploitation and creative problem-solving methods commonly
referred to as "hacking." It shows how hackers exploit
programs and write exploits, instead of just how to run
other people's exploits. This book explains the technical
aspects of hacking, including stack based overflows, heap
based overflows, string exploits, return-into-libc,
shellcode, and cryptographic attacks on 802.11b.
exploitation and creative problem-solving methods commonly
referred to as "hacking." It shows how hackers exploit
programs and write exploits, instead of just how to run
other people's exploits. This book explains the technical
aspects of hacking, including stack based overflows, heap
based overflows, string exploits, return-into-libc,
shellcode, and cryptographic attacks on 802.11b.
Tags Customers Associate with This Product(What's this?)Click on a tag to find related items, discussions, and people.
|
Sell a Digital Version of This Book in the Kindle Store
If you are a publisher or author and hold the digital rights to a book, you can sell a digital version of it in our Kindle Store.
Learn more
What Other Items Do Customers Buy After Viewing This Item?
Customer Reviews
Most Helpful Customer Reviews
20 of 20 people found the following review helpful
Format:Paperback
This book gives a good introduction to general security concepts.
it starts off with some common programming exploits (eg buffer overflows) and explains how they work and shows you how to execute them. This section of the book is good, although i found the need for other material to expand on what i learned here. For example aleph1's excellent tutorial Smash the Stack is a good way to supplement this. Other programming exploits explained are heap overflows, format strings and returning into libc. These are all well explained introductions, but to gain a deeper understanding it is necessary to do some more research.
it starts off with some common programming exploits (eg buffer overflows) and explains how they work and shows you how to execute them. This section of the book is good, although i found the need for other material to expand on what i learned here. For example aleph1's excellent tutorial Smash the Stack is a good way to supplement this. Other programming exploits explained are heap overflows, format strings and returning into libc. These are all well explained introductions, but to gain a deeper understanding it is necessary to do some more research.
There is also a good section on writing your own shellcode. Some assembly language experience is useful here and generally it is well explained and set out.
The section on network attacks is also a very good although at times it seems like he is only explaining how to use existing tools and doesn't go into the theory behind them enough, but having said that it is an excellent introduction. Topics covered here include: packet sniffing, DOS attacks, port scanning and TCP/IP hijacking.
The final section on encryption offers some good theoretical knowledge on general encryption concepts but lacks a little on the practical implications of this. However if you are really into encryption you will want to get a dedicated book on it. In the meantime this definatly severs as a good introduction.
With the nature of the topics covered the best way i found to learn was to read over a section and experiment with it. You can only learn so much from a book, but this book will give you a good knowledge base to start from. A decent knowledge of C is assumed, some assembly knowledge would be helpful but isn't strictly necessary.
66 of 69 people found the following review helpful
Format:Paperback
"Hacking: The Art of Exploitation" is a truly excellent resource for those *truly* interested in system exploitation. Erickson starts from the beginning by introducing the scene to the user, explaining what the book intends to teach the reader, as well as the whole deal with the hacking spirit and the workings of the hacking scene. Erickson wastes little time in delving deep into the technical details of common vulnerabilities often found in all sorts of programs, as well as teaching the reader how to write their very own homegrown exploit codes in several different programming languages. Whilst Erickson does not drown the user in boring or irrelevant information, he provides plenty of information which only encourages the reader even more to carry out some of the experimental exercises presented in the book.
A few topics covered in this truly great book include:
- Writing shellcodes (polymorphic, ASCII printable etc.)
- Defeating non-exec stacks (such as in OpenBSD) by teaching how to "return into libc" as an alternative to executing shellcode.
- Various network hacks (such as network DoS vulnerabilities aswell as a multitude of port scanning techniques).
- A wide and vast overview of crytography, including breaking WEP encryption, the details of various popular ciphers, and password cracking using a few little documented techniques.
- and much, much more...
I consider "Hacking: The Art of Exploitation" to be the bible of system exploitation. Whilst other "hacking" books provide an introduction to many off-the-shelf hacking tools, "Hacking: The Art of Exploitation" teaches the true spirit of hacking and system exploitation: creative thinking. This book is a must for all of those interested in true hacking.
7 of 7 people found the following review helpful
Format:Paperback
I consider this book to be excellent. It is a "must read" if you really want a thorough grasp of the priciples behind computer security. It concisely explains the techniques of exploitation, aided by clear code examples. You will benefit most from this book if you start with a basic background knowledge of C programming, shell scripting and networking.
Would you like to see more reviews about this item?
Were these reviews helpful?
Let us know
Most Recent Customer Reviews
Brilliant!
If you are a programmer who wants to learn about hacking and cracking techniques this book is great! Read more
Published on 22 Jan 2006 by Seb Butcher
Dont Bother Unless You Have Linux Installed
Hmmmm, I sometimes wonder whether these so called "Reviews" are actually written by the general public or people working for the book's publishing company! Read more
Published on 21 Nov 2005 by Jakeski
Best book on the subject full stop!
Hay,
To put it in plain English; The rest are crap and this is the best!
I looked at the rest out and they are just script kiddy books every one apart from this one. Read more
Published on 9 Sep 2005
Awesome
The brief synopsis above tells it like it is. The book contains no waffle just quality information. And there is more of that here than in most of the other wasted pages on my... Read more
Published on 4 Nov 2004
Fantastic...
This book is very well written, I found the buffer overflow chapters very helpful and better described than online documents.
Finally a book which addresses the real issues! Read more
Finally a book which addresses the real issues! Read more
Published on 10 Mar 2004 by ChrisNetworking
Hacking: The Art of Exploitation
This is the best book available for people who want to learn the ways of hackers, and to over come them
Published on 8 Feb 2004
Listmania!
|
|
Look for similar items by category
- Books > Computing & Internet > Digital Lifestyle > Online Shopping > Amazon
- Books > Computing & Internet > Networking & Security > Security > Cryptography & Encryption
- Books > Computing & Internet > Networking & Security > Security > Network Security
- Books > Computing & Internet > Software & Graphics
- Books > Computing & Internet > Web Development
- Books > Study Books
Look for similar items by subject
Feedback
- Would you like to update product info or give feedback on images?
- I am the Author, and I want to comment on my book.
- I am the Publisher, and I want to comment on this book.
