Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 49 guests and 3 members online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Programmingarrow Reading Suggestions
EH-Net
May 23, 2013, 01:41:01 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Reading Suggestions  (Read 4421 times)
0 Members and 1 Guest are viewing this topic.
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« on: October 28, 2008, 04:45:00 PM »

Hello everyone,

I just finished reading Hacking, The Art of Exploitation 2nd Edition by Jon Erickson.   I thought this was a great book that got me started on writing my own exploits.   While I am not planning to go into vulnerability research, I do hope to gain an indepth understanding of exploitation.   As a side goal, I am also hoping to be able to begin extending the Metasploit framework with the countless exploits and proofs of concept available out there.   I am trying to figure out what I want to read next, and I am hoping that you guys can offer some advice and opinions.

While reading the book, I got a refresher in C programming, which I haven't done much since college.   I am pretty confident in my C and C++ programming knowledge at this point.   However, I am severely lacking in Assembly and understanding of the Intel architecture.   Can someone recommend their favorite Assembly book for Intel architecture?

Also, this book concentrated on NIX and its method of memory management.  All of the sample exploits pertained to sample Linux programs.   Windows is a bit different and has its own libraries.  Is there a similar publication that deals more with the Windows architecture, it's memory management and stack defense methods, from a hacker's perspective?

Thank you in advance! 
Logged

~~~~~~~~~~~~~~
Ketchup
NickFnord
Full Member
***
Offline Offline

Posts: 117



View Profile WWW
« Reply #1 on: October 29, 2008, 05:34:34 AM »

I've found the following free assembly language guides/books helpful - you may want to read them first before paying for something as they are pretty comprehensive.

Art of Assembly Language Programming

PC Assembly Language

I know you said you were not interested in vulnerability research but perhaps one option would be the shellcoders handbook - which seems extremely highly recommended (although I havn't read it myself it's on my christmas list).


edit:  fixed links
« Last Edit: October 29, 2008, 10:42:11 AM by NickFnord » Logged
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #2 on: October 29, 2008, 09:56:59 AM »

Thanks!   I will definitely have to check those out.   

Oh, and to clarify one thing.  When I said that I wasn't planning to go into vulnerability research, I meant to say that I wasn't planning to make a career out of it.  I am more than interested in this science from a hobby perspective.  I am just comfortable doing Sec Audits and Pen Tests and slowly drifting towards a management role at this point of my career Smiley
Logged

~~~~~~~~~~~~~~
Ketchup
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.078 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.