.

Reading Suggestions

<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Tue Oct 28, 2008 4:45 pm

Reading Suggestions

Hello everyone,

I just finished reading Hacking, The Art of Exploitation 2nd Edition by Jon Erickson.  I thought this was a great book that got me started on writing my own exploits.  While I am not planning to go into vulnerability research, I do hope to gain an indepth understanding of exploitation.  As a side goal, I am also hoping to be able to begin extending the Metasploit framework with the countless exploits and proofs of concept available out there.  I am trying to figure out what I want to read next, and I am hoping that you guys can offer some advice and opinions.

While reading the book, I got a refresher in C programming, which I haven't done much since college.  I am pretty confident in my C and C++ programming knowledge at this point.  However, I am severely lacking in Assembly and understanding of the Intel architecture.  Can someone recommend their favorite Assembly book for Intel architecture?

Also, this book concentrated on NIX and its method of memory management.  All of the sample exploits pertained to sample Linux programs.  Windows is a bit different and has its own libraries.  Is there a similar publication that deals more with the Windows architecture, it's memory management and stack defense methods, from a hacker's perspective?

Thank you in advance! 
~~~~~~~~~~~~~~
Ketchup
<<

NickFnord

User avatar

Full Member
Full Member

Posts: 117

Joined: Fri Sep 05, 2008 5:25 am

Post Wed Oct 29, 2008 5:34 am

Re: Reading Suggestions

I've found the following free assembly language guides/books helpful - you may want to read them first before paying for something as they are pretty comprehensive.

Art of Assembly Language Programming

PC Assembly Language

I know you said you were not interested in vulnerability research but perhaps one option would be the shellcoders handbook - which seems extremely highly recommended (although I havn't read it myself it's on my christmas list).


edit:  fixed links
Last edited by NickFnord on Wed Oct 29, 2008 10:42 am, edited 1 time in total.
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Wed Oct 29, 2008 9:56 am

Re: Reading Suggestions

Thanks!  I will definitely have to check those out. 

Oh, and to clarify one thing.  When I said that I wasn't planning to go into vulnerability research, I meant to say that I wasn't planning to make a career out of it.  I am more than interested in this science from a hobby perspective.  I am just comfortable doing Sec Audits and Pen Tests and slowly drifting towards a management role at this point of my career :)
~~~~~~~~~~~~~~
Ketchup

Return to Programming

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software