Part IV Vulnerability Analysis
by Jonathan Ness, Chris Eagle, Shon Harris, Gideon Lenkey, Allen Harper, Terron Wil
Gray Hat Hacking The Ethical Hacker’s Handbook
- Cover Page
- Gray Hat Hacking the Ethical Hacker’s Handbook
- Copyright Page
- Contents
- Preface
- Acknowledgments
- Introduction
- Part I Introduction to Ethical Disclosure
- Chapter 1 Ethics of Ethical Hacking
- Where Do Attackers Have Most of Their Fun?
- Chapter 2 Ethical Hacking and the Legal System
- The Rise of Cyberlaw
- Understanding Individual Cyberlaws
- 18 USC Section 1029: The Access Device Statute
- 18 USC Section 1030 of the Computer Fraud and Abuse Act
- 18 USC Sections 2510, et. Seq., and 2701, et. Seq., of the Electronic Communication Privacy Act
- Digital Millennium Copyright Act (DMCA)
- Cyber Security Enhancement Act of 2002
- Securely Protect Yourself Against Cyber Trespass Act (SPY Act)
- Part II Penetration Testing and Tools
- Chapter 4 Social Engineering Attacks
- Chapter 5 Physical Penetration Attacks
- Chapter 6 Insider Attacks
- Chapter 7 Using the BackTrack Linux Distribution
- Chapter 8 Using Metasploit
- Chapter 9 Managing a Penetration Test
- Part III Exploiting
- Chapter 10 Programming Survival Skills
- Chapter 11 Basic Linux Exploits
- Chapter 12 Advanced Linux Exploits
- Chapter 13 Shellcode Strategies
- Chapter 14 Writing Linux Shellcode
- Chapter 15 Windows Exploits
- Chapter 16 Understanding and Detecting Content-Type Attacks
- Chapter 18 VoIP Attacks
- Chapter 19 SCADA Attacks
- Part IV Vulnerability Analysis
- Chapter 20 Passive Analysis
- Chapter 21 Advanced Static Analysis with IDA Pro
- Chapter 22 Advanced Reverse Engineering
- Chapter 23 Client-Side Browser Exploits
- Chapter 24 Exploiting the Windows Access Control Model
- Why Access Control Is Interesting to a Hacker
- How Windows Access Control Works
- Tools for Analyzing Access Control Configurations
- Special SIDs, Special Access, and “Access Denied”
- Analyzing Access Control for Elevation of Privilege
- Attack Patterns for Each Interesting Object Type
- What Other Object Types Are Out There?
- Chapter 26 From Vulnerability to Exploit
- Chapter 27 Closing the Holes: Mitigation
- Part V Malware Analysis
- Index
PART IV
Vulnerability Analysis
Chapter 21 Advanced Static Analysis with IDA Pro
Chapter 22 Advanced Reverse Engineering
Chapter 23 Client-Side Browser Exploits
Chapter 24 Exploiting the Windows Access Control Model
Chapter 25 Intelligent Fuzzing with Sulley
Chapter 26 From Vulnerability to Exploit
Chapter 27 Closing the Holes: Mitigation
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.