Tobias Klein 德國著名信息安全谘詢與研究公司NESO安全實驗室創始人,資深軟件安全研究員,職業生涯中發現的軟件安全漏洞無數,更曾為蘋果、微軟等公司的産品找齣不少漏洞。除本書外,還齣版過兩本信息安全方麵的德文作品。
張伸 不閤格碼農。愛咖啡,愛葡萄酒。愛聽布魯斯,也愛吃巧剋力。不小資,不文青,隻是喜歡收藏圖書和CD。慢生活,每天聽相聲纔能入睡。twitter和新浪微博:@loveisbug。
"Give a man an exploit and you make him a hacker for a day; teach a man to exploit bugs and you make him a hacker for a lifetime." -Felix 'FX' Lindner Seemingly simple bugs can have drastic consequences, allowing attackers to compromise systems, escalate local privileges, and otherwise wreak havoc on a system. A Bug Hunter's Diary follows security expert Tobias Klein as he tracks down and exploits bugs in some of the world's most popular software, like Apple's iOS, the VLC media player, web browsers, and even the Mac OS X kernel. In this one-of-a-kind account, you'll see how the developers responsible for these flaws patched the bugs-or failed to respond at all. As you follow Klein on his journey, you'll gain deep technical knowledge and insight into how hackers approach difficult problems and experience the true joys (and frustrations) of bug hunting. Along the way you'll learn how to: * Use field-tested techniques to find bugs, like identifying and tracing user input data and reverse engineering * Exploit vulnerabilities like NULL pointer dereferences, buffer overflows, and type conversion flaws * Develop proof of concept code that verifies the security flaw * Report bugs to vendors or third party brokers A Bug Hunter's Diary is packed with real-world examples of vulnerable code and the custom programs used to find and test bugs. Whether you're hunting bugs for fun, for profit, or to make the world a safer place, you'll learn valuable new skills by looking over the shoulder of a professional bug hunter in action.
發表於2025-02-25
A Bug Hunter's Diary 2025 pdf epub mobi 電子書 下載
我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看...
評分Mark Dowd et al The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities (Addison-Wesley, 2007) Fuzzing Michael Sutton et al Fuzzing: Brute Force Vulnerability Discovery
評分Mark Dowd et al The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities (Addison-Wesley, 2007) Fuzzing Michael Sutton et al Fuzzing: Brute Force Vulnerability Discovery
評分我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看過瞭 我看...
評分圖書標籤: 安全 軟件開發 security 漏洞挖掘 信息安全 計算機安全 計算機 調試
趣味讀物
評分八個defect的發掘過程,比偵探小說還要引人入勝,妙趣橫生
評分由淺入深,故事一樣,太好看瞭!
評分八個defect的發掘過程,比偵探小說還要引人入勝,妙趣橫生
評分主要講的是Memory Error,我比較關注的是Web-specific Vulnerabilities;對關鍵技術的描述值得藉鑒
A Bug Hunter's Diary 2025 pdf epub mobi 電子書 下載