A Bug Hunter's Diary 在線電子書 圖書標籤: 安全 軟件開發 security 漏洞挖掘 信息安全 計算機安全 計算機 調試
發表於2025-03-22
A Bug Hunter's Diary 在線電子書 pdf 下載 txt下載 epub 下載 mobi 下載 2025
八個defect的發掘過程,比偵探小說還要引人入勝,妙趣橫生
評分趣味讀物
評分主要講的是Memory Error,我比較關注的是Web-specific Vulnerabilities;對關鍵技術的描述值得藉鑒
評分再棒的經曆或者電子重復太多次也會變得很乏味
評分八個defect的發掘過程,比偵探小說還要引人入勝,妙趣橫生
Tobias Klein 德國著名信息安全谘詢與研究公司NESO安全實驗室創始人,資深軟件安全研究員,職業生涯中發現的軟件安全漏洞無數,更曾為蘋果、微軟等公司的産品找齣不少漏洞。除本書外,還齣版過兩本信息安全方麵的德文作品。
張伸 不閤格碼農。愛咖啡,愛葡萄酒。愛聽布魯斯,也愛吃巧剋力。不小資,不文青,隻是喜歡收藏圖書和CD。慢生活,每天聽相聲纔能入睡。twitter和新浪微博:@loveisbug。
"Give a man an exploit and you make him a hacker for a day; teach a man to exploit bugs and you make him a hacker for a lifetime." -Felix 'FX' Lindner Seemingly simple bugs can have drastic consequences, allowing attackers to compromise systems, escalate local privileges, and otherwise wreak havoc on a system. A Bug Hunter's Diary follows security expert Tobias Klein as he tracks down and exploits bugs in some of the world's most popular software, like Apple's iOS, the VLC media player, web browsers, and even the Mac OS X kernel. In this one-of-a-kind account, you'll see how the developers responsible for these flaws patched the bugs-or failed to respond at all. As you follow Klein on his journey, you'll gain deep technical knowledge and insight into how hackers approach difficult problems and experience the true joys (and frustrations) of bug hunting. Along the way you'll learn how to: * Use field-tested techniques to find bugs, like identifying and tracing user input data and reverse engineering * Exploit vulnerabilities like NULL pointer dereferences, buffer overflows, and type conversion flaws * Develop proof of concept code that verifies the security flaw * Report bugs to vendors or third party brokers A Bug Hunter's Diary is packed with real-world examples of vulnerable code and the custom programs used to find and test bugs. Whether you're hunting bugs for fun, for profit, or to make the world a safer place, you'll learn valuable new skills by looking over the shoulder of a professional bug hunter in action.
作者简介 Tobias Klein,安全问题研究员,创办NESO安全实验室,NESO是一家位于德国海尔布伦的信息安全咨询、研究公司。身为安全漏洞研究人员,Tobias发现了许多安全漏洞,并帮助修复它们。他也出版了另外两本信息安全领域的著作,由海德堡的出版商dpunkt在德国发行。 ...
評分我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看...
評分我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看过了 我看...
評分 評分Mark Dowd et al The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities (Addison-Wesley, 2007) Fuzzing Michael Sutton et al Fuzzing: Brute Force Vulnerability Discovery
A Bug Hunter's Diary 在線電子書 pdf 下載 txt下載 epub 下載 mobi 下載 2025