渗透测试实战：shellcode技术详解

Penetration

Testing

Shellcode

5星 · 超过95%的资源需积分: 23 58 下载量 186 浏览量更新于2024-07-18 1 收藏 20.44MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

试读

295页

"《渗透测试与壳代码》是一本由Hamza Megahed所著的专业书籍，专门探讨在网络层和操作系统级别的漏洞检测、利用以及安全防护。这本书在2018年由Packt Publishing出版，版权受到保护，未经许可不得复制、存储或以任何形式传播，除非用于嵌入在批评性文章或评论中。作者和出版社对书中提供的信息尽力确保准确性，但不承担因信息错误导致的直接或间接损害的责任。本书涵盖了Shellcode技术在渗透测试中的核心应用，Shellcode是一种小型可执行代码片段，常用于攻击者利用系统漏洞进行远程控制或权限提升。它主要关注网络漏洞利用技术，如缓冲区溢出攻击（Buffer Overflow Attack），通过将恶意Shellcode注入到目标程序的内存中，从而实现攻击目标。读者可以从中学习如何设计、分析和实施有效的渗透测试策略，以及如何防范此类攻击。作者Vijin Borich担任了本书的委派编辑，表明这本书不仅提供了理论知识，还可能包含实用的工具和技术演示，适合对网络安全感兴趣的渗透测试人员、安全研究员以及开发人员深入理解系统安全的深层次工作。为了确保阅读体验，此资源的PDF版本经过了多个软件的兼容性测试，包括FoxitReader、PDF-XChangeViewer、SumatraPDF和Firefox，确认可以正常打开。如果你发现任何版权问题，应直接联系上传者或通过CSDN平台进行处理，以尊重版权法规。对于更详尽的内容和实战案例，读者可以参考美国亚马逊官网的原著详情，获取专业且全面的渗透测试与Shellcode技术指南。"

资源详情

资源推荐

Who this book is for

This book is intended to be read by penetration testers, malware analysts, security researchers,

forensic practitioners, exploit developers, C language programmers, software testers, and

students in the security field.

What this book covers
Chapter 1, Introduction, discusses the concept of shellcode, buffer overflow, heap corruption, and
introduces the computer architecture.
Chapter 2, Lab Setup, teaches how to build a safe environment to test bad code and introduces
readers to the graphical interfaces of debuggers.
Chapter 3, Assembly Language in Linux, explains how to use the assembly language on Linux to
build shellcode.
Chapter 4, Reverse Engineering, shows how to use debuggers to perform reverse engineering on
code.
Chapter 5, Creating Shellcode, explains how to build a shellcode using the assembly language and
Metasploit.
Chapter 6, Buffer Overflow Attacks, provides a detailed understanding of buffer overflow attacks
on Windows and Linux.
Chapter 7, Exploit Development – Part 1, discusses how to perform fuzzing and finding the return
address.
Chapter 8, Exploit Development – Part 2, teaches how to generate a proper shellcode and how to
inject a shellcode in an exploit.
Chapter 9, Real-World Scenarios – Part 1, introduces a real-world example of buffer overflow
attacks.
Chapter 10, Real-World Scenarios – Part 2, continues the previous chapter but is more advanced.
Chapter 11, Real-World Scenarios – Part 3, gives another real-world scenario example but with
more techniques.
Chapter 12, Detection and Prevention, discusses the techniques and algorithms you need to detect
and prevent buffer overflow attacks.