July 16, 2017

Download A Bug Hunter's Diary: A Guided Tour Through the Wilds of by Tobias Klein PDF

By Tobias Klein

Likely easy insects could have drastic outcomes, permitting attackers to compromise structures, enhance neighborhood privileges, and another way wreak havoc on a system.A trojan horse Hunter's Diary follows defense specialist Tobias Klein as he tracks down and exploits insects in a few of the world's most well liked software program, like Apple's iOS, the VLC media participant, net browsers, or even the Mac OS X kernel. during this unique account, you'll see how the builders answerable for those flaws patched the bugs—or didn't reply in any respect. As you stick to Klein on his trip, you'll achieve deep technical wisdom and perception into how hackers method tricky difficulties and event the real joys (and frustrations) of trojan horse hunting.

Along the best way you'll find out how to:
• Use field-tested concepts to discover insects, like picking out and tracing person enter information and opposite engineering
• make the most vulnerabilities like NULL pointer dereferences, buffer overflows, and sort conversion flaws
• improve evidence of inspiration code that verifies the protection flaw
• record insects to owners or 3rd celebration brokers

A computer virus Hunter's Diary is jam-packed with real-world examples of weak code and the customized courses used to discover and attempt insects. no matter if you're looking insects for enjoyable, for revenue, or to make the area a more secure position, you'll examine beneficial new talents via having a look over the shoulder of a pro computer virus hunter in action.

"This is likely one of the finest infosec books to come back out within the final a number of years."
Dino Dai Zovi, info safety Professional

"Give a guy an take advantage of and also you make him a hacker for an afternoon; train a guy to use insects and also you make him a hacker for a lifetime."
Felix 'FX' Lindner

Show description

Read or Download A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security PDF

Best hacking books

Honeypots: A New Paradigm to Information Security

A well-rounded, available exposition of honeypots in stressed and instant networks, this e-book addresses the subject from quite a few views. Following a powerful theoretical beginning, case reports improve the sensible realizing of the topic. The booklet covers the most recent know-how in details safeguard and honeypots, together with honeytokens, honeynets, and honeyfarms.

Anti-Hacker Tool Kit

This jam-packed reference explains the way to use a hundred+ software program instruments for auditing structures on a community, auditing a community, and investigating incidents. different issues contain port scanners, vulnerability scanners, password crackers, and warfare dialers.

The C++ Hackers Guide

An skilled programmer accumulates a suite of instruments, methods, and strategies to make his or her courses higher. C++ Hackers advisor collects greater than a hundred and twenty of the simplest C++ veteran secrets and techniques and places them in a single available position. The options offered have all been utilized in genuine courses, and extra importantly, have made real courses greater.

InfoSec Career Hacking Sell Your Skillz, Not Your Soul

«InfoSec occupation Hacking” begins out via describing the numerous, diverse InfoSec careers on hand together with safeguard Engineer, protection Analyst, Penetration Tester, Auditor, defense Administrator, Programmer, and safeguard software supervisor. the actual talents required via each one of those jobs might be defined intimately, permitting the reader to spot the main acceptable occupation selection for them.

Extra resources for A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security

Example text

If this NULL pointer dereference is triggered, the whole system will crash due to a kernel panic. ) Summary of the results so far: 32 • An unprivileged user of a Solaris system can call the SIOCGTUNPARAM IOCTL (see (1) in Figure 3-3). • If the IOCTL data sent to the kernel is carefully crafted—there has to be an interface name with a colon directly followed by an ASCII zero and another arbitrary digit—it’s possible to trigger a NULL pointer dereference (see (2) in Figure 3-3) that leads to a system crash (see (3) in Figure 3-3).

I chose the latter approach and started from file offset 0x00300000. I found the desired byte sequence at file offset 0x0030005c, represented in little-endian notation, and I changed the 4 bytes to the value 0x41414141 (as illustrated in Figure 2-6). lIj %E... lIj %EAAAA Figure 2-6: New value for EIP in TiVo sample file I then restarted VLC in the debugger and opened the new file (see Figure 2-7). Figure 2-7: EIP control of VLC media player Back to the ’90s 17 EIP = 41414141 . . Mission EIP control accomplished!

Done dumping to /dev/dsk/c0d0s1, offset 107413504, content: kernel > $c 0x41414141() ip_sioctl_tunparam+0xee() ip_process_ioctl+0x280() ip_wput_nondata+0x970() ip_output_options+0x537() Escape from the WWW Zone 47 ip_output+0x10() ip_wput+0x37() putnext+0x1f1() ar_wput+0x9d() putnext+0x1f1() strdoioctl+0x67b() strioctl+0x620() spec_ioctl+0x67() fop_ioctl+0x25() ioctl+0xac() sys_syscall+0x17b() This time, the system crashed as the kernel tried to execute code at address 0x41414141 (the value of the RIP register, as shown in bold in the debugger output above).

Download PDF sample

Rated 4.24 of 5 – based on 29 votes