--------------------------------------------------------------------------------------------------------------
Hacking Exposed Computer Forensics, Second Edition: Computer Forensics Secrets & Solutions
The latest strategies for investigating cyber-crime
Identify and investigate computer criminals of all stripes with help from this fully updated. real-world resource. Hacking Exposed Computer Forensics, Second Edition explains how to construct a high-tech forensic lab, collect prosecutable evidence, discover e-mail and system file clues, track wireless activity, and recover obscured documents. Learn how to re-create an attacker's footsteps, communicate with counsel, prepare court-ready reports, and work through legal and organizational challenges. Case studies straight from today's headlines cover IP theft, mortgage fraud, employee misconduct, securities fraud, embezzlement, organized crime, and consumer fraud cases.
* Effectively uncover, capture, and prepare evidence for investigation
* Store and process collected data in a highly secure digital forensic lab
* Restore deleted documents, partitions, user activities, and file systems
* Analyze evidence gathered from Windows, Linux, and Macintosh systems
* Use the latest Web and client-based e-mail tools to extract relevant artifacts
* Overcome the hacker's anti-forensic, encryption, and obscurity techniques
* Unlock clues stored in cell phones, PDAs, and Windows Mobile devices
* Prepare legal documents that will hold up to judicial and defense scrutiny
-----------------------------------------------------------------------------------------------------------------------------------
Hacking Exposed Windows: Microsoft Windows Security Secrets and Solutions
# Establish business relevance and context for security by highlighting real-world risks
# Take a tour of the Windows security architecture from the hacker's perspective, exposing old and new vulnerabilities that can easily be avoided
# Understand how hackers use reconnaissance techniques such as footprinting, scanning, banner grabbing, DNS queries,
and Google searches to locate vulnerable Windows systems
# Learn how information is extracted anonymously from Windows using simple NetBIOS, SMB, MSRPC, SNMP, and Active Directory enumeration techniques
# Prevent the latest remote network exploits such as password grinding via WMI and Terminal Server, passive Kerberos logon sniffing,
rogue server/man-in-the-middle attacks, and cracking vulnerable services
# See up close how professional hackers reverse engineer and develop new Windows exploits
# Identify and eliminate rootkits, malware, and stealth software
# Fortify SQL Server against external and insider attacks
# Harden your clients and users against the latest e-mail phishing, spyware, adware, and Internet Explorer threats
# Deploy and configure the latest Windows security countermeasures, including BitLocker, Integrity Levels, User Account Control,
the updated Windows Firewall, Group Policy, Vista Service Refactoring/Hardening, SafeSEH, GS, DEP, Patchguard, and Address Space Layout Randomization
-----------------------------------------------------------------------------------------------------------------------------------
Hacking Exposed: Web Applications, 3rd Edition By Joel Scambray, Vincent Liu, Caleb Sima MG-H, 3rd Edition 2011 | 482 Pages | ISBN: 0071740643 | PDF | 7 MB
The latest Web app attacks and countermeasures from world-renowned practitioners Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource.
* Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster * See new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation * Understand how attackers defeat commonly used Web authentication technologies * See how real-world session attacks leak sensitive data and how to fortify your applications * Learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques * Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments * Safety deploy XML, social networking, cloud computing, and Web 2.0 services * Defend against RIA, Ajax, UGC, and browser-based, client-side exploits * Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures
------------------------------------------------------------------------------------------------------------------------------------
Hacking Exposed: Network Security Secrets and Solutions
Publisher: McGraw-Hill Osborne Media | ISBN: 0071613749 | edition 2009 | PDF | 720 pages | 14,8 mb
Meet the formidable demands of security in today's hyperconnected world with expert guidance from the world-renowned Hacking Exposed team. Following the time-tested "attack-countermeasure" philosophy, this 10th anniversary edition has been fully overhauled to cover the latest insidious weapons in the hacker's extensive arsenal. New and updated material:
- New chapter on hacking hardware, including lock bumping, access card cloning, RFID hacks, USB U3 exploits, and Bluetooth device hijacking
- Updated Windows attacks and countermeasures, including new Vista and Server 2008 vulnerabilities and Metasploit exploits
- The latest UNIX Trojan and rootkit techniques and dangling pointer and input validation exploits...
-------------------------------------------------------------------------------------------------------------------------------
SIZE 4.9 Mb
Number Of Pages: 400
Publication Date: 2010
ISBN-10 / ASIN: 0071591184
ISBN-13 / EAN: 9780071591188
Publisher:McGraw-Hill Osborne Media
"A harrowing guide to where the bad guys hide, and how you can find them." --Dan Kaminsky, Director of Penetration Testing, IOActive
"An amazing resource. It is timely, focused, and what we need to better understand and defend against one of the greatest cyber threats we face." --From the Foreword by Lance Spitzner, President of the Honeynet Project
Don't let another machine become a zombie in the malware army
Defend against the ongoing wave of malware and rootkit assaults the failsafe Hacking Exposed way. Real-world case studies and examples reveal how today's hackers use readily available tools to infiltrate and hijack systems. Step-by-step countermeasures provide proven prevention techniques. Find out how to detect and eliminate malicious embedded code, block pop-ups and websites, prevent keylogging, and terminate rootkits. The latest intrusion detection, firewall, honeynet, antivirus, anti-rootkit, and anti-spyware technologies are covered in detail.
• Understand how malware infects, survives, and propagates across an enterprise
• Learn how hackers use archivers, encryptors, and packers to obfuscate code
• Implement effective intrusion detection and prevention procedures
• Defend against keylogging, redirect, click fraud, and identity theft threats
• Detect, kill, and remove virtual, user-mode, and kernel-mode rootkits
• Prevent malicious website, phishing, client-side, and embedded-code exploits
• Protect hosts using the latest antivirus, pop-up blocker, and firewall software
• Identify and terminate malicious processes using HIPS and NIPS
-------------------------------------------------------------------------------------------------------------------------------------
This book concisely identifies the types of attacks which are faced daily by Web 2.0 sites, and the authors give solid, practical advice on how to identify and mitigate these threats." --Max Kelly, CISSP, CIPP, CFCE, Senior Director of Security, Facebook
• Plug security holes in Web 2.0 implementations the proven Hacking Exposed way
• Learn how hackers target and abuse vulnerable Web 2.0 applications, browsers, plug-ins, online databases, user inputs, and HTML forms
• Prevent Web 2.0-based SQL, XPath, XQuery, LDAP, and command injection attacks
• Circumvent XXE, directory traversal, and buffer overflow exploits
• Learn XSS and Cross-Site Request Forgery methods attackers use to bypass browser security controls
• Fix vulnerabilities in Outlook Express and Acrobat Reader add-ons
• Use input validators and XML classes to reinforce ASP and .NET security
• Eliminate unintentional exposures in ASP.NET AJAX (Atlas), Direct Web Remoting, Sajax, and GWT Web applications
• Mitigate ActiveX security exposures using SiteLock, code signing, and secure controls
• Find and fix Adobe Flash vulnerabilities and DNS rebinding attacks
![[Image: Pred4part1.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vGwUcg1rkEi5NSzcOK25jG_EOm70ZzLugs3sjXE0_qtDdu-7mR1zq7TjtwPbT2PgtlEPuBYUFfkFd309AUAKqpIOMaBfrBO3CSdPbi_H-U18DX1vVuhU2NUJUU0icpl4I=s0-d)
![[Image: pred4part2.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_us_SJxFDYqIK7hEgvVyKtokef4CBM0BRG4WJZ56f95oj1PI3Bh0FDWc0aBdnuV5DSA3lLTKtKLbD20liwiN3g4nM98Fyb21cmIr0NT-Y6xkT9gNARQvaXI9A-7_SIFwVs=s0-d)
![[Image: f_make01m_7be3fc0.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sIPrb32z5anm1JbA6WK7UEYFOzznYTlCJNTLHxwQhoujY7msCNdXPQvEt2CLQn0zZMHaYGVjVzDYQysaRbOfRU-B_grEsC4VU3EYQOJ-hV6mfVmrjfFOBfx_GcyyckZUdbOeM=s0-d)
![[Image: f_make02m_c62e72c.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vIat64qRZb0qfQ0IMB_IlQQ3LQ4BbSFdVGVkYuFC9XI5iQERUa5xzPLyOQiNslgL6SvhZyfE-wdFIpR_VsODhJN0JlSWqyxFgYg7Gb_3fwH1YjFUUQt7oeN-cm2CPMe61RCxU=s0-d)
![[Image: f_make03m_419071e.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tZg4q-vjakjp5LIEnakFHSRtGSQP6HhmScf7LNNjcB8nnlE5oWaNABU5dt-qZ_4E5LVpCFLZOpKVNtwqH9shW98ztffplH2pCwSaI3Ozaxc5f9MzLNDDMQqL76i9osRTXtboM=s0-d)
![[Image: f_make05m_df41a54.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_v1h55o-3ANeTJKhkachRNmDNQ4RzKmpW0CIuZoFCtDDfP8adSECNItXI2GqgF1_D7KHqwz3lL94Dg5NcAVn8s946SZSuKnyXAmnQLOibWBGmLYSDGhMxgzynnFRdQfcJokwGs=s0-d)
![[Image: f_make06m_6ab1860.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s6eaIvGbsuxjrX4R66XJ0b6aBSq6Cl_O9pi_NdxfHI5srVlLbgw3Hua9b2NpTC5NImQKw0ueSnYEq5rI7hHLzo6w-fy57qYw_W4CuIC4zo-xuIxBFdy8nc9kk-UTuJ2pGK5Dk=s0-d)
![[Image: f_make07m_94f5ede.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tIDTsgZXYGsVn7QWAmH0oA-U9Y15bvfWsy35_xjHGo1QJfn310LEp0IsnnXVn7Ys8oJjWO1SIG0zdx-vOjlDEOIluMyInC5d9i-Vu1GeNFWL7m9cJ6_oBuLl50sVpp1t9gZw=s0-d)
![[Image: f_make08m_5e8b2df.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tOObHjWiqsPkk4VyntiKLUrS96g6KiB7feuvVWfxAPTs33_LZnDHAvSmmxfKBLsNNSN4AKfp-fXyls9qyYUz6r9bQevCUWFukp5AvSTbcMD4mcqJcbrwX0DbX0jZRKvjmjCr8=s0-d)
![[Image: f_make09m_7722bff.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_te-04OgO6QcYZ7vv6w3pTSXB5NqcE3kMw0kDjqpTwCudxYbaDvYAVRzgT5a6z_YqcJZHUNWBH9_kFbOWA3vAhAwh4PKkWTrdrKcMHRptvtVcUvvKVq4PI07iqno1Klrfomqfg=s0-d)
![[Image: f_make10m_2a40c90.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_ss_M6ys0KAZbRz71QkeaPtp7aHVSYWJYahBS0-6Je2xCOyhxSSMjx9L6FFwgs5QS_S6d258PwiXdwq7nRPqqGY-85BFxqXxvoJN87EpU4BvMLr-5_Sa-sCgWDn5INIiFA-CQQ=s0-d)
![[Image: f_make11m_df0e12d.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vdFI5r_rgRBxz4ZvlBr-J_CMZmAjG9VcEy6gDoe6pyZM_GUQTLWGpY-d6rKRLEBimKYHTeXEhSbPuYGXE7hr8UMZVmeXvRaaDt3Hr_0APSzLU1ytdi7T6eZsUQ70iOAxk50yA=s0-d)
