PoC or GTFO, Volume 3

PoC or GTFO, Volume 3
Author: Manul Laphroaig
Publisher: No Starch Press
Total Pages: 804
Release: 2021-01-29
Genre: Computers
ISBN: 1718500645

Volume 3 of the PoC || GTFO collection--read as Proof of Concept or Get the Fuck Out--continues the series of wildly popular collections of this hacker journal. Contributions range from humorous poems to deeply technical essays bound in the form of a bible. The International Journal of Proof-of-Concept or Get The Fuck Out is a celebrated collection of short essays on computer security, reverse engineering and retrocomputing topics by many of the world's most famous hackers. This third volume contains all articles from releases 14 to 18 in the form of an actual, bound bible. Topics include how to dump the ROM from one of the most secure Sega Genesis games ever created; how to create a PDF that is also a Git repository; how to extract the Game Boy Advance BIOS ROM; how to sniff Bluetooth Low Energy communications with the BCC Micro:Bit; how to conceal ZIP Files in NES Cartridges; how to remotely exploit a TetriNET Server; and more. The journal exists to remind us of what a clever engineer can build from a box of parts and a bit of free time. Not to showcase what others have done, but to explain how they did it so that readers can do these and other clever things themselves.

Dear Hacker

Dear Hacker
Author: Emmanuel Goldstein
Publisher: John Wiley & Sons
Total Pages: 566
Release: 2010-05-13
Genre: Computers
ISBN: 0470889780

Actual letters written to the leading hackers' magazine For 25 years, 2600: The Hacker Quarterly has given voice to the hacker community in all its manifestations. This collection of letters to the magazine reveals the thoughts and viewpoints of hackers, both white and black hat, as well as hacker wannabes, technophiles, and people concerned about computer security. Insightful and entertaining, the exchanges illustrate 2600's vast readership, from teenage rebels, anarchists, and survivalists to law enforcement, consumer advocates, and worried parents. Dear Hacker is must reading for technology aficionados, 2600's wide and loyal audience, and anyone seeking entertainment well laced with insight into our society. Coverage Includes: Question Upon Question Tales from the Retail Front The Challenges of Life as a Hacker Technology The Magic of the Corporate World Our Biggest Fans Behind the Walls A Culture of Rebels Strange Ramblings For more information and sample letters, check out the companion site at http://lp.wileypub.com/dearhacker/

Penetration Testing

Penetration Testing
Author: Georgia Weidman
Publisher: No Starch Press
Total Pages: 531
Release: 2014-06-14
Genre: Computers
ISBN: 1593275641

Penetration testers simulate cyber attacks to find security weaknesses in networks, operating systems, and applications. Information security experts worldwide use penetration techniques to evaluate enterprise defenses. In Penetration Testing, security expert, researcher, and trainer Georgia Weidman introduces you to the core skills and techniques that every pentester needs. Using a virtual machine–based lab that includes Kali Linux and vulnerable operating systems, you’ll run through a series of practical lessons with tools like Wireshark, Nmap, and Burp Suite. As you follow along with the labs and launch attacks, you’ll experience the key stages of an actual assessment—including information gathering, finding exploitable vulnerabilities, gaining access to systems, post exploitation, and more. Learn how to: –Crack passwords and wireless network keys with brute-forcing and wordlists –Test web applications for vulnerabilities –Use the Metasploit Framework to launch exploits and write your own Metasploit modules –Automate social-engineering attacks –Bypass antivirus software –Turn access to one machine into total control of the enterprise in the post exploitation phase You’ll even explore writing your own exploits. Then it’s on to mobile hacking—Weidman’s particular area of research—with her tool, the Smartphone Pentest Framework. With its collection of hands-on lessons that cover key tools and strategies, Penetration Testing is the introduction that every aspiring hacker needs.

The YouTube Formula

The YouTube Formula
Author: Derral Eves
Publisher: John Wiley & Sons
Total Pages: 355
Release: 2021-02-24
Genre: Business & Economics
ISBN: 1119716020

The Wall Street Journal bestseller! Comes with free online companion course Learn the secrets to getting dramatic results on YouTube Derral Eves has generated over 60 billion views on YouTube and helped 24 channels grow to one million subscribers from zero. In The YouTube Formula: How Anyone Can Unlock the Algorithm to Drive Views, Build an Audience, and Grow Revenue, the owner of the largest YouTube how-to channel provides the secrets to getting the results that every YouTube creator and strategist wants. Eves will reveal what readers can't get anywhere else: the inner workings of the YouTube algorithm that's responsible for determining success on the platform, and how creators can use it to their advantage. Full of actionable advice and concrete strategies, this book teaches readers how to: Launch a channel Create life-changing content Drive rapid view and subscriber growth Build a brand and increase engagement Improve searchability Monetize content and audience Replete with case studies and information from successful YouTube creators, The YouTube Formula is perfect for any creator, entrepreneur, social media strategist, and brand manager who hopes to see real commercial results from their work on the platform.

How Not to Fall

How Not to Fall
Author: Emily Foster
Publisher: Kensington Books
Total Pages: 305
Release: 2016-06-28
Genre: Fiction
ISBN: 1496704193

An “extremely intelligent, witty, nerdy, and oh-my-god over-the-top sexy” debut novel—first in a New Adult romance series (Fresh Fiction). Data, research, scientific formulae—Annabelle Coffey is completely at ease with all of them. Men, not so much. But that’s all going to change after she asks Dr. Charles Douglas, the postdoctoral fellow in her lab, to have sex with her. Charles is not only beautiful, he is also adorably awkward, British, brilliant, and nice. What are the odds he’d turn her down? Very high, as it happens. Something to do with that whole student/teacher/ethics thing. But in a few weeks, Annie will graduate. As soon as she does, the unlikely friendship that’s developing between them can turn physical—just until Annie leaves for graduate school. Yet nothing could have prepared either Annie or Charles for chemistry like this, or for what happens when a simple exercise in mutual pleasure turns into something as exhilarating and infernally complicated as love. “The smart characters and Annie’s earnestness as a heroine are so refreshing.” —Smart Bitches, Trashy Books

Designing Secure Software

Designing Secure Software
Author: Loren Kohnfelder
Publisher: No Starch Press
Total Pages: 330
Release: 2021-12-21
Genre: Computers
ISBN: 1718501935

What every software professional should know about security. Designing Secure Software consolidates Loren Kohnfelder’s more than twenty years of experience into a concise, elegant guide to improving the security of technology products. Written for a wide range of software professionals, it emphasizes building security into software design early and involving the entire team in the process. The book begins with a discussion of core concepts like trust, threats, mitigation, secure design patterns, and cryptography. The second part, perhaps this book’s most unique and important contribution to the field, covers the process of designing and reviewing a software design with security considerations in mind. The final section details the most common coding flaws that create vulnerabilities, making copious use of code snippets written in C and Python to illustrate implementation vulnerabilities. You’ll learn how to: • Identify important assets, the attack surface, and the trust boundaries in a system • Evaluate the effectiveness of various threat mitigation candidates • Work with well-known secure coding patterns and libraries • Understand and prevent vulnerabilities like XSS and CSRF, memory flaws, and more • Use security testing to proactively identify vulnerabilities introduced into code • Review a software design for security flaws effectively and without judgment Kohnfelder’s career, spanning decades at Microsoft and Google, introduced numerous software security initiatives, including the co-creation of the STRIDE threat modeling framework used widely today. This book is a modern, pragmatic consolidation of his best practices, insights, and ideas about the future of software.

Foundations of Information Security

Foundations of Information Security
Author: Jason Andress
Publisher: No Starch Press
Total Pages: 249
Release: 2019-10-15
Genre: Computers
ISBN: 171850005X

High-level overview of the information security field. Covers key concepts like confidentiality, integrity, and availability, then dives into practical applications of these ideas in the areas of operational, physical, network, application, and operating system security. In this high-level survey of the information security field, best-selling author Jason Andress covers the basics of a wide variety of topics, from authentication and authorization to maintaining confidentiality and performing penetration testing. Using real-world security breaches as examples, Foundations of Information Security explores common applications of these concepts, such as operations security, network design, hardening and patching operating systems, securing mobile devices, as well as tools for assessing the security of hosts and applications. You'll also learn the basics of topics like: Multifactor authentication and how biometrics and hardware tokens can be used to harden the authentication process The principles behind modern cryptography, including symmetric and asymmetric algorithms, hashes, and certificates The laws and regulations that protect systems and data Anti-malware tools, firewalls, and intrusion detection systems Vulnerabilities such as buffer overflows and race conditions A valuable resource for beginning security professionals, network systems administrators, or anyone new to the field, Foundations of Information Security is a great place to start your journey into the dynamic and rewarding field of information security.

Spam Kings

Spam Kings
Author: Brian S. McWilliams
Publisher: "O'Reilly Media, Inc."
Total Pages: 370
Release: 2005
Genre: Business & Economics
ISBN: 0596804504

Looks at a variety of spam entrepreneurs and how anti-spam activists are trying to stop their activities.

Ethical Hacking

Ethical Hacking
Author: Daniel G. Graham
Publisher: No Starch Press
Total Pages: 378
Release: 2021-09-21
Genre: Computers
ISBN: 1718501889

A hands-on guide to hacking computer systems from the ground up, from capturing traffic to crafting sneaky, successful trojans. A crash course in modern hacking techniques, Ethical Hacking is already being used to prepare the next generation of offensive security experts. In its many hands-on labs, you’ll explore crucial skills for any aspiring penetration tester, security researcher, or malware analyst. You’ll begin with the basics: capturing a victim’s network traffic with an ARP spoofing attack and then viewing it in Wireshark. From there, you’ll deploy reverse shells that let you remotely run commands on a victim’s computer, encrypt files by writing your own ransomware in Python, and fake emails like the ones used in phishing attacks. In advanced chapters, you’ll learn how to fuzz for new vulnerabilities, craft trojans and rootkits, exploit websites with SQL injection, and escalate your privileges to extract credentials, which you’ll use to traverse a private network. You’ll work with a wide range of professional penetration testing tools—and learn to write your own tools in Python—as you practice tasks like: • Deploying the Metasploit framework’s reverse shells and embedding them in innocent-seeming files • Capturing passwords in a corporate Windows network using Mimikatz • Scanning (almost) every device on the internet to find potential victims • Installing Linux rootkits that modify a victim’s operating system • Performing advanced Cross-Site Scripting (XSS) attacks that execute sophisticated JavaScript payloads Along the way, you’ll gain a foundation in the relevant computing technologies. Discover how advanced fuzzers work behind the scenes, learn how internet traffic gets encrypted, explore the inner mechanisms of nation-state malware like Drovorub, and much more. Developed with feedback from cybersecurity students, Ethical Hacking addresses contemporary issues in the field not often covered in other books and will prepare you for a career in penetration testing. Most importantly, you’ll be able to think like an ethical hacker⁠: someone who can carefully analyze systems and creatively gain access to them.

Locksport

Locksport
Author: Jos Weyers
Publisher: No Starch Press
Total Pages: 418
Release: 2024-03-19
Genre: House & Home
ISBN: 1718502257

A comprehensive, fully illustrated guide to the fascinating sport of picking locks, Locksport is authored by five of the field’s foremost champions. Together, they’ll show you how to ethically, efficiently, and effectively bypass anything—from simple locks and safe dials to deadlocks and vaults. Welcome to the world of locksport, the sport of defeating locks. Whether you’re new to the challenge of lockpicking or aiming for championship gold, this book serves as your definitive guide, packed with practical advice from a team of experts. DIVE INTO THE ESSENTIALS WITH LOCKSPORT FOUNDATIONS How various locks work and how to maintain and disassemble practice locks What makes some locks more secure than others The laws, competitions, and communities that make up the world of locksport MASTER YOUR CRAFT WITH HANDS-ON TECHNIQUES How to pick pin tumblers and lever locks, make impressions or craft a working key from a blank, and manipulate open combination safe locks How to work with picks, rakes, tension wrenches, files, magnification tools, safe-lock graphs, and depth-measuring instruments The intricacies of security pins, wards, dimple locks, keyways, and antique locks GAIN THE COMPETITIVE EDGE WITH COMPETITION INSIGHTS The ins and outs of competition setup and tools and how to host your own competitions Expert strategies for managing your nerves and gathering lock intel What it’s like to participate in timed head-to-head competitions, PicTacToe™, escape challenges, and other lockpicking contests From mastering your first padlock to conquering a competition, Locksport will show you how to take your skills to the next level—and have endless fun doing it.