The Mac Hacker'S Handbook 9780470395363 pdf 下载 极速 mobi txt pdb lrf 网盘
The Mac Hacker'S Handbook 9780470395363电子书下载地址
- 文件名
- [epub 下载] The Mac Hacker'S Handbook 9780470395363 epub格式电子书
- [azw3 下载] The Mac Hacker'S Handbook 9780470395363 azw3格式电子书
- [pdf 下载] The Mac Hacker'S Handbook 9780470395363 pdf格式电子书
- [txt 下载] The Mac Hacker'S Handbook 9780470395363 txt格式电子书
- [mobi 下载] The Mac Hacker'S Handbook 9780470395363 mobi格式电子书
- [word 下载] The Mac Hacker'S Handbook 9780470395363 word格式电子书
- [kindle 下载] The Mac Hacker'S Handbook 9780470395363 kindle格式电子书
内容简介：
As more and more vulnerabilities are found in the Mac OS X
(Leopard) operating system, security researchers are realizing the
importance of developing proof-of-concept exploits for those
vulnerabilities. This unique tome is the first book to uncover the
flaws in the Mac OS X operating system—and how to deal with them.
Written by two white hat ***s, this book is aimed at ***
vital information known so that you can find ways to secure your
Mac OS X systems, and examines the sorts of attacks that are
prevented by Leopard’s security defenses, what attacks aren’t, and
how to best handle those weaknesses.
书籍目录：
Foreword.
Introduction.
Part I Mac OS X Basics.
Chapter 1 Mac OS X Architecture.
Basics.
XNU.
Mach.
BSD.
I/O Kit.
Darwin and Friends.
Tools of the Trade.
Ktrace/DTrace.
Objective-C.
Universal Binaries and the Mach-O File Format.
Universal Binaries.
Mach-O File Format.
Example.
Bundles.
launchd.
Leopard Security.
Library Randomization.
Executable Heap.
Stack Protection (propolice).
Firewall.
Sandboxing (Seatbelt).
References.
Chapter 2 Mac OS X Parlance.
Bonjour!.
Get an IP Address.
Set Up Name Translation.
Service Discovery.
Bonjour.
mDNSResponder.
Source Code.
QuickTime.
.mov.
RTSP.
Conclusion.
References.
Chapter 3 Attack Surface.
Searching the Server Side.
N***tandard Listening Processes.
Cutting into the Client Side.
Safari.
All of Safari’s Children.
Safe File Types.
Having Your Cake.
Conclusion .
References.
Part II Discovering Vulnerabilities.
Chapter 4 Tracing and Debugging.
Pathetic ptrace.
Good Ol’ GDB.
DTrace.
D Programming Language.
Describing Probes.
Example: Using Dtrace.
Example: Using ltrace.
Example: Instruction Tracer/Code-Coverage Monitor.
Example: Memory Tracer.
PyDbg.
PyDbg Basics.
Memory Searching.
In-Memory Fuzzing.
Binary Code Coverage with Pai Mei.
iTunes Hates You.
Conclusion.
References.
Chapter 5 Finding Bugs.
Bug-Hunting Strategies.
Old-School Source-Code Analysis.
Getting to the Source.
Code Coverage.
CanSecWest 2008 Bug.
vi + Changelog = Leopard 0-day.
Apple’s Prerelease-Vulnerability Collection.
Fuzz Fun.
Network Fuzzing.
File Fuzzing.
Conclusion.
References.
Chapter 6 Reverse Engineering.
Disassembly Oddities.
EIP-Relative Data Addressing.
Messed-Up Jump Tables.
Identifying Missed Functi***.
Reversing Obj-C.
Cleaning Up Obj-C.
Shedding Light on objc_msgSend Calls.
Case Study.
Patching Binaries.
Conclusion.
References.
Part III Exploitation.
Chapter 7 Exploiting Stack Overflows.
Stack Basics.
Stack Usage on PowerPC.
Stack Usage on x86.
Smashing the Stack on PowerPC.
Smashing the Stack on x86.
Exploiting the x86 Nonexecutable Stack.
Return into system().
Executing the Payload from the Heap.
Finding Useful Instruction Sequences.
PowerPC.
x86.
Conclusion.
References.
Chapter 8 Exploiting Heap Overflows.
The Heap.
The Scalable Zone Allocator.
Regi***.
Freeing and Allocating Memory.
Overwriting Heap Metadata.
Arbitrary 4-Byte Overwrite.
Large Arbitrary Memory Overwrite.
Obtaining Code Execution.
Taming the Heap with Feng Shui.
Fill ’Er Up.
Feng Shui.
WebKit’s JavaScript.
Case Study.
Feng Shui Example.
Heap Spray.
References.
Chapter 9 Exploit Payloads.
Mac OS X Exploit Payload Development.
Restoring Privileges.
Forking a New Process.
Executing a Shell.
Encoders and Decoders.
Staged Payload Execution.
Payload Components.
PowerPC Exploit Payload.
execve_binsh.
system.
decode_longxor.
tcp_listen 231.
tcp_connect.
tcp_find.
dup2_std_fds.
vfork.
Testing Simple Components.
Putting Together Simple Payloads.
Intel x86 Exploit Payloads.
remote_execution_loop.
inject_bundle.
Testing Complex Components.
Conclusion.
References.
Chapter 10 Real-World Exploits.
QuickTime RTSP Content-Type Header Overflow.
Triggering the Vulnerability.
Exploitation on PowerPC.
Exploitation on x86.
mDNSResponder UPnP Location Header Overflow.
Triggering the Vulnerability.
Exploiting the Vulnerability.
Exploiting on PowerPC.
QuickTime QTJava toQTPointer() Memory Access.
Exploiting toQTPointer().
Obtaining Code Execution.
Conclusion.
References.
Part IV Post-Exploitation.
Chapter 11 Injecting, Hooking, and Swizzling.
Introduction to Mach.
Mach Abstracti***.
Mach Security Model Mach Excepti***.
Mach Injection.
Remote Threads.
Remote Process Memory.
Loading a Dynamic Library or Bundle.
Inject-Bundle Usage.
Example: iSight P***o Capture.
Function Hooking.
Example: SSLSpy.
Objective-C Method Swizzling.
Example: iChat Spy.
Conclusion.
References.
Chapter 12 Rootkits.
Kernel Extensi***.
Hello Kernel.
System Calls.
Hiding Files.
Hiding the Rootkit.
Maintaining Access across Reboots.
Controlling the Rootkit.
Creating the RPC Server.
Injecting Kernel RPC Servers.
Calling the Kernel RPC Server.
Remote Access.
Hardware-Virtualization Rootkits.
Hyperjacking.
Rootkit Hypervisor.
Conclusion.
References.
Index.
作者介绍：
CharlIe Millerwon the second CanSecWest Pwn2Own contest in
2008 and was named one of the Top 10 Computer Hackers of 2008 by
Popular Mechanics.
Dino Dai Zovi won the first CanSecWest Pwn2Own contest in 2007
and was named one of the 15 Most Influential People in Security by
eWEEK.
出版社信息：
暂无出版社相关信息，正在全力查找中！
书籍摘录：
暂无相关书籍摘录，正在全力查找中！
在线阅读/听书/购买/PDF下载地址：
原文赏析：
暂无原文赏析，正在全力查找中！
其它内容：
书籍介绍
As more and more vulnerabilities are found in the Mac OS X (Leopard) operating system, security researchers are realizing the importance of developing proof-of-concept exploits for those vulnerabilities. This unique tome is the first book to uncover the flaws in the Mac OS X operating system—and how to deal with them. Written by two white hat ***s, this book is aimed at *** vital information known so that you can find ways to secure your Mac OS X systems, and examines the sorts of attacks that are prevented by Leopard’s security defenses, what attacks aren’t, and how to best handle those weaknesses.
网站评分
书籍多样性：3分
书籍信息完全性：7分
网站更新速度：5分
使用便利性：6分
书籍清晰度：3分
书籍格式兼容性：3分
是否包含广告：4分
加载速度：8分
安全性：4分
稳定性：4分
搜索功能：7分
下载便捷性：8分
下载点评
- 书籍完整(378+)
- 购买多(678+)
- 已买(662+)
- 实惠(432+)
- 一星好评(171+)
- 赞(495+)
- 愉快的找书体验(260+)
- 还行吧(277+)
下载评价
- 网友 隗***杉：
挺好的，还好看！支持！快下载吧！
- 网友 龚***湄：
差评，居然要收费！！！
- 网友 詹***萍：
好评的，这是自己一直选择的下载书的网站
- 网友 温***欣：
可以可以可以
- 网友 菱***兰：
特好。有好多书
- 网友 步***青：
。。。。。好
- 网友 方***旋：
真的很好，里面很多小说都能搜到，但就是收费的太多了
- 网友 蓬***之：
好棒good
- 网友 寿***芳：
可以在线转化哦
- 网友 融***华：
下载速度还可以
- 网友 国***芳：
五星好评
- 网友 沈***松：
挺好的，不错
- 网友 芮***枫：
有点意思的网站，赞一个真心好好好 哈哈
- 网友 石***致：
挺实用的，给个赞！希望越来越好，一直支持。
喜欢"The Mac Hacker'S Handbook 9780470395363"的人也看了
时间管理很简单 pdf 下载 极速 mobi txt pdb lrf 网盘
政策与法律法规(第7版) pdf 下载 极速 mobi txt pdb lrf 网盘
天地人生——中国三江源地区民族生存方式及婚葬仪式 pdf 下载 极速 mobi txt pdb lrf 网盘
李嘉诚全书 pdf 下载 极速 mobi txt pdb lrf 网盘
***条例 pdf 下载 极速 mobi txt pdb lrf 网盘
王牌战机纸模型 【正版保证】 pdf 下载 极速 mobi txt pdb lrf 网盘
CAXA应用实训指导书 pdf 下载 极速 mobi txt pdb lrf 网盘
再创世纪 合成生物学将如何重新创造自然和我们人类 【正版图书】 pdf 下载 极速 mobi txt pdb lrf 网盘
少年帝王传：少年秦始皇 pdf 下载 极速 mobi txt pdb lrf 网盘
XSLT 2.0 and XPath 2.0 Programmer's Reference pdf 下载 极速 mobi txt pdb lrf 网盘
随机推荐
- 鱼病防治关键技术及实用图谱 pdf 下载 极速 mobi txt pdb lrf 网盘
- 基于化学核心观念的教学实践研究 夏向东 等 著 pdf 下载 极速 mobi txt pdb lrf 网盘
- DL/T 5600-2021 电力系统次同步谐振/振荡风险评估技术规程 pdf 下载 极速 mobi txt pdb lrf 网盘
- 有趣又好读的经济学 pdf 下载 极速 mobi txt pdb lrf 网盘
- 亡者归来 五州传播出版社 pdf 下载 极速 mobi txt pdb lrf 网盘
- 中公版·2018医疗卫生系统公开招聘工作人员考试核心考点：中医学专业知识 pdf 下载 极速 mobi txt pdb lrf 网盘
- 20142015医辽卫生系统招聘考试历年真题及题库套卷临床医学基础知识 pdf 下载 极速 mobi txt pdb lrf 网盘
- 亲历者讲述中统*** pdf 下载 极速 mobi txt pdb lrf 网盘
- 星座趣谈 pdf 下载 极速 mobi txt pdb lrf 网盘
- 剑桥商务英语初级词汇精选 冯伟哲 等编著 浙江教育出版社【正版图书】 pdf 下载 极速 mobi txt pdb lrf 网盘
书籍真实打分
故事情节：9分
人物塑造：3分
主题深度：5分
文字风格：8分
语言运用：3分
文笔流畅：8分
思想传递：5分
知识深度：9分
知识广度：5分
实用性：3分
章节划分：5分
结构布局：5分
新颖与独特：4分
情感共鸣：4分
引人入胜：4分
现实相关：6分
沉浸感：6分
事实准确性：8分
文化贡献：4分