Hypnotic on my Heart

BEST HACKING BOOKS OF 2018

1. THE HACKER'S PLAYBOOK PRACTICAL GUIDE TO PENETRATION

CONTENTS

• Introduction
• Pregame – The Setup
• Setting Up a Penetration Testing Box
• Before the Snap – Scanning the Network
• The Drive – Exploiting Scanner Findings
• The Throw – Manual Web Application Findings
• The Lateral Pass – Moving Through the Network
• The Screen – Social Engineering
• The Onside Kick – Attacks that Require Physical Access
• The Quarterback Sneak – Evading AV
• Special Teams – Cracking, Exploits, Tricks
• Post Game Analysis – Reporting

2. ANDROID HACKER'S HANDBOOK

CONTENTS

• Chapter 1 Looking at the Ecosystem
• Chapter 2 Android Security Design and Architecture
• Chapter 3 Rooting Your Device
• Chapter 4 Reviewing Application Security
• Chapter 5 Understanding Android's Attack Surface
• Chapter 6 Finding Vulnerabilities with Fuzz Testing
• Chapter 7 Debugging and Analyzing Vulnerabilities
• Chapter 8 Exploiting User Space Software
• Chapter 9 Return Oriented Programming
• Chapter 10 Hacking and Attacking the Kernel
• Chapter 11 Attacking the Radio Interface Layer
• Chapter 12 Exploit Mitigations
• Chapter 13 Hardware Attacks

3. PENETRATION TESTING: A HANDS-ON INTRODUCTION TO HACKING

CONTENTS

• Chapter 1: Setting Up Your Virtual Lab
• Chapter 2: Using Kali Linux
• Chapter 3: Programming
• Chapter 4: Using the Metasploit Framework
• Chapter 5: Information Gathering
• Chapter 6: Finding Vulnerabilities
• Chapter 7: Capturing Traffic
• Chapter 8: Exploitation
• Chapter 9: Password Attacks
• Chapter 10: Client-Side Exploitation
• Chapter 11: Social Engineering
• Chapter 12: Bypassing Antivirus Applications
• Chapter 13: Post Exploitation
• Chapter 14: Web Application Testing
• Chapter 15: Wireless Attacks
• Chapter 16: A Stack-Based Buffer Overflow in Linux
• Chapter 17: A Stack-Based Buffer Overflow in Windows
• Chapter 18: Structured Exception Handler Overwrites
• Chapter 19: Fuzzing, Porting Exploits, and Metasploit Modules
• Chapter 20: Using the Smartphone Pentesting Framework

4. THE SHELLCODER'S HANDBOOK

CONTENTS

• Stack Overflows
• Shellcode
• Introduction to Format String Bugs
• Windows Shellcode
• Windows Overflows
• Overcoming Filters
• Introduction to Solaris Exploitation
• OS X Shellcode
• Cisco IOS Exploitation
• Protection Mechanisms
• Establishing a Working Environment
• Fault Injection
• The Art of Fuzzing
• Beyond Recognition: A Real Vulnerability versus a Bug
• Instrumented Investigation: A Manual Approach
• Tracing for Vulnerabilities
• Binary Auditing: Hacking Closed Source Software
• Alternative Payload Strategies
• Writing Exploits that Work in the Wild
• Attacking Database Software
• Unix Kernel Overflows
• Exploiting Unix Kernel Vulnerabilities
• Hacking the Windows Kernel

5. THE HACKER'S HANDBOOK WEB APPLICATION SECURITY FLAWS

CONTENTS

• Chapter 1 Web Application (In)security
• Chapter 2 Core Defense Mechanisms
• Chapter 3 Web Application Technologies
• Chapter 4 Mapping the Application
• Chapter 5 Bypassing Client-Side Controls
• Chapter 6 Attacking Authentication
• Chapter 7 Attacking Session Management
• Chapter 8 Attacking Access Controls
• Chapter 9 Attacking Data Stores
• Chapter 10 Attacking Back-End Components
• Chapter 11 Attacking Application Logic
• Chapter 12 Attacking Users: Cross-Site Scripting
• Chapter 13 Attacking Users: Other Techniques
• Chapter 14 Automating Customized Attacks
• Chapter 15 Exploiting Information Disclosure
• Chapter 16 Attacking Native Compiled Applications
• Chapter 17 Attacking Application Architecture
• Chapter 18 Attacking the Application Server
• Chapter 19 Finding Vulnerabilities in Source Code
• Chapter 20 A Web Application Hacker's Toolkit
• Chapter 21 A Web Application Hacker's Methodology