Buffer Overflow Attacks: Detect, Exploit, Prevent
- 7h 9m
- James C. Foster, et al.
- Elsevier Science and Technology Books, Inc.
- 2005
Will the Code You Write Today Headline Tomorrow's BugTraq Mail List?
- Includes Numbered-by-Line Exploit Code Examples That Illustrate the Differences Between Stack Overflows, Heap Corruption, and Format String Bugs
- Provides Case Studies for Most Major Platforms and Environments, Including Windows, FreeBSD, FrontPage, and Linux
- Avoid Worm or Custom Exploits by Analyzing Your Source Code to Detect Buffer Overflow Vulnerabilities
Forensic investigations of notorious Internet attacks, such as the SQL Slammer and Blaster Worms, reveal buffer overflows to be the sophisticated hacker's "vulnerability of choice". These worms crippled the Internet and cost billions of dollars to clean up. Now, even more powerful and insidious threats have appeared in the form of "custom exploits". These one-time only exploits are custom crafted to attack your enterprise, making them even more difficult to detect and defend. No catchy names, no media coverage; just your own personal disaster. James C. Foster's Buffer Overflow Attacks clearly demonstrates that the only way to defend against the endless variety of buffer overflow attacks is to implement a comprehensive design, coding and test plan for all of your applications. From Dave Aitel's Foreword through the last appendix, this is the only book dedicated exclusively to detecting, exploiting, and preventing buffer overflow attacks.
In this Book
-
Buffer Overflow Attacks–Detect, Exploit, Prevent
-
Foreword
-
Buffer Overflows: The Essentials
-
Understanding Shellcode
-
Writing Shellcode
-
Win32 Assembly
-
FreeBSD NN Exploit Code
-
xlockmore User Supplied Format String Vulnerability
-
Frontpage Denial of Service Utilizing WinSock
-
cURL buffer overflow on FreeBSD
-
Stack Overflows
-
Heap Corruption
-
Format String Attacks
-
Windows Buffer Overflows
-
cURL Buffer Overflow on Linux
-
SSLv2 Malformed Client Key Remote Buffer Overflow Vuln.
-
X11R6 4.2 XLOCALEDIR Overflow
-
Microsoft MDAC Denial of Service
-
Local UUX Buffer Overflow on HPUX
-
Finding Buffer Overflows in Source
-
InlineEgg I
-
InlineEgg II
-
Seti@Home Exploit Code
-
Microsoft CodeBlue Exploit Code
