LWN.net Logo

"Hacking: The Art of Exploitation" from No Starch Press

From:  Leigh Sacks <leigh-AT-nostarch.com>
To:  pr-AT-nostarch.com
Subject:  "Hacking: The Art of Exploitation" from No Starch Press
Date:  Mon, 27 Oct 2003 10:21:49 -0800

October 27, 2003

FINALLY, A HYPE-FREE HACKING BOOK
"Hacking: The Art of Exploitation" - serious hacking from a serious hacker

San Francisco, CA - Countless people have picked up a book on hacking, 
excited to get into the nitty-gritty of hacker exploits, only to discover 
that the book doesn't really tell them anything useful. Sure, it's 
entertaining, and maybe it presents some ideas about what hackers have done 
and can do. But if it doesn't really teach anything, is it really worth the 
money?

Finally, here's a book that tackles the art and science of hacking: 
"Hacking: The Art of Exploitation" (No Starch Press, Nov 03, $39.95 US, 
ISBN 1593270070). This technical, code-filled book about the art of 
creative problem solving known as hacking dissects various hacker 
techniques, both old and new, to see what makes them work. Unlike many 
hype-filled hacking books which explain how to download and use someone 
else's exploit, Erickson goes in-depth into each exploit to explain what 
happens at the code level, and the underlying logic. As the reader learns 
about each exploit technique they learn not only about that particular 
security flaw but also why most systems are vulnerable and most software is 
insecure.

Some of the techniques covered in the book are:

* Exploiting programs using buffer overflows and format strings
* Writing printable ASCII polymorphic shellcode
* Defeating non-executable stacks by returning into libc
* Redirecting network traffic, concealing open ports, and hijacking TCP 
connections
* Cracking encrypted 802.11b wireless traffic using the FMS attack

This is a book for the true hacker, whether that means the black clad 
system invader we see in the movies (thanks, Keanu), the underappreciated 
sys admin keeping miscreants off his network, or just the neutral computer 
technology enthusiast who enjoys the challenge. "Hacking: The Art of 
Exploitation" teaches the reader to think like the hacker writing the 
exploits so that he can learn to think for himself. And that is the essence 
of hacking.

HACKING
The Art of Exploitation
by Jon Erickson
ISBN 1593270070, November 2003, $39.95 ($59.95 Cdn), 264 pp.
Available at fine bookstores everywhere in November 2003
To order from the publisher: visit www.nostarch.com, email 
orders-AT-nostarch.com, or call 800-420-7240
For press queries contact Leigh Sacks - 415-863-9900 or leigh-AT-nostarch.com

ADDITIONAL RESOURCES
Author's site: www.phiral.com
www.2600.com - The Hacker Quarterly
www.phrack.org - Hacker magazine by the community, for the community
www.cert.org - Major reporting center for Internet security problems
www.securiteam.com - Security and hacking community
"Hacking: The Art of Exploitation" table of contents: 
http://nostarch.com/frameset.php?startat=hacking_toc
Sample chapter from the book - chapter 3, Networking: 
http://nostarch.com/hacking_ch3.pdf
Cover image: http://nostarch.com/frameset.php?startat=hacking_big

ABOUT THE AUTHOR
Jon Erickson has a formal education in computer science and speaks 
frequently at computer security conferences around the world. He currently 
works as a cryptologist and security specialist for Luminare Consulting.

ABOUT NO STARCH PRESS
Since 1994, No Starch Press has published unique books on computing, with a 
focus on Open Source, security, hacking, web development, programming, 
gaming, and alternative operating systems. Our titles have personality, our 
authors are passionate, and our goal is to make computing accessible to 
everyone.

For more information, or to request a review copy or schedule an interview 
with the author, contact Leigh Sacks at leigh-AT-nostarch.com or 415-863-9900


(Log in to post comments)

Advertisement for Cracking Book

Posted Oct 30, 2003 3:10 UTC (Thu) by whig (guest, #8781) [Link]

I don't know why LWN chose to publish this advertisement.

Advertisement for Cracking Book

Posted Oct 30, 2003 18:33 UTC (Thu) by cook (subscriber, #4) [Link]

Knowing the techniques used by malicious attackers is
worthwhile for those who wish to secure their systems.
Of course, the term "hackers" is somewhat controversial
in the open-source world, "crackers" is perhaps a better
term. English is never easy, a cracker could also refer
to a guy named "Bubba".

Copyright © 2003, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds