The Shellcoder's Handbook: Discovering and Exploiting Security Holes23 reviews
Chris Anley, John Heasman, ...

Wiley, 2007

Excellent Book

+ The best out there, but not so different from the first edition
+ The greatest book on finding exploits hands down !!!
+ The hacker's bible
  
  











  



  
Hacker's Challenge 2: Test Your Network Security & Forensic Skills12 reviews
Mike Schiffman, Bill Pennington, ...

McGraw-Hill Osborne Media, 2002

Test Your Skills With These Hacker Puzzles

+ Excellent Book!
+ Better than the 1st...
+ PURE FUN - IT'S A GEM
  
  











  



  
Designing BSD Rootkits: An Introduction to Kernel Hacking4 reviews
Joseph Kong

No Starch Press, 2007

Concise, informative, powerful -- a real winner

+ A perfect programmer's guide.
+ Enjoyable primer on system kernel penetration
+ Fun and informative
  
  











  



  
Programming Linux Hacker Tools Uncovered: Exploits, Backdoors, Scanners, Sniffers, Brute-Forcers, Rootkits ...1 review
Ivan Sklyarov

A-List Publishing, 2006

Great book... Learn C or you will be LOST!

I cracked the book to start reading and you are immediately shoved into programming an xping program. I had to stop and learn the parts of C that I am not as familier with. If you are looking for a great book to get you started on writing sec tools, then this is it!
  
  











  



  
Build Your Own Security Lab: A Field Guide for Network Testing1 review
Michael Gregg

Wiley, 2008

Excellent for novices

I'll be completely honest. I went through this in about two hours, and I plan on returning it. It simply didn't have anything new for me. I was expecting it to be more along the lines of setting up a virtual network, attempting to hack the VMs, and then checking the procedures to see if you did it ...
  
  











  



  
Open Source Fuzzing Tools
Noam Rathaus; Gadi Evron

Syngress, 2007

Fuzzing is often described as a "black box" software testing technique. It works by automatically feeding a program multiple input iterations in an attempt to trigger an internal error indicative of a bug, and potentially crash it. Such program errors and crashes are indicative of the existence of a security vulnerability, which can later be researched and fixed. Fuzz testing is now making a ...
  
  











  



  
Hacker's Challenge : Test Your Incident Response Skills Using 20 Scenarios23 reviews

McGraw-Hill Osborne Media, 2001

Challenging!

+ Good, but scenarios getting out of date
+ GOOD Book

Hacker's Challenge is a must have for every computer forensics. The scenarious given are indeed technically challenging and I like the fact that the complexity of attack, prevention, and mitigation are already specified. It is also very helpful as it make references to external resources that ...
  
  











  



  
Reversing: Secrets of Reverse Engineering15 reviews
Eldad Eilam

Wiley, 2005

A good read

+ Technique and understanding the assembly is the key
+ Great book for software developers / security professionals!
+ good for someone new to the subj
  
  











  



  
Microsoft Windows Internals (4th Edition): Microsoft Windows Server 2003, Windows XP, and Windows 200031 reviews
Mark E. Russinovich, David A. Solomon

Microsoft Press, 2005

The architecture "bible".

+ Pure internals
+ Excellent technical reference
+ Very thorough treatment of the subject matter
+ a "must read" for high level sysadmins
  
  











  



  
Hacking: The Art of Exploitation, 2nd Edition51 reviews
Jon Erickson

No Starch Press, 2008

One of the best technical books I have ever read.

+ Good for somebody who knows more than basics
+ Excellent security book
+ Get your hands dirty
+ Excellent
  
  











  



  
Stealing the Network: How to Own the Box33 reviews
Ryan Russell, Ido Dubrawsky, ...

Syngress, 2003

Fiction that hits too close to home

+ Fun for all
+ Entertaining in it's own right...
+ Useful, readable illustration of computer security concepts
  
  











  



  
Hacker's Challenge 3 (Hacking Exposed)9 reviews
David Pollino, Bill Pennington, ...

McGraw-Hill Osborne Media, 2006

A Digest of the New World of Hack Attacks

+ Everything needed for readers to test their skills
+ Still entertaining, still educational
+ Reads like a suspense novel!
  
  











  



  
Fuzzing: Brute Force Vulnerability Discovery4 reviews
Michael Sutton, Adam Greene, ...

Addison-Wesley Professional, 2007

Great book

+ Excellent introduction to fuzzing
+ _The_ fuzzing book
+ Great on Theory...Pretty Good on Execution
  
  











  



  
The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities15 reviews
Mark Dowd, John McDonald, ...

Addison-Wesley Professional, 2006

Excellent, as expected.

+ The Best Book on Software Security, Bar None
+ Great book
+ Good book
+ This is the bible
  
  











  



  
Certified Ethical Hacker Exam Prep (Exam Prep 2 (Que Publishing))15 reviews
Michael Gregg

Que, 2006

Great book

+ Excellent preparation book for the exam, makes you not a Ethical Hacker.
+ Some errors but hackers don't care about grammer.
+ Exam Prep is definitely a help
+ Very effective book
  
  











  



  
Anti-Hacker Tool Kit, Third Edition2 reviews
Mike Shema, Chris Davis

McGraw-Hill Osborne Media, 2006

Still a great book on essential security tools

I reviewed the first edition "Anti-Hacker Tool Kit" (AHT:1E) in August 2002, and the second edition (AHT:2E) in June 2004. AHT:3E was published in February 2006. I continue to like AHT, because it addresses many of the tools an operational security professional should know how to use. I'll point ...
  
  











  



  
Hacking Exposed Linux (Hacking Exposed)6 reviews
ISECOM

McGraw-Hill Osborne Media, 2008

First time not disappointed

+ Solid Information
+ Fantastic Security Resource
+ Ahem...
  
  











  



  
Reversing: Secrets of Reverse Engineering15 reviews
Eldad Eilam

Wiley, 2005

A good read

+ Technique and understanding the assembly is the key
+ Great book for software developers / security professionals!
+ good for someone new to the subj
  
  











  



  
Hacking Exposed Linux (Hacking Exposed)6 reviews
ISECOM

McGraw-Hill Osborne Media, 2008

First time not disappointed

+ Solid Information
+ Fantastic Security Resource
+ Ahem...
  
  











  



  
Designing BSD Rootkits: An Introduction to Kernel Hacking4 reviews
Joseph Kong

No Starch Press, 2007

Concise, informative, powerful -- a real winner

+ A perfect programmer's guide.
+ Enjoyable primer on system kernel penetration
+ Fun and informative