Buying Options
Hacking: The Next Generation
Print $39.99
Add to Cart
Print+Ebook $43.99
Add to Cart
Ebook $31.99
Add to Cart
Safari Books Online
Add to Cart
What is this?
Print £30.99
Add to Cart
What is this?
Description
With the advent of rich Internet applications, the explosion of social media, and the increased use of powerful cloud computing infrastructures, a new generation of attackers has added cunning new techniques to its arsenal. For anyone involved in defending an application or a network of systems, Hacking: The Next Generation is one of the few books to identify a variety of emerging attack vectors.
Full Description
Table of Contents
  1. Chapter 1 Intelligence Gathering: Peering Through the Windows to Your Organization

    1. Physical Security Engineering

    2. Google Earth

    3. Social Engineering Call Centers

    4. Search Engine Hacking

    5. Leveraging Social Networks

    6. Tracking Employees

    7. What Information Is Important?

    8. Summary

  2. Chapter 2 Inside-Out Attacks: The Attacker Is the Insider

    1. Man on the Inside

    2. Cross-Site Scripting (XSS)

    3. Cross-Site Request Forgery (CSRF)

    4. Content Ownership

    5. Advanced Content Ownership Using GIFARs

    6. Stealing Files from the Filesystem

    7. Summary

  3. Chapter 3 The Way It Works: There Is No Patch

    1. Exploiting Telnet and FTP

    2. Abusing SMTP

    3. Abusing ARP

    4. Summary

  4. Chapter 4 Blended Threats: When Applications Exploit Each Other

    1. Application Protocol Handlers

    2. Blended Attacks

    3. Finding Blended Threats

    4. Summary

  5. Chapter 5 Cloud Insecurity: Sharing the Cloud with Your Enemy

    1. What Changes in the Cloud

    2. Attacks Against the Cloud

    3. Summary

  6. Chapter 6 Abusing Mobile Devices: Targeting Your Mobile Workforce

    1. Targeting Your Mobile Workforce

    2. Summary

  7. Chapter 7 Infiltrating the Phishing Underground: Learning from Online Criminals?

    1. The Fresh Phish Is in the Tank

    2. Examining the Phishers

    3. The Loot

    4. Infiltrating the Underground

    5. Summary

  8. Chapter 8 Influencing Your Victims: Do What We Tell You, Please

    1. The Calendar Is a Gold Mine

    2. Social Identities

    3. Hacking the Psyche

    4. Summary

  9. Chapter 9 Hacking Executives: Can Your CEO Spot a Targeted Attack?

    1. Fully Targeted Attacks Versus Opportunistic Attacks

    2. Motives

    3. Information Gathering

    4. Attack Scenarios

    5. Summary

  10. Chapter 10 Case Studies: Different Perspectives

    1. The Disgruntled Employee

    2. The Silver Bullet

    3. Summary

  1. Appendix Chapter 2 Source Code Samples

    1. Datamine.js

    2. Pingback.js

    3. External-datamine.js

    4. XHRIEsniperscope()

    5. Codecrossdomain.java

    6. HiddenClass.java

  2. Appendix Cache_Snoop.pl

  3. Colophon

View Full Table of Contents
Product Details
Title:
Hacking: The Next Generation
By:
Nitesh Dhanjani, Billy Rios, Brett Hardin
Publisher:
O'Reilly Media
Formats:
  • Print
  • Ebook
  • Safari Books Online
Print Release:
September 2009
Ebook Release:
August 2009
Pages:
304
Print ISBN:
978-0-596-15457-8
| ISBN 10:
0-596-15457-7
Ebook ISBN:
978-0-596-80701-6
| ISBN 10:
0-596-80701-5
Customer Reviews
About the Authors
  1. Nitesh Dhanjani

    Nitesh Dhanjani is a well known security researcher, author, and speaker. Dhanjani is currently Senior Manager at a large consulting firm where he advises some of the largest corporations around the world on how to establish enterprise wide information security programs and solutions. Dhanjani is also responsible for evangelizing brand new technology service lines around emerging technologies and trends such as cloud computing and virtualization.

    Prior to his current job, Dhanjani was Senior Director of Application Security and Assessments at a major credit bureau where he spearheaded brand new security efforts into enhancing the enterprise SDLC, created a process for performing source code security reviews & Threat Modeling, and managed the Attack & Penetration team.

    Dhanjani is the author of "Network Security Tools: Writing, Hacking, and Modifying Security Tools" (O'Reilly) and "HackNotes: Linux and Unix Security" (Osborne McGraw-Hill). He is also a contributing author to "Hacking Exposed 4" (Osborne McGraw-Hill) and "HackNotes: Network Security". Dhanjani has been invited to talk at various information security events such as the Black Hat Briefings, RSA, Hack in the Box, Microsoft Blue Hat, and OSCON.

    Dhanjani graduated from Purdue University with both a Bachelors and Masters degree in Computer Science.

    Dhanjani's personal blog is located at dhanjani.com.

    View Nitesh Dhanjani's full profile page.

  2. Billy Rios

    Billy Rios is currently a Security Engineer for Microsoft where he studies emerging risks and cutting edge security attacks and defenses. Before his current role as a Security Engineer, Billy was a Senior Security Consultant for various consulting firms including VeriSign and Ernst and Young. As a consultant, Billy performed network, application, and wireless vulnerability assessments as well as tiger team/full impact risk assessments against numerous clients in the Fortune 500.
    Before his life as a consultant, Billy helped defend US Department of Defense networks as an Intrusion Detection Analyst for the Defense Information Systems Agency (DISA) and was an active duty Officer in the US Marine Corps (deployed in support of OIF in 2003). Billy s thought leadership includes speaking engagements at numerous security conferences including: Blackhat Briefings, RSA, Microsoft Bluehat, DEFCON, PacSec, HITB, the Annual Symposium on Information Assurance (ASIA), as well as several other security related conferences. Billy holds a Master of Science degree in Information Systems, a Master of Business Administration degree, and an undergraduate degree in Business Administration

    View Billy Rios's full profile page.

  3. Brett Hardin

    Brett Hardin is a Security Research Lead with McAfee. At McAfee, Brett bridges security and business perspectives to aid upper management in understanding security issues. Before joining McAfee, Brett was a penetration tester for Ernst and Young's Advanced Security Center assessing web application and intranet security for Fortune 500 companies.
    In addition, Brett also is the author of misc-security.com. A blog dedicated to focusing on security topics from a high-level or business-level perspective.


    Brett holds a bachelor of science in Computer Science from California State University at Chico.

    View Brett Hardin's full profile page.

Colophon
The image on the cover of Hacking: The Next Generation is a pirate ship, as its pirate flags unmistakably indicate. A pirate flag is also referred to as a Jolly Roger. Among several theories behind the name, the most prominent is that it is an English translation of the French jolie rouge, which literally means "beautiful red." Pirates used red to conjure violent images of bloodshed and death in the heads of their potential victims.Pirate flags were not always red, however. In fact, the most famous one is black with a white skull and crossbones. Pirates started adorning their flags with the skull and crossbones designs as early as 1687.They would raise the Jolly Roger only once their victims were in sight to identify themselves as pirates and to give the other ship the opportunity to surrender. If the opposing ship failed to retreat, the pirates would lower the Jolly Roger and raise a red one to indicate their unwavering intentions to take the ship by force.The images on the flags communicated to potential captives what the pirates planned to do with them if they did not surrender; for example, a skeleton with horns warned that the pirates intended to impose a slow, tortuous death, while a dart or spear indicated that the pirates were violent and there would undoubtedly be bloodshed. Pirate flags also often featured hourglasses to warn their victims that they were running out of time to surrender without being harmed.Today some military units use the Jolly Roger with the cross and skull bones as a victory flag.
  • Book cover of Hacking: The Next Generation