Attacking Network Protocols: A Hacker's Guide to Capture, Analysis, and Exploitation

by James Forshaw

Attacking Network Protocols is a deep dive into network protocol security from James -Forshaw, one of the world's leading bug -hunters. This comprehensive guide looks at networking from an attacker's perspective to help you discover, exploit, and ultimately -protect vulnerabilities.

You'll start with a rundown of networking basics and protocol traffic capture before moving on to static and dynamic protocol analysis, common protocol structures, cryptography, and protocol security. Then you'll turn your focus to finding and exploiting vulnerabilities, with an overview of common bug classes, fuzzing, debugging, and exhaustion attacks.

Learn how to:
- Capture, manipulate, and replay packets
- Develop tools to dissect traffic and reverse engineer code to understand the inner workings of a network protocol
- Discover and exploit vulnerabilities such as memory corruptions, authentication bypasses, and denials of service
- Use capture and analysis tools like -Wireshark and develop your own custom network proxies to manipulate -network traffic

Attacking Network Protocols is a must-have for any penetration tester, bug hunter, or developer looking to understand and discover network vulnerabilities.

Genres: Technology, Hackers, Computers, Computer Science, Technical, Nonfiction, Software

336 pages, Paperback

First published January 1, 2017

Reviews

[Carter · Rating 2 out of 5]

There are some interesting tidbits in here, but not much of use. Much of the material is about memory corruption bugs, and identifying them in crash analysis after fuzz testing. This simply for the most part repurposes old debugging skills.

[Nicky Lim · Rating 5 out of 5]

Concise and easy to follow that lays out common network bugs and how it subsequently leads to exploits. Forshaw did a great job to breakdown a network protocol design and how to reverse engineer it methodically. Furthermore, he characterize different exploits and introuduces a framework to think about them such as: memory corruption, denial-of-service and information leakage.

[Michal · Rating 2 out of 5]

The book is mostly about bugs in memory allocation. In other words, it reminded me how glad I am to use memory-safe languages as there are already tones of things to keep in mind. Anyway, it was nice to see how exploitation could be done and what tools exist for it. Maybe a bit too detailed explanations, not my taste anymore, but a fine book.

[Kerszi · Rating 4 out of 5]

Kolejna książka o hakingu. Nacisk jest położony głównie na przechwytywaniu pakietów. Są i rozdziały opisujące inżynierię wsteczną.