舉報 
會員
Learning Linux Binary Analysis
最新章節(jié)：
Index
IfyouareasoftwareengineerorreverseengineerandwanttolearnmoreaboutLinuxbinaryanalysis,thisbookwillprovideyouwithallyouneedtoimplementsolutionsforbinaryanalysisinareasofsecurity,forensics,andantivirus.Thisbookisgreatforbothsecurityenthusiastsandsystemlevelengineers.SomeexperiencewiththeCprogramminglanguageandtheLinuxcommandlineisassumed.
目錄(103章)
倒序
- 封面
- 版權(quán)信息
- Credits
- About the Author
- Acknowledgments
- About the Reviewers
- www.PacktPub.com
- Preface
- Chapter 1. The Linux Environment and Its Tools
- Linux tools
- Useful devices and files
- Linker-related environment points
- Summary
- Chapter 2. The ELF Binary Format
- ELF file types
- ELF program headers
- ELF section headers
- ELF symbols
- ELF relocations
- ELF dynamic linking
- Coding an ELF Parser
- Summary
- Chapter 3. Linux Process Tracing
- The importance of ptrace
- ptrace requests
- The process register state and flags
- A simple ptrace-based debugger
- A simple ptrace debugger with process attach capabilities
- Advanced function-tracing software
- ptrace and forensic analysis
- Process image reconstruction – from the memory to the executable
- Code injection with ptrace
- Simple examples aren't always so trivial
- Demonstrating the code_inject tool
- A ptrace anti-debugging trick
- Summary
- Chapter 4. ELF Virus Technology – Linux/Unix Viruses
- ELF virus technology
- ELF virus engineering challenges
- ELF virus parasite infection methods
- The PT_NOTE to PT_LOAD conversion infection method
- Infecting control flow
- Process memory viruses and rootkits – remote code injection techniques
- ELF anti-debugging and packing techniques
- ELF virus detection and disinfection
- Summary
- Chapter 5. Linux Binary Protection
- ELF binary packers – dumb protectors
- Stub mechanics and the userland exec
- Other jobs performed by protector stubs
- Existing ELF binary protectors
- Downloading Maya-protected binaries
- Anti-debugging for binary protection
- Resistance to emulation
- Obfuscation methods
- Protecting control flow integrity
- Other resources
- Summary
- Chapter 6. ELF Binary Forensics in Linux
- The science of detecting entry point modification
- Detecting other forms of control flow hijacking
- Identifying parasite code characteristics
- Checking the dynamic segment for DLL injection traces
- Identifying reverse text padding infections
- Identifying text segment padding infections
- Identifying protected binaries
- IDA Pro
- Summary
- Chapter 7. Process Memory Forensics
- What does a process look like?
- Process memory infection
- Detecting the ET_DYN injection
- Linux ELF core files
- Summary
- Chapter 8. ECFS – Extended Core File Snapshot Technology
- History
- The ECFS philosophy
- Getting started with ECFS
- libecfs – a library for parsing ECFS files
- readecfs
- Examining an infected process using ECFS
- The ECFS reference guide
- Process necromancy with ECFS
- Learning more about ECFS
- Summary
- Chapter 9. Linux /proc/kcore Analysis
- Linux kernel forensics and rootkits
- stock vmlinux has no symbols
- /proc/kcore and GDB exploration
- Direct sys_call_table modifications
- Kprobe rootkits
- Debug register rootkits – DRR
- VFS layer rootkits
- Other kernel infection techniques
- vmlinux and .altinstructions patching
- Using taskverse to see hidden processes
- Infected LKMs – kernel drivers
- Notes on /dev/kmem and /dev/mem
- /dev/mem
- K-ecfs – kernel ECFS
- Kernel hacking goodies
- Summary
- Index 更新時間：2021-07-16 12:57:10
推薦閱讀
- Unity 2020 Mobile Game Development
- 深入淺出Prometheus：原理、應(yīng)用、源碼與拓展詳解
- Mastering Entity Framework
- 精通API架構(gòu)：設(shè)計、運維與演進
- Visual FoxPro程序設(shè)計
- Python深度學(xué)習(xí)：基于TensorFlow
- SQL Server與JSP動態(tài)網(wǎng)站開發(fā)
- Corona SDK Mobile Game Development：Beginner's Guide（Second Edition）
- 從Java到Web程序設(shè)計教程
- C語言程序設(shè)計上機指導(dǎo)與習(xí)題解答（第2版）
- 微服務(wù)從小白到專家：Spring Cloud和Kubernetes實戰(zhàn)
- 微服務(wù)架構(gòu)深度解析：原理、實踐與進階
- 分布式架構(gòu)原理與實踐
- 數(shù)字媒體技術(shù)概論
- Data Manipulation with R（Second Edition）
- 算法超簡單：趣味游戲帶你輕松入門與實踐
- HTML5+CSS+JavaScript深入學(xué)習(xí)實錄
- Spark for Data Science
- Arduino Robotic Projects
- SQL Server 2005數(shù)據(jù)庫項目教程
- Mastering C++ Programming
- Mastering Grunt
- Web前端學(xué)習(xí)筆記：HTML5+CSS3+JavaScript
- MariaDB Cookbook
- Python數(shù)據(jù)分析、挖掘與可視化（慕課版）
- 新一代垃圾回收器ZGC設(shè)計與實現(xiàn)
- Cocos2d—X 案例開發(fā)大全
- Java+OpenCV高效入門
- Android System Programming
- C++程序設(shè)計：思想與方法 慕課版（第3版）
