HOW TO UNSKID YOURSELF 101

HOW TO UNSKID YOURSELF 101

[1.] Hacking: The Art of Exploitation, 2nd Edition

This book covers coding (c, x86 assembly), exploitation (stack overflow, heap overflow, Format String), Networking (and network-based attacks), writing shellcode, countermeasures and some cryptology.
It's the very first book to read since it doesn't expect you to know anything before you start.

[2.] Web application Hacker's Handbook, 2nd Edition

Covers pretty all areas of web application security, could be seen as a reference guide (look up the stuff you need), or a book to be read from start to finish.
I'd recommend reading at least the first chapters before jumping back and forth in the book.

[3.] Introductory Intel x86: Architecture, Assembly, Applications, & Alliteration

opensecuritytraining.info/IntroX86.html
youtube.com/watch?v=H4Z0S9ZbC0g

A video course teaching you Intel x86, something you'll really want to know if you plan on pwning gibsons.
It's a long course, but absolutely amazing which gives you a real good foundation for learning Software Exploitation and Reverse Engineering.
Some of the stuff covered here are also in Hacking: TAoE, but practice makes perfect.

[4.] Offensive Computer Security

cs.fsu.edu/~redwood/OffensiveComputerSecurity/lectures.html

Another course, this time from FSU.
Goes over:
Secure Coding in C / Code Auditing
Reverse Engineering
Fuzzing
Exploit Development
* Stack/Heap/Format String
* ret2libc
* ASLR, NX/DEP, Stack Cookies, EMET
* Return Oriented Programming (ROP)
Networking
Web application Hacking/Security
* WAF
* IDS
* SSL
Metasploit
Post Exploitation
Forenscics and Incident Response
Physical Security and Social Engineering


[5.] The Shellcoder's Handbook: Discovering and Exploiting Security Holes

Attached: 390778e2526be7ee9c6b373f8f4e91fd.jpg (540x531, 52K)

[6.] A Guide to Kernel Exploitation: Attacking the Core

You wanna write kernel exploits? Of course you do.
Look no further.

Note: This book requires a deep understanding of Computer Architecture and Operating systems.


Some other great books to read in no particular order...

Reversing: Secrets of Reverse Engineering
Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers
Black Hat Python: Python Programming for Hackers and Pentesters
Metasploit: The Penetration Tester's Guide
The Browser Hacker's Handbook
The Rootkit Arsenal: Escape and Evasion: Escape and Evasion in the Dark Corners of the System
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
Gray Hat Hacking The Ethical Hackers Handbook, 3rd Edition
The Hacker Playbook: Practical Guide To Penetration Testing

Should I just start off with some of my tools I got from blackarch repo or go through these books first?? I just want to land a job as a pentester, I dont care about if it includes being a script kiddy or not.

Using premade tools doesn't automatically make you a skid if you know how they work and what they do.But if running a premade tool is the peak of your ability , you'll be useless as a pentester as soon as a situation requires something specific that can't simply be run through [insert x tool].

>No LISP.

I can't approve.

It seems the right thread.
How hard is it to learn cracking?
There are some products i want to use but i dont trust keygens and cracks.

Why is this thread still up, does Jow Forums really condone hacking?

What are Jow Forums thoughts on oscp?

Hacking is just a tool, faggot.

So... You're telling me... you are learning to invade... but you are totally not exploit this knowledge to your own benefit uh?...
Even tough the keyword for hacking... is exploitation...
Ok, i totally believe you, you are like those faggots who pirate but say
>M-muh i-i would buy the game if i liked it