eBOOKS (POST ALL HERE)

This may have been posted before...

The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System

Overview

While forensic analysis has proven to be a valuable investigative tool in the field of computer security, utilizing anti-forensic technology makes it possible to maintain a covert operational foothold for extended periods, even in a high-security environment. Adopting an approach that favors full disclosure, the updated Second Edition of The Rootkit Arsenal presents the most accessible, timely, and complete coverage of forensic countermeasures. This book covers more topics, in greater depth, than any other currently available. In doing so the author forges through the murky back alleys of the Internet, shedding light on material that has traditionally been poorly documented, partially documented, or intentionally undocumented.

The range of topics presented includes how to:
• Evade post-mortem analysis
• Frustrate attempts to reverse engineer your command & control modules
• Defeat live incident response
• Undermine the process of memory analysis
• Modify subsystem internals to feed misinformation to the outside
• Entrench your code in fortified regions of execution
• Design and implement covert channels
• Unearth new avenues of attack

http://www.mediafire.com/?hd5nrw5hykt

Grey Hat Python

Python is fast becoming the programming language of choice for hackers, reverse engineers, and software testers because it's easy to write quickly, and it has the low-level support and libraries that make hackers happy. But until now, there has been no real manual on how to use Python for a variety of hacking tasks. You had to dig through forum posts and man pages, endlessly tweaking your own code to get everything working. Not anymore.

Gray Hat Python explains the concepts behind hacking tools and techniques like debuggers, trojans, fuzzers, and emulators. But author Justin Seitz goes beyond theory, showing you how to harness existing Python-based security tools - and how to build your own when the pre-built ones won't cut it.

You'll learn how to:

Automate tedious reversing and security tasks
Design and program your own debugger
Learn how to fuzz Windows drivers and create powerful fuzzers from scratch
Have fun with code and library injection, soft and hard hooking techniques, and other software trickery
Sniff secure traffic out of an encrypted web browser session
Use PyDBG, Immunity Debugger, Sulley, IDAPython, PyEMU, and more


http://www.mediafire.com/view/?grjsbq1dddebpsq

Inside Windows Debugging
A Practical Guide to Debugging and Tracing Strategies in Windows

Use Windows debuggers throughout the development cycle��and build better software

Rethink your use of Windows debugging and tracing tools��and learn how to make them a key part of test-driven software development. Led by a member of the Windows Fundamentals Team at Microsoft, you��ll apply expert debugging and tracing techniques��and sharpen your C++ and C# code analysis skills��through practical examples and common scenarios. Learn why experienced developers use debuggers in every step of the development process, and not just when bugs appear.

Discover how to:

Go behind the scenes to examine how powerful Windows debuggers work
Catch bugs early in the development cycle with static and runtime analysis tools
Gain practical strategies to tackle the most common code defects
Apply expert tricks to handle user-mode and kernel-mode debugging tasks
Implement postmortem techniques such as JIT and dump debugging
Debug the concurrency and security aspects of your software
Use debuggers to analyze interactions between your code and the operating system
Analyze software behavior with Xperf and the Event Tracing for Windows (ETW) framework


A Bit of Background
Chapter 1 Software Development in Windows
Windows Evolution
Windows Architecture
Windows Developer Interface
Microsoft Developer Tools
Summary
Debugging for Fun and Profit
Chapter 2 Getting Started
Introducing the Debugging Tools
User-Mode Debugging
Kernel-Mode Debugging
Summary
Chapter 3 How Windows Debuggers Work
User-Mode Debugging
Kernel-Mode Debugging
Managed-Code Debugging
Script Debugging
Remote Debugging
Summary
Chapter 4 Postmortem Debugging
Just-in-Time Debugging
Dump Debugging
Summary
Chapter 5 Beyond the Basics
Noninvasive Debugging
Data Breakpoints
Scripting the Debugger
WOW64 Debugging
Windows Debugging Hooks (GFLAGS)
Summary
Chapter 6 Code Analysis Tools
Static Code Analysis
Runtime Code Analysis
Summary
Chapter 7 Expert Debugging Tricks
Essential Tricks
More Useful Tricks
Kernel-Mode Debugging Tricks
Summary
Chapter 8 Common Debugging Scenarios, Part 1
Debugging Access Violations
Debugging Heap Corruptions
Debugging Stack Corruptions
Debugging Stack Overflows
Debugging Handle Leaks
Debugging User-Mode Memory Leaks
Debugging Kernel-Mode Memory Leaks
Summary
Chapter 9 Common Debugging Scenarios, Part 2
Debugging Race Conditions
Debugging Deadlocks
Debugging Access-Check Problems
Summary
Chapter 10 Debugging System Internals
The Windows Console Subsystem
Anatomy of System Calls
Summary
Observing and Analyzing Software Behavior
Chapter 11 Introducing Xperf
Acquiring Xperf
Your First Xperf Investigation
Xperf��s Strengths and Limitations
Summary
Chapter 12 Inside ETW
ETW Architecture
Existing ETW Instrumentation in Windows
Understanding ETW Stack-Walk Events
Adding ETW Logging to Your Code
Boot Tracing in ETW
Summary
Chapter 13 Common Tracing Scenarios
Analyzing Blocked Time
Analyzing Memory Usage
Tracing as a Debugging Aid
Summary
Appendix WinDbg User-Mode Debugging Quick Start
Starting a User-Mode Debugging Session
Fixing the Symbols Path
Fixing the Sources Path
Displaying the Command Line of the Target Process
Control Flow Commands
Listing Loaded Modules and Their Version
Resolving Function Addresses
Setting Code (Software) Breakpoints
Setting Data (Hardware) Breakpoints
Switching Between Threads
Displaying Call Stacks
Displaying Function Parameters
Displaying Local Variables
Displaying Data Members of Native Types
Navigating Between Call Frames
Listing Function Disassembly
Displaying and Modifying Memory and Register Values
Ending a User-Mode Debugging Session
Appendix WinDbg Kernel-Mode Debugging Quick Start
Starting a Kernel-Mode Debugging Session
Switching Between CPU Contexts
Displaying Process Information
Displaying Thread Information
Switching Process and Thread Contexts
Listing Loaded Modules and Their Version
Setting Code (Software) Breakpoints Inside Kernel-Mode Code
Setting Code (Software) Breakpoints Inside User-Mode Code
Setting Data (Hardware) Breakpoints
Ending a Kernel-Mode Debugging Session


http://www.mediafire.com/?4gakhmolq66pe34