This much-anticipated revision, written by the ultimate group of top security experts in the world, features 40 percent new content on how to find security holes in any operating system or application
New material addresses the many new exploitation techniques that have been discovered since the first edition, including attacking "unbreakable" software packages such as McAfee's Entercept, Mac OS X, XP, Office 2003, and Vista
Also features the first-ever published information on exploiting Cisco's IOS, with content that has never before been explored
The companion Web site features downloadable code files

CUSTOMER REVIEWS (Average Customer Rating: 4.5 based on 23 reviews)

The best out there, but not so different from the first edition

Loved it, I think this is the best book on shellcode out there. The only downside is, there isn't so much new content compared to the first edition. Other than that, this book is definitely a must if you're after low-level knowledge on computer security.
May 28, 2008

The greatest book on finding exploits hands down !!!

This book is great for learning how to find vulnerabilities in Linux, windows, Mac and even cisco routers.

don't pay attention to the people saying that it had errors or its hard or its waste of time, because its not.

just make sure you have a great understanding in C Programming, and make sure you know some assembly language otherwise you won't know what you're reading about.

this a truly one of the best books out there that describes exploiting methodology and how it work.

Its absolutely not waste of time.
May 02, 2008

The hacker's bible

Watching the series "24" I'm often impress by how Chloe O'Brian and Edgar Stiles get to break into any system they want to with ease. Reading this book I now know where they got their information from. This book is a classic,any kind of exploit is analyse by accomplished security experts. The coverage is pretty intence and even seniors c and assembler programmers will need to read some of the material a few times to make sure they get it. This is the kind of book you have to take your time reading, yes it is that deep. Eventhough the book was released four years ago the price of the book remain the same, which tell me the information in it is valuable. If exploiting is something that is something to want to get into, look no further this is the only book you need.
January 05, 2007

Need some work.

As a security consultant and penetration tester I can say that this books is quite interesting and covers lots of software exploitation area but it still need some work. Mostly on how concept are explained, used and writen. You'll still find lots of papers on internet with better (more complete) explanation but still, this is a must have for every penetration testers and security auditor.

Be advise: This book is for not for beginners.
September 27, 2006

Excellent Book

In the last few months I've read several white hat/black hat books on security, and I must say that this one is the best. Not for the completely new to the subject, and a little too quick to explain some complex topics, but still a great book. I have only two complaints, which aren't making me give this book less than a 5:
1. There's a lot of errors in the content, and following such an advance book when you can't trust the code gets complicated.
2. There are a few chapters, particularly in section 3, where the style hasn't been neutralized, and you can absolutely tell that the book was written by 5 different people with almost no coordination.

Other than that, excellent book. I'm looking forward to buying Database Hacker's Handbook, by the same editor.
September 26, 2005

SIMILAR PRODUCTS

Hacking: The Art of Exploitation, 2nd Edition
by Jon Erickson

Reversing: Secrets of Reverse Engineering
by Eldad Eilam

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws
by Dafydd Stuttard, Marcus Pinto

Rootkits: Subverting the Windows Kernel (Addison-Wesley Software Security Series)
by Greg Hoglund, Jamie Butler

Fuzzing: Brute Force Vulnerability Discovery
by Michael Sutton, Adam Greene, Pedram Amini