A Guide to Kernel Exploitation: Attacking the Core discusses the theoretical techniques and approaches needed to develop reliable and effective kernel-level exploits, and applies them to different operating systems, namely, UNIX derivatives, Mac OS X, and Windows. Concepts and tactics are presented categorically so that even when a specifically detailed vulnerability has been patched, the foundational information provided will help hackers in writing a newer, better attack; or help pen testers, auditors, and the like develop a more concrete design and defensive structure.

The book is organized into four parts. Part I introduces the kernel and sets out the theoretical basis on which to build the rest of the book. Part II focuses on different operating systems and describes exploits for them that target various bug classes. Part III on remote kernel exploitation analyzes the effects of the remote scenario and presents new techniques to target remote issues. It includes a step-by-step analysis of the development of a reliable, one-shot, remote exploit for a real vulnerabilitya bug affecting the SCTP subsystem found in the Linux kernel. Finally, Part IV wraps up the analysis on kernel exploitation and looks at what the future may hold.

Covers a range of operating system families ― UNIX derivatives, Mac OS X, Windows
Details common scenarios such as generic memory corruption (stack overflow, heap overflow, etc.) issues, logical bugs and race conditions
Delivers the reader from user-land exploitation to the world of kernel-land (OS) exploits/attacks, with a particular focus on the steps that lead to the creation of successful techniques, in order to give to the reader something more than just a set of tricks

About the Authors

Enrico Perla currently works as a kernel programmer at Oracle. He received his B.Sc. in Computer Science from the University of Torino, and his M.Sc. in Computer Science from Trinity College Dublin. His interests range from low-level system programming to low-level system attacking, exploiting, and exploit countermeasures.

Massimiliano Oldani currently works as a Security Consultant at Emaze Networks. His main research topics include operating system security and kernel vulnerabilities.

"About this title" may belong to another edition of this title.

Store Description

Goodwill Southern California - We are a 501(c)(3) nonprofit organization whose mission is to help transform lives through the power of work. Goodwill Southern California serves individuals with disabilities or other vocational disadvantages and local businesses seeking qualified employees by providing education, skills training, work experience and job placement. In addition to our retail stores located throughout Southern California and in the Inland Empire, we also provide jobs and services such as secure shredding, e-recycling (computers and electronics), packaging and assembling, post retail recycling, etc. If you would like to know more about our company, our services, partnership opportunities or to make a donation, please either visit our website goodwillsocal.org, or contact us at our toll-free number, 1 (888) 4 GOODWILL. Thank you for your support of our mission to help others.

Visit Seller's Storefront

Seller's business information

Goodwill Industries of Southern California
342 N San Fernando Rd, Los Angeles, CA, 90031, U.S.A.

Sale & Shipping Terms

Terms of Sale

Shipping Terms

Shipping rates within U.S.A.

Shipping rates within U.S.A.
Order quantity	5 to 14 business days	3 to 6 business days
First item	US$ 3.00	US$ 6.50

Delivery times are set by sellers and vary by carrier and location. Orders passing through Customs may face delays and buyers are responsible for any associated duties or fees. Sellers may contact you regarding additional charges to cover any increased costs to ship your items.