Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've read the 'Shellcoder's Handbook' as well as 'The Art of Exploitation', and appreciated both a lot. Now I'm looking for additional resources delving into vulnerability spotting, code auditing, and maybe fuzzing. Any recommendation for a book or must-read online resources of great interest?

share|improve this question
up vote 2 down vote accepted

for fuzzing take a look at:

  • Fuzzing: Brute Force Vulnerability Discovery (ISBN 0321446119)
  • Fuzzing for Software Security Testing and Quality Assurance (ISBN 1596932147)

for code review:

  • Peer Reviews in Software: A Practical Guide (ISBN 0201734850)
share|improve this answer

For static code analysis I can recommend this:

  • Secure Programming with Static Analysis (Brian Chess/ Jacob West)
share|improve this answer

The web application hackers handbook is good book in web applications security and it is exploits .

A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security this is also very good I didn't complete it though.

Also OWASP/WASC guides are too good for Vulnerability Detection and Testing .

and Google is your best friend always.

share|improve this answer
Thanks Ali, I'll have a look at the Bug Hunter's Diary. I've already read the WAHH which is very good indeed, but I'm only looking for system exploits there. Also google can be helpful but there is way too much stuff here, that's why I asked here for only the best resources :) – ack__ May 10 '12 at 7:11
you mean exploit development/penetration testing related books and materials – P3nT3ster May 10 '12 at 8:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.