Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite
1

I've read the 'Shellcoder's Handbook' as well as 'The Art of Exploitation', and appreciated both a lot. Now I'm looking for additional resources delving into vulnerability spotting, code auditing, and maybe fuzzing. Any recommendation for a book or must-read online resources of great interest?

share|improve this question

3 Answers

up vote 0 down vote

The web application hackers handbook is good book in web applications security and it is exploits .

A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security this is also very good I didn't complete it though.

Also OWASP/WASC guides are too good for Vulnerability Detection and Testing .

and Google is your best friend always.

share|improve this answer
Thanks Ali, I'll have a look at the Bug Hunter's Diary. I've already read the WAHH which is very good indeed, but I'm only looking for system exploits there. Also google can be helpful but there is way too much stuff here, that's why I asked here for only the best resources :) – ack__ May 10 '12 at 7:11
you mean exploit development/penetration testing related books and materials – Bnhack May 10 '12 at 8:46
up vote 1 down vote

for fuzzing take a look at:

  • Fuzzing: Brute Force Vulnerability Discovery (ISBN 0321446119)
  • Fuzzing for Software Security Testing and Quality Assurance (ISBN 1596932147)

for code review:

  • Peer Reviews in Software: A Practical Guide (ISBN 0201734850)
share|improve this answer
up vote 1 down vote

For static code analysis I can recommend this:

  • Secure Programming with Static Analysis (Brian Chess/ Jacob West)
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.