Web-Based Resources
Here are a whole bunch of URLs for stuff that's on the web. Don't blame me if any of these are dead, or don't work or point somewhere else or whatever. I have tried to include only stuff that seems half-decent, because for every page listed here there are at least a dozen script-kiddy sites full of the same old garbage. Have fun!!
Groups and Organizations
CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 USA 2600 magazine P.O. Box 752 Middle Island, NY 11953 USA Telephone: (631) 751 2600 Fax: (631) 474 2677 Electronic Frontier Foundation 1550 Bryant Street, Suite 725 San Francisco, CA 94103 USA
Papers and Text Files
This is just a little sample of the stuff laying around my study. If there aren't any details, then don't ask me where it came from, because 90 per cent has just been printed off the net at different times
Where I have been able to find a source for this stuff, then I've put it in, but otherwise you are going to have to hunt for yourself
Buffer Overflows
"Smashing the Stack for Fun & Profit" Aleph One PHRACK 49/7NT Systems
"The Unofficial NT Hack FAQ" Simple Nomad Nomad Mobile Research Centre "CIFS: Common Insecurities Fail Scrutiny" Hobbit@avian.org BugTraqTCP/IP
"ARP and ICMP Redirection Games" Yuri Volubuev BugTraq "Security Problems in the TCP/IP Suite" S. M. Bellovin AT&T "A short overview of Packet Spoofing: Part 1" Brecht Claerhout "Sequence Number Attacks" Rik Farrow "Project Neptune: The SYNFlood Project" daemon9, route, infinity Phrack 48 "Web Spoofing: An Internet Con Game" E. W. Felten et al Princeton University, CompSci Dept. "ICQ socalled Protocol" Alan Cox BugTraq WWW and CGI Insecurity "CGIscript Reverse Engineering" Fravia+ "Hacking Webpages: The Ultimate Guide" Virtual Circuit & PsychoticUNIX Systems
"Improving the Security of your Site by Breaking into it" Dan Farmer and Wietse Venema "SUID Shells" HaWza PHILA "Security Backdoors" Christopher Klaus BugTraq "Sendmail Bug Exploits" Perlcom & Xer0 "The Sendmail Tutorial" RaveNNovell Systems
Title: Novell Security FAQPhreaking
"Hitchhikers Guide to the Phone System: Phreaking in the Nineties" BillSF 2600 magazine "Ultimate Guide to BlueBoxing in the (late) 90s" PhedOne Echelon "UK Phreaking: An Intermediate Guide" Hybrid DarkCyde "Better Homes & BlueBoxing" Mark Tabas "BlueBoxing in '94: C5 for the Masses" Maelstrom PHaTE "Introduction to the Meridian Voice Mail System" ColdFire "Introduction to Telephony and PBX" Cavalier Phrack 49
Computing Books
These are from all over the place - booklists, reviews in 2600, my bookshelf, Amazon, you name it. In my opinion the best computer publisher in the whole world is O'Reilly. I remember when their "Nutshell" guides were little brown things you could fit in your pocket. How things have changed! O'Reilly are one company on the web that deserve to make money, so I recommend you surf on over to their site with your credit card in hand and make a whole pile of purchases.
Hacker History and Culture
The Hacker Crackdown: Law and Disorder on the Electronic Frontier Author: Bruce Sterling Publisher: Bantam Books Copyright Date: 1982 ISBN: 055356370X Cyberpunk Authors: Katie Hafner and John Markoff Publisher: Simon and Schuster Copyright Date: 1991 ISBN: 067177879X The Cuckoo's Egg Author: Cliff Stoll Publisher: Simon and Schuster Copyright Date: 1989 ISBN: 0671726889 Hackers: Heroes of the Computer Revolution Author: Steven Levy Publisher: Doubleday Copyright Date: 1984 ISBN: 0440134956 The Hacker's Handbook Author: Hugo Cornwall Publisher: E. Arthur Brown Company Date: ???? ISBN: 0912579064TCP/IP
TCP/IP Illustrated: Volume One Author: Richard Stevens Publisher: Addison-Wesley Copyright Date: 1994 ISBN: 0201633469 TCP/IP Illustrated: Volume Two Author: Richard Stevens Publisher: Addison-Wesley Copyright Date: 1994 ISBN: 020163354X TCP/IP Illustrated: Volume Three Author: Richard Stevens Publisher: Addison-Wesley Copyright Date: 1995 ISBN: 0201634953 UNIX Network Programming Author: Richard Stevens Publisher: Prentice-Hall Copyright Date: 1990 ISBN: 0139498761 Internetworking with TCP/IP: Volume One Author: Douglas Comer Publisher: Prentice-Hall Date: ???? ISBN 0132169878 Internetworking with TCP/IP: Volume Two Author: Douglas Comer Publisher: Prentice-Hall Date: ???? ISBN: 0131255274 Internetworking with TCP/IP: Volume Three Author: Douglas Comer Publisher: Prentice-Hall Date: ???? ISBN: 013260969XInternet Security
Stopping Spam: Stamping Out Unwanted Email and News Postings Authors: Alan Schwartz and Simson Garfinkel Publisher: O'Reilly & Associates Copyright Date: 1998 ISBN: 156592388X Cracking the Net: A Hacker's Guide to Internet Security Author: n/a Publisher: Macmillan Computer Publishing Copyright Date: 1997 ISBN: 1575212684 Big Book of IPsec RFCs: Internet Security Architecture Author: Pete Loshin Publishers: Morgan Kaufmann Copyright Date: n/a??? ISBN: 0124558399 Hacking Exposed: Network Security Secrets and Solutions Authors: Stuart McClure, Joel Scambray, George Kurtz Publisher: McGraw-Hill Copyright Date: 1999 ISBN: 0072121270 Implementing Internet Security Author: William Stallings Publisher: New Riders Publishing Copyright Date: 1995 ISBN: 1562054716 Actually Useful Internet Security Techniques Author: Larry J. Hughes, Jr Publisher: New Riders Publishing Copyright Date: 1995 ISBN: 1562055089General Computer Security
Advances in Computer Systems Security Author: Rein Turn Publisher: Adtech Book Co Ltd Copyright Date: 1998 ISBN: 089006315X Computer Security Basics Authors: Deborah Russell and G. T. Gengemi, Sr Publisher: O'Reilly & Associates, Inc Copyright Date: 1991 ISBN: 0937175714 Information Systems Security Authors: Philip Fites and Martin Kratz Publisher: Van Nostrand Reinhold Copyright Date: 1993 ISBN: 0442001800 Computer Security Management Author: Karen Forcht Publisher: Boyd & Fraser Copyright Date: 1994 ISBN: 0878358811 The Stephen Cobb Complete Book of PC and LAN Security Author: Stephen Cobb Publisher: Windcrest Books Copyright Date: 1992 ISBN: 0830692800 (hardback); 0830632808 (paperback) Security in Computing Author: Charles P. Pfleeger Publisher: Prentice-Hall Copyright Date: 1989 ISBN: 0137989431 Building a Secure Computer System Author: Morrie Gasser Publisher: Van Nostrand Reinhold Copyright Date: ???? ISBN: 0442230222 Modern Methods for Computer Security Author: Lance Hoffman Publisher: Prentice-Hall Copyright Date: 1977 ISBN: ???? Protection and Security on the Information Superhighway Author: Dr Frederick B. Cohen Publisher: John Wiley & Sons Copyright Date: 1995 ISBN: 0471113891 Commonsense Computer Security Author: Martin Smith Publisher: McGraw-Hill Copyright Date: 1993 ISBN: 0077078055 Computer Security Reference Book Author: n/a ???? Publisher: CRC Press Copyright Date: 1992 ISBN: 0849377129Unix Security
Protecting Networks with SATAN Author: Martin Freiss Publisher: O'Reilly & Associates, Inc Copyright Date: 1998 ISBN: 1565924258 Practical Unix Security Authors: Simson Garfinkel and Gene Spafford Publisher: O'Reilly & Associates, Inc Copyright Date: 1991 ISBN: 0937175722 Unix System Security Author: Rik Farrow Publisher: Addison-Wesley Copyright Date: 1991 ISBN: 0201570300 Unix Security: A Practical Tutorial Author: N. Derek Arnold Publisher: McGraw-Hill Copyright Date: 1993 ISBN: 0070025606 Unix System Security: A Guide for Users and Systems Administrators Author: David A. Curry Publisher: Addison-Wesley Copyright Date: 1992 ISBN: 0201563274 Unix System Security Authors: Patrick H. Wood and Stephen G. Kochan Publisher: Hayden Books Copyright Date: 1985 ISBN: 0672484943 Unix Security for the Organization Author: Richard Bryant Publisher: Sams Copyright Date: 1994 ISBN: 0672305712 Unix System Security Essentials Author: Christopher Braun Publisher: Addison-Wesley Copyright Date: 1995 ISBN: 0201427753 Maximum Linux Security: A Hacker's Guide to Protecting Your Linux Server and Workstation Author: n/a Publisher: Sams Copyright Date: 1999 ISBN: 0672316706LAN Security
Network Security Secrets Authors: David J. Stang and Sylvia Moon Publisher: IDG Books Copyright Date: 1993 ISBN: 1568840217 Complete Lan Security and Control Author: Peter Davis Publisher: Windcrest/McGraw-Hill Copyright Date: 1994 ISBN: 0830645489 /0830645497 Network Security Authors: Steven Shaffer and Alan Simon Publisher: AP Professional Copyright Date: 1994 ISBN: 0126380104 Network Security: How to Plan For It and How to Achieve It Author: Richard M. Baker Publisher: McGraw-Hill, Inc Copyright Date: ???? ISBN: 0070051410 Network Security: Private Communications in a Public World Authors: Charlie Kaufman, Radia Perlman and Mike Speciner Publisher: Prentice-Hall Copyright Date: 1995 ISBN: 0130614661 Network and Internetwork Security: Principles and Practice Author: William Stallings Publisher: Prentice-Hall Copyright Date: 1995 ISBN: 0024154830 Network Intrusion Detection: An Analysis Handbook Author: Stephen Northcutt Publisher: New Riders Publishing Copyright Date: 1999 ISBN: 0735708681 Mastering Network Security Author: Chris Brenton Publisher: Sybex Inc Copyright Date: 1998 ISBN: 0782123430Windows and NT Security
Configuring Windows 2000 Server Security Editor: Stace Cunningham Publisher: Syngress Media Inc; Copyright Date: 1999 ISBN: 1928994024 "PC Week" Implementing Windows NT Security Author: Steve Sutton Publisher: Macmillan Computer Publishing Copyright Date: 1997 ISBN: 1562764578Firewalls
Building Internet Firewalls Authors: D. Brent Chapman and Elizabeth D. Zwicky Publisher: O'Reilly and Associates, Inc. Copyright Date: 1995 ISBN: 1565921240 Internet Firewalls and Network Security Authors: Karanjit S. Siyan and Chris Hare Publisher: New Riders Publishing Copyright Date: 1995 ISBN: 1562054376 Firewalls and Internet Security Authors: William Cheswick and Steven Bellovin Publisher: Addison-Wesley Copyright Date: 1994 ISBN: 0201633574Viruses
The Little Black Book of Computer Viruses Author: Mark Ludwig Publisher: American Eagle Publications Copyright Date: 1990 ISBN: 0929408020 The Giant Black Book of Computer Viruses Author: Mark Ludwig Publisher: American Eagle Publications Copyright Date: 1995 ISBN: ???? Computer Viruses, Artificial Life and Evolution Author: Mark Ludwig Publisher: American Eagle Publications Copyright Date: 1993 ISBN: 0929408071 Computer Viruses, Worms, Data Diddlers, Killer Programs, and Other Threats to Your System Authors: John McAfee and Colin Haynes Publisher: St Martin's Press Copyright Date: 1989 ISBN: 0312030649/031202889X The Virus Creation Labs: A Journey Into the Underground Author: George Smith Publisher: American Eagle Publications Copyright Date: 1994 ISBN: 0929408098 A Short Course on Computer Viruses Author: Dr Fred Cohen Publisher: John Wiley & Sons Copyright Date: 1994 ISBN: 0471007692 Robert Slade's Guide to Computer Viruses Author: Robert Slade Publisher: Springer Verlag Copyright Date: 1994 ISBN: 0387943110/3540943110
