We don’t allow questions seeking recommendations for software libraries, tutorials, tools, books, or other off-site resources. You can edit the question so it can be answered with facts and citations.
Closed 8 years ago.
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
接受
或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
发布评论
评论(2)
我不知道有哪本书关注 Linux 的 rootkit。我认为通过阅读 phrack zine ,你会拥有更多的运气(并且可能有更好的材料),例如。有一本关于 BSD rootkit 的书,所以我想您可以将其中的想法改编为另一种(系统调用拦截、与 DR 挂钩等)。概念是一样的,只是实现方式不同,但是你可以在网上找到几个好的linux rootkit(suckit等)的源代码作为参考。在 prack 中甚至还有一个基于 DR 的 rootkit 的基本框架。
I don't know of any books that have a focus on rootkits for Linux. I think you'll have more luck (and probably better material) by reading the phrack zine instead, for example. There's a book about BSD rootkits so I guess you can adapt the ideas from one to the other (syscall interception, hooking with DRs, etc). The concepts are the same, just implementation differs, but you can find the source code for several good rootkits for linux online (suckit, etc) to use as reference. In phrack there's even a basic framework for a DR-based rootkit.
虽然它不专注于根工具包,但我发现了优秀的 Hacking Exposed 书籍提供了各种漏洞利用的大量详细信息。这是一本跨平台的书,还讨论了网络应用程序安全等问题。然而 Linux 的覆盖范围是相当合理的。
Although it doesn't focus on root kits I've found the excellent Hacking Exposed books give a lot of detail at various exploits. It's a multi-platform book and also looks at things like web-app security. However the Linux coverage is pretty reasonable.