امن افزار رایکا

فهرست مطالب SEC504 Workbook – Hacker Tools, Techniques, Exploits, and Incident Handling:

Step 4: Keeping Access

Application-Level Trojan Horse Suites

Virtual Network Computing Overview

Common Remote Control Backdoor Capabilities

Wrappers and Packers

Memory Analysis

LAB 5.1:Windows Analysis with Rekall

Rootkit Techniques

Kernel-Mode RootkitTechniques

Rootkit Examples

LAB 5.2: Fun with Rootkits

Covering Tracks In Linux Ln and UNIX

Hiding Files in UNIX

UNIX Log Editing Ed

nting E Editing

LAB 5.3: Shell HistoryAnalysis

Covering Tracks in Windows

Hiding Filles in NTFS

Alternate Data Streams in NTFS

LAB 5.4: Alternate Data Streams

Log Editing

LAB 5.5: Windows Log Editing

Covering Tracks on the Network

Reverse HTTP Shells

ICMP Tunnels

Covert_TCP

LAB 5.6: Covert Channels

Steganography

Hydan

Putting It All Together

Conclusions and References

فهرست مطالب کتاب SQL Injection Attacks and Defense:

Chapter 1. What Is SQL Injection?

Chapter 2. Testing for SQL Injection

Chapter 3. Reviewing Code for SQL Injection

Chapter 4. Exploiting SQL injection

Chapter 5. Blind SQL Injection Exploitation

Chapter 6. Exploiting the operating system

Chapter 7. Advanced topics

Chapter 8. Code-level defenses

Chapter 9. Platform level defenses

Chapter 10. Confirming and Recovering from SQL Injection Attacks

Chapter 11. References

فهرست مطالب کتاب SQL Notes For Professionals:

Getting started with SQL

Identifier

Data Types

NULL

Example Databases and Tables

SELECT

GROUP BY

ORDER BY

AND & OR Operators

CASE

LIKE operator

IN clause

Filter results using WHERE and HAVING

SKIP TAKE (Pagination)

EXCEPT

EXPLAIN and DESCRIBE

EXISTS CLAUSE

JOIN

UPDATE

CREATE Database

CREATE TABLE

CREATE FUNCTION

TRY/CATCH

UNION / UNION ALL

ALTER TABLE

INSERT

MERGE

cross apply, outer apply

DELETE

TRUNCATE

DROP Table

DROP or DELETE Database

Cascading Delete

GRANT and REVOKE

XML

Primary Keys

Indexes

Row number

SQL Group By vs Distinct

Finding Duplicates on a Column Subset with Detail

String Functions

Functions (Aggregate)

Functions (Scalar/Single Row)

Functions (Analytic)

Window Functions

Common Table Expressions

Views

Materialized Views

Comments

Foreign Keys

Sequence

Subqueries

Execution blocks

Stored Procedures

Triggers

Transactions

Table Design

Synonyms

Information Schema

Order of Execution

Clean Code in SQL

SQL Injection

فهرست مطالب کتاب Summary of Start With Why:

PART 1: A WORLD THAT DOESN’T START WITH WHY

PART 2: AN ALTERNATIVE PERSPECTIVE

PART 3: LEADERS NEED A FOLLOWING

PART 4: HOW TO RALLY THOSE WHO BELIEVE

PART 5: THE BIGGEST CHALLENGE IS SUCCESS

PART 6: DISCOVER WHY

فهرست مطالب کتاب Testing Web Security: Assessing the Security of Web Sites and Applications:

Part I – An Introduction to the Book

Chapter 1 – Introduction

Part II – Planning the Testing Effort

Chapter 2 – Test Planning

Part III – Test Design

Chapter 3 – Network Security

Chapter 4 – System Software Security

Chapter 5 – Client-Side Application Security

Chapter 6 – Server-Side Application Security

Chapter 7 – Sneak Attacks: Guarding Against the LessThought-of Security Threats

Chapter 8 – Intruder Confusion, Detection, and Response

Part IV – Test Implementation

Chapter 9 – Assessment and Penetration Options

Chapter 10 – Risk Analysis Epilogue

Part V – Appendixes

Appendix A – An Overview of Network Protocols, Addresses, and Devices

Appendix B – SANS Institute Top 20 Critical Internet Security Vulnerabilities

Appendix C – Test-Deliverable Templates Additional Resources

Index