Hacking
W kategorii Hacking zebrano publikacje dotyczące nie tylko hackerów, crackerów i ich technik działania, ale także opisujące różne aspekty bezpieczeństwa komputerów i danych na nich przechowywanych. Poznacie technikę przeprowadzania audytów bezpieczeństwa oraz sposoby zabezpieczania się przed atakami hackerów, programami szpiegującymi czy zwykłą plagą wirusów.
Nauczycie się chronić nie tylko poszczególne komputery ale całe sieci komputerowe przez opracowanie i wdrożenie odpowiedniej polityki bezpieczeństwa, poprawne użycie firewalli czy odpowiednie skonfigurowanie serwerów pracujących pod Waszym nadzorem, a także opanujecie sposoby bezpiecznego surfowania po internecie.
Paulino Calderon
This is the second edition of ‘Nmap 6: Network Exploration and Security Auditing Cookbook’. A book aimed for anyone who wants to master Nmap and its scripting engine through practical tasks for system administrators and penetration testers. Besides introducing the most powerful features of Nmap and related tools, common security auditing tasks for local and remote networks, web applications, databases, mail servers, Microsoft Windows machines and even ICS SCADA systems are explained step by step with exact commands and argument explanations. The book starts with the basic usage of Nmap and related tools like Ncat, Ncrack, Ndiff and Zenmap. The Nmap Scripting Engine is thoroughly covered through security checks used commonly in real-life scenarios applied for different types of systems. New chapters for Microsoft Windows and ICS SCADA systems were added and every recipe was revised. This edition reflects the latest updates and hottest additions to the Nmap project to date. The book will also introduce you to Lua programming and NSE script development allowing you to extend further the power of Nmap.
Paulino Calderon
Nmap is one of the most powerful tools for network discovery and security auditing used by millions of IT professionals, from system administrators to cybersecurity specialists. This third edition of the Nmap: Network Exploration and Security Auditing Cookbook introduces Nmap and its family - Ncat, Ncrack, Ndiff, Zenmap, and the Nmap Scripting Engine (NSE) - and guides you through numerous tasks that are relevant to security engineers in today’s technology ecosystems.The book discusses some of the most common and useful tasks for scanning hosts, networks, applications, mainframes, Unix and Windows environments, and ICS/SCADA systems. Advanced Nmap users can benefit from this book by exploring the hidden functionalities within Nmap and its scripts as well as advanced workflows and configurations to fine-tune their scans. Seasoned users will find new applications and third-party tools that can help them manage scans and even start developing their own NSE scripts. Practical examples featured in a cookbook format make this book perfect for quickly remembering Nmap options, scripts and arguments, and more.By the end of this Nmap book, you will be able to successfully scan numerous hosts, exploit vulnerable areas, and gather valuable information.
Paulino Calderon
Nmap is one of the most powerful tools for network discovery and security auditing used by millions of IT professionals, from system administrators to cybersecurity specialists. This third edition of the Nmap: Network Exploration and Security Auditing Cookbook introduces Nmap and its family - Ncat, Ncrack, Ndiff, Zenmap, and the Nmap Scripting Engine (NSE) - and guides you through numerous tasks that are relevant to security engineers in today’s technology ecosystems.The book discusses some of the most common and useful tasks for scanning hosts, networks, applications, mainframes, Unix and Windows environments, and ICS/SCADA systems. Advanced Nmap users can benefit from this book by exploring the hidden functionalities within Nmap and its scripts as well as advanced workflows and configurations to fine-tune their scans. Seasoned users will find new applications and third-party tools that can help them manage scans and even start developing their own NSE scripts. Practical examples featured in a cookbook format make this book perfect for quickly remembering Nmap options, scripts and arguments, and more.By the end of this Nmap book, you will be able to successfully scan numerous hosts, exploit vulnerable areas, and gather valuable information.
OAuth 2.0 Cookbook. Protect your web applications using Spring Security
Adolfo Eloy Nascimento
OAuth 2.0 is a standard protocol for authorization and focuses on client development simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and so on. This book also provides useful recipes for solving real-life problems using Spring Security and creating Android applications.The book starts by presenting you how to interact with some public OAuth 2.0 protected APIs such as Facebook, LinkedIn and Google. You will also be able to implement your own OAuth 2.0 provider with Spring Security OAuth2. Next, the book will cover practical scenarios regarding some important OAuth 2.0 profiles such as Dynamic Client Registration, Token Introspection and how to revoke issued access tokens. You will then be introduced to the usage of JWT, OpenID Connect, and how to safely implement native mobile OAuth 2.0 Clients.By the end of this book, you will be able to ensure that both the server and client are protected against common vulnerabilities.
Ocena bezpieczeństwa sieci wyd. 3
Chris McNab
Jak bezpieczna jest nasza sieć? Najlepszym sposobem znalezienia odpowiedzi na to pytanie jest zaatakowanie jej. Ocena bezpieczeństwa sieci pokazuje narzędzia i techniki, których używają profesjonalni analitycy zabezpieczeń do identyfikowania i oszacowania ryzyka w sieciach instytucji rządowych, wojskowych i komercyjnych. Dzięki wiedzy i umiejętnościom przedstawionym w książce można skutecznie tworzyć wzmocnione środowiska, które są odporne na próby nieautoryzowanego użycia i ataki. Autor, Chris McNab, pokazuje techniki, którymi zdeterminowani napastnicy tworzą mapy potencjalnego ataku i wykorzystują słabości zabezpieczeń, tak na poziomie sieci, jak i aplikacji. Trzecie wydanie jest całkowicie przebudowane, aby pogrupować i opisać najnowsze techniki hackerskie używane do atakowania sieci przedsiębiorstw. Dzięki skategoryzowaniu indywidualnych zagrożeń łatwiej będzie zastosować strategie obrony przed całymi klasami ataków, zapewniając skuteczną ochronę na dziś i na przyszłość. Testy i techniki badawcze omówione w książce są zgodne z międzynarodowymi standardami, w tym NIST SP 800-115, NSA IAM, CESG CHECK oraz PCI DSS.
Ochrona danych osobowych w służbach mundurowych
Janusz Becker
W książce omówiono zagadnienia dotyczące ochrony danych osobowych w różnych służbach mundurowych. Pozycja skierowana jest do wykładowców i studentów szkół wyższych o kierunku bezpieczeństwo wewnętrzne. Będzie również przydatna dla wszystkich osób zainteresowanych tematyką ochrony danych osobowych.
Ochrona informacji i systemów teleinformatycznych w cyberprzestrzeni
Jakub Kowalewski, Marian Kowalewski
W skrypcie omówiono zagrożenia informacji i systemów teleinformatycznych, takich jak oprogramowanie złośliwe, cyberprzestępstwa i cyberterroryzm. Zaprezentowano różnorodne metody ochrony informacji przed zagrożeniami w cyberprzestrzeni, dzieląc je na metody administracyjno-organizacyjne, prawne i normalizacyjne, techniczne oraz fizyczne. Omówiono systemy monitorowania i reagowania na zagrożenia w cyberprzestrzeni, działania edukacyjne w zakresie bezpieczeństwa informacji i systemów teleinformatycznych oraz podstawy prawne ich ochrony. Przytoczono także informacje dotyczące zarządzania bezpieczeństwem organizacji.
Mantavya Gajjar
Odoo is a Python-based ERP system and is completely open source. Odoo is a comprehensive suite of business applications offering a wealth of functionalities that can be deployed to meet your business needs.This book will help you manage the different functionalities of your business and optimize it. You will learn in detail about the various facets of the business process such as sales, accounting, purchases, manufacturing, and inventory. We will cover each of these topics in detail and learn how Odoo handles all these tasks with much ease. With its modular approach, you will be able to build customized solutions, take advantage of the Odoo 10 system in your organization, and master basic administration. We will cover modules and applications in Odoo that will help optimize quality checks. You will also be able to customize major reporting functions for your teams and set up forms and documents for sales, purchase, inventory, and so on. By the end of the book, you will be able to use the major functionalities of Odoo 10 and fully implement them into your business.
Dr. Ahmad MK Nasser, Dr. Dennis Kengo...
Offensive Automotive Cybersecurity is your practical guide to understanding how modern automotive vulnerabilities are exploited—so you can build resilient defenses against proven attack methods.As vehicles evolve into software-defined systems, their expanding attack surface increases exposure to sophisticated threats. This book examines the entire connected vehicle ecosystem—from cloud backends and wireless protocols to in-vehicle networks, HPCs, ECUs, and physical sensors—through an offensive security lens.Through a blend of theory and reviewing practical examples, you will learn to execute the full penetration testing lifecycle, encompassing active and passive reconnaissance, firmware reverse engineering, and the construction of complex attack chains. The book provides hands-on insights into exploiting memory corruption bugs in HPCs, abusing diagnostic protocols, and leveraging hardware-level vulnerabilities such as fault injection and side-channel leakage. These techniques are brought to life through detailed real-world case studies, including remote takeovers and exploits of well-known vehicle platforms.By the end of this book, you’ll be able to think like an adversary, uncover hidden risks before attackers do, apply secure-by-design principles, and implement layered defenses to reduce exploitable weaknesses.
Dr. Ahmad MK Nasser, Dr. Dennis Kengo...
Offensive Automotive Cybersecurity is your practical guide to understanding how modern automotive vulnerabilities are exploited—so you can build resilient defenses against proven attack methods.As vehicles evolve into software-defined systems, their expanding attack surface increases exposure to sophisticated threats. This book examines the entire connected vehicle ecosystem—from cloud backends and wireless protocols to in-vehicle networks, HPCs, ECUs, and physical sensors—through an offensive security lens.Through a blend of theory and reviewing practical examples, you will learn to execute the full penetration testing lifecycle, encompassing active and passive reconnaissance, firmware reverse engineering, and the construction of complex attack chains. The book provides hands-on insights into exploiting memory corruption bugs in HPCs, abusing diagnostic protocols, and leveraging hardware-level vulnerabilities such as fault injection and side-channel leakage. These techniques are brought to life through detailed real-world case studies, including remote takeovers and exploits of well-known vehicle platforms.By the end of this book, you’ll be able to think like an adversary, uncover hidden risks before attackers do, apply secure-by-design principles, and implement layered defenses to reduce exploitable weaknesses.
Dr. Ahmad MK Nasser, Dr. Dennis Kengo...
Offensive Automotive Cybersecurity is your practical guide to understanding how modern automotive vulnerabilities are exploited—so you can build resilient defenses against proven attack methods.As vehicles evolve into software-defined systems, their expanding attack surface increases exposure to sophisticated threats. This book examines the entire connected vehicle ecosystem—from cloud backends and wireless protocols to in-vehicle networks, HPCs, ECUs, and physical sensors—through an offensive security lens.Through a blend of theory and reviewing practical examples, you will learn to execute the full penetration testing lifecycle, encompassing active and passive reconnaissance, firmware reverse engineering, and the construction of complex attack chains. The book provides hands-on insights into exploiting memory corruption bugs in HPCs, abusing diagnostic protocols, and leveraging hardware-level vulnerabilities such as fault injection and side-channel leakage. These techniques are brought to life through detailed real-world case studies, including remote takeovers and exploits of well-known vehicle platforms.By the end of this book, you’ll be able to think like an adversary, uncover hidden risks before attackers do, apply secure-by-design principles, and implement layered defenses to reduce exploitable weaknesses.
Dr. Ahmad MK Nasser, Dr. Dennis Kengo...
Offensive Automotive Cybersecurity is your practical guide to understanding how modern automotive vulnerabilities are exploited—so you can build resilient defenses against proven attack methods.As vehicles evolve into software-defined systems, their expanding attack surface increases exposure to sophisticated threats. This book examines the entire connected vehicle ecosystem—from cloud backends and wireless protocols to in-vehicle networks, HPCs, ECUs, and physical sensors—through an offensive security lens.Through a blend of theory and reviewing practical examples, you will learn to execute the full penetration testing lifecycle, encompassing active and passive reconnaissance, firmware reverse engineering, and the construction of complex attack chains. The book provides hands-on insights into exploiting memory corruption bugs in HPCs, abusing diagnostic protocols, and leveraging hardware-level vulnerabilities such as fault injection and side-channel leakage. These techniques are brought to life through detailed real-world case studies, including remote takeovers and exploits of well-known vehicle platforms.By the end of this book, you’ll be able to think like an adversary, uncover hidden risks before attackers do, apply secure-by-design principles, and implement layered defenses to reduce exploitable weaknesses.