Attacking Network Protocols

Attacking Network Protocols
A Hacker's Guide to Capture, Analysis, and Exploitation
James Forshaw
November 2017, 336 pp.

Order now and get early access to the PDF ebook!
(What's Early Access?)
(Which chapters are available now?)

Get 30% off with the coupon code EARLYBIRD

Attacking Network Protocols is a deep-dive into network vulnerability discovery from James Forshaw, Microsoft’s top bug hunter. This comprehensive guide looks at networking from an attacker’s perspective to help you find, exploit, and ultimately protect vulnerabilities.

Part I starts with a rundown of networking basics and traffic capture, as it builds a foundation for analyzing a network. Part II moves on to protocol analysis, both static and dynamic; you’ll learn about common protocol structures, cryptography, and protocol security, and how to reverse engineer code with IDA Pro, ILSpy, and Javasnoop. Part III focuses on finding and exploiting vulnerabilities, including an overview of common bug classes, fuzzing, debugging, exhaustion attacks, and how to develop custom tools. Forshaw ends with an overview of the best tools for analyzing and exploiting networks. By the book’s end, you’ll have a deep understanding of how to analyze network communication and where to look for vulnerabilities. You’ll learn how to:

  • Capture, manipulate, and spoof packets both passively and on the wire
  • Reverse engineer code, brute force passwords, and decrypt traffic
  • Exploit vulnerabilities with denial-of-service attacks, authentication and authorization bypasses, and memory corruptions
  • Use capture and analysis tools like IDA Pro, Wireshark, and CANAPE
  • Strengthen your exploits by rerouting network traffic, exploiting compression, and controlling data flow

Attacking Network Protocols is a must-have for any penetration tester, bug hunter, or developer looking to exploit and secure network vulnerabilities.

Author Bio 

James Forshaw is a freelancing debugging cowboy with ten years of experience in the security field, from cracking game consoles to exposing a $100,000 exploit for Microsoft. He’s the creator of the protocol capture tool, CANAPE, and gives talks at hacker conferences like Black Hat and Chaos Computer Congress.

Table of contents 

Chapter 1: The Basics of Networking
Chapter 2: Capturing Application Traffic (AVAILABLE NOW)
Chapter 3: Network Protocol Structures (AVAILABLE NOW)
Chapter 4: Advanced Application Traffic Capture (AVAILABLE NOW)
Chapter 5: Analysis from the Wire (AVAILABLE NOW)
Chapter 6: Application Reverse Engineering (AVAILABLE NOW)
Chapter 7: Network Protocol Security (AVAILABLE NOW)
Chapter 8: Implementing the Network Protocol (AVAILABLE NOW)
Chapter 9: The Root Causes of Vulnerabilities (AVAILABLE NOW)
Chapter 10: Finding and Exploiting Security Vulnerabilities (AVAILABLE NOW)
Appendix: Network Protocol Analysis Toolkit (AVAILABLE NOW)