……关于社会工程看上面那些就行。4. 《Applied Cryptography》——《Cryptography Engineering》完全可以取代它，让它彻底过时了，毋庸置疑。_________________ 没列出来但你该考虑的书：1. 《Gray Hat Python》——教你写 debugger，这可是搞逆向工程和大部分黑盒安全分析的必经之路。2. 《The Art of Software Security Assessment》——书中……
…above for Social Engineering. 4. Applied Cryptography - Cryptography Engineering supersedes this and makes it obsolete, full stop. _________________ What's Not Listed That You Should Consider: 1. Gray Hat Python - In which you are taught to write debuggers, a skill which is a rite of passage for reverse engineering and much of blackbox security analysis. 2. The Art of Software Security Assessment - In which…
……在 HN 上更多。这些 bounty 拿得实至名归。对于想尝试赚这种赏金的人，我推荐的还是我常推的那几本书：1. 《The Art of Software Security Assessment》 2. 《Gray Hat Python》 3. 《The Web Application Hacker's Handbook》。这就是你的白帽黑客新手包。前两本很适合打基础，教你怎么找到值钱的 bug。第三本……
…more on HN. These bounties are well deserved. For those of you who would like to try and earn bounties like these, I recommend the same books I always do: 1. The Art of Software Security Assessment 2. Gray Hat Python 3. The Web Application Hacker's Handbook This is your ethical hacker starter kit. The first two are good for foundational knowledge and will show you how to find the bugs worth something. The third…
……软件。5. 《The Tangled Web》 极好的历史背景介绍，把很多信息安全话题做了不错的高层概览。每个工程师都该读读，哪怕不做安全。6. 《Gray Hat Python》 实践性极强，很好地介绍了逆向工程的方方面面，以及顶尖安全咨询公司里安全顾问的日常典型工作。7. 《Practical Malware Analysis》 非常棒的恶意软件入门……
…software. 5. The Tangled Web Excellent historical background and good high level overview of many information security topics. Every engineer should read this, even if they don't work in security. 6. Gray Hat Python Very hands on, good introduction to aspects of reverse engineering and the typical work an e.g. security consultant will do at a top firm. 7. Practical Malware Analysis Very good introduction to malware…
👆 证据 A：你一开始最想去试试水的那类公司之一 :) 他们可能也会发给你/你会想读的：- 《Gray Hat Python》（用 Python 做 debugging 和 fuzzing）- 《The Tangled Web》（Web 浏览器的安全与不安全机制）- 《The Art of Software Security Assessment》——堪称圣经，你真得好好读读，因为这是基础性的……
^^ Exhibit A: One of the firms you'd want to try your hand at working for first :) They might also send / you'd want to read: - Gray Hat Python (debugging and fuzzing with Python) - The Tangled Web (web browser security and insecurity) - The Art of Software Security Assessment - the bible, which you really want to read as it's a foundational…
我不是 tptacek，不过……这两本书我都稍微翻过，我觉得《Gray Hat Python》对进阶安全概念来说是本好书，特别是在逆向工程和 exploit dev 方面，但用来学 Python 或编程本身并不怎么样。《Violent Python》……
I'm not tptacek, but... After lightly reading through both books, I think Gray Hat Python is a great book for more advanced security concepts, especially on the reverse engineering and exploit dev side of things, but isn't a very good book for learning Python or programming. Violent Python…
……关于社会工程看上面那些就行。4. 《Applied Cryptography》——《Cryptography Engineering》完全可以取代它，让它彻底过时了，毋庸置疑。_________________ 没列出来但你该考虑的书：1. 《Gray Hat Python》——教你写 debugger，这可是搞逆向工程和大部分黑盒安全分析的必经之路。2. 《The Art of Software Security Assessment》——书中……
…above for Social Engineering. 4. Applied Cryptography - Cryptography Engineering supersedes this and makes it obsolete, full stop. _________________ What's Not Listed That You Should Consider: 1. Gray Hat Python - In which you are taught to write debuggers, a skill which is a rite of passage for reverse engineering and much of blackbox security analysis. 2. The Art of Software Security Assessment - In which…
……在 HN 上更多。这些 bounty 拿得实至名归。对于想尝试赚这种赏金的人，我推荐的还是我常推的那几本书：1. 《The Art of Software Security Assessment》 2. 《Gray Hat Python》 3. 《The Web Application Hacker's Handbook》。这就是你的白帽黑客新手包。前两本很适合打基础，教你怎么找到值钱的 bug。第三本……
…more on HN. These bounties are well deserved. For those of you who would like to try and earn bounties like these, I recommend the same books I always do: 1. The Art of Software Security Assessment 2. Gray Hat Python 3. The Web Application Hacker's Handbook This is your ethical hacker starter kit. The first two are good for foundational knowledge and will show you how to find the bugs worth something. The third…
……软件。5. 《The Tangled Web》 极好的历史背景介绍，把很多信息安全话题做了不错的高层概览。每个工程师都该读读，哪怕不做安全。6. 《Gray Hat Python》 实践性极强，很好地介绍了逆向工程的方方面面，以及顶尖安全咨询公司里安全顾问的日常典型工作。7. 《Practical Malware Analysis》 非常棒的恶意软件入门……
…software. 5. The Tangled Web Excellent historical background and good high level overview of many information security topics. Every engineer should read this, even if they don't work in security. 6. Gray Hat Python Very hands on, good introduction to aspects of reverse engineering and the typical work an e.g. security consultant will do at a top firm. 7. Practical Malware Analysis Very good introduction to malware…
《Gray Hat Python》挺不错的：http://www.amazon.com/Gray-Hat-Python-Programming-Engineers/...
Gray Hat Python is not bad: http://www.amazon.com/Gray-Hat-Python-Programming-Engineers/...
👆 证据 A：你一开始最想去试试水的那类公司之一 :) 他们可能也会发给你/你会想读的：- 《Gray Hat Python》（用 Python 做 debugging 和 fuzzing）- 《The Tangled Web》（Web 浏览器的安全与不安全机制）- 《The Art of Software Security Assessment》——堪称圣经，你真得好好读读，因为这是基础性的……
^^ Exhibit A: One of the firms you'd want to try your hand at working for first :) They might also send / you'd want to read: - Gray Hat Python (debugging and fuzzing with Python) - The Tangled Web (web browser security and insecurity) - The Art of Software Security Assessment - the bible, which you really want to read as it's a foundational…
我不是 tptacek，不过……这两本书我都稍微翻过，我觉得《Gray Hat Python》对进阶安全概念来说是本好书，特别是在逆向工程和 exploit dev 方面，但用来学 Python 或编程本身并不怎么样。《Violent Python》……
I'm not tptacek, but... After lightly reading through both books, I think Gray Hat Python is a great book for more advanced security concepts, especially on the reverse engineering and exploit dev side of things, but isn't a very good book for learning Python or programming. Violent Python…