几年前我在读《社会工程：安全防范的艺术》（Social Engineering: The Art of Human Hacking）[0]，看到比起在我不被允许访问的电脑上去破解 AES256 加密数值，诱导用户直接交出数据居然这么容易，真是太有意思了…
I was reading Social Engineering: The Art of Human Hacking [0] a few years ago and it was really fascinating to see how easy it is to get the user to give us data versus unlocking an AES256 encrypted value on a computer I'm not allowed…
I just want to point you out to a book. It is a good read, I promise. http://www.amazon.com/Social-Engineering-The-Human-Hacking/d... It looks like you genuinely believe that two people talking face to face would not be subjected to exploitation. The book exactly talks about how exploitation in this context…
This Is How They Tell Me the World Ends: The Cyberweapons Arms Race https://www.amazon.com/dp/1635576059/ Social Engineering: The Science of Human Hacking https://www.amazon.com/dp/111943338X/ PTFM: Purple Team Field Manual https://www.amazon.com/dp/B08LJV1QCD/ I issue these to all new cyber hires in a senior infosec role.…
…Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read. Also, one of the few that can't go out of date. ... This should be enough to get you started. There's a couple…
…斯图尔特·麦克卢尔（Stuart McClure）的《倒计时到零日》（Countdown to Zero Day），作者金·泽特（Kim Zetter）；凯文·米特尼克（Kevin Mitnick）的《线上幽灵》（Ghost in the Wires）；布莱恩·克雷布斯（Brian Krebs）的《垃圾邮件之国》（Spam Nation）；迈克尔·西科斯基（Michael Sikorski）的《实用恶意代码分析》；亚当·肖斯塔克（Adam Shostack）的《威胁建模》；克里斯托弗·哈德纳吉的《社会工程》；彼得·金（Peter Kim）的《黑客秘笈3》；理查德·贝特利希（Richard Bejtlich）的《网络安全监控实践》；弗雷德·卡普兰（Fred Kaplan）的《黑暗领域》；西蒙·辛格（Simon Singh）的《码书》；《再次被黑》（Hacked Again）…
…Stuart McClure Countdown to Zero Day by Kim Zetter Ghost in the Wires by Kevin Mitnick Spam Nation by Brian Krebs Practical Malware Analysis by Michael Sikorski Threat Modeling by Adam Shostack Social Engineering by Christopher Hadnagy The Hacker Playbook 3 by Peter Kim The Practice of Network Security Monitoring by Richard Bejtlich Dark Territory by Fred Kaplan The Code Book by Simon Singh Hacked Again…
几年前我在读《社会工程：安全防范的艺术》（Social Engineering: The Art of Human Hacking）[0]，看到比起在我不被允许访问的电脑上去破解 AES256 加密数值，诱导用户直接交出数据居然这么容易，真是太有意思了…
I was reading Social Engineering: The Art of Human Hacking [0] a few years ago and it was really fascinating to see how easy it is to get the user to give us data versus unlocking an AES256 encrypted value on a computer I'm not allowed…
我只是想给你推荐一本书。我保证，读起来很不错。http://www.amazon.com/Social-Engineering-The-Human-Hacking/d... 看来你真的深信两个人面对面交谈就不会被人下套利用。这本书讲的恰恰就是这种场景下的利用…
I just want to point you out to a book. It is a good read, I promise. http://www.amazon.com/Social-Engineering-The-Human-Hacking/d... It looks like you genuinely believe that two people talking face to face would not be subjected to exploitation. The book exactly talks about how exploitation in this context…
《这就是他们如何告诉我世界末日的：网络武器军备竞赛》https://www.amazon.com/dp/1635576059/ 《社会工程：人类黑客的科学》https://www.amazon.com/dp/111943338X/ PTFM: 紫队实战手册 https://www.amazon.com/dp/B08LJV1QCD/ 我们团队只要招进做高级 infosec 角色的网络安全新人，我都会给他们发这几本。…
This Is How They Tell Me the World Ends: The Cyberweapons Arms Race https://www.amazon.com/dp/1635576059/ Social Engineering: The Science of Human Hacking https://www.amazon.com/dp/111943338X/ PTFM: Purple Team Field Manual https://www.amazon.com/dp/B08LJV1QCD/ I issue these to all new cyber hires in a senior infosec role.…
哈德纳吉（Hadnagy）写的《社会工程：安全防范的艺术》。
"Social Engineering: The Art of Human Hacking" by Hadnagy.
…彼得·亚沃斯基（Peter Yaworski）写的《Web漏洞挖掘》（Web Hacking 101）。Web 安全入门，读着不错也挺实用。* 威尔·奥尔索普（Wil Allsop）的《高级渗透测试》。有点过时，但很有意思，读完后你这辈子都不会再碰 Flash 了。* 克里斯托弗·哈德纳吉的《社会工程：人类黑客的科学》。这本书非常引人入胜，而且也是少数几本永远不会过时的书之一。……这些应该足够你起步了。还有几本…
…Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read. Also, one of the few that can't go out of date. ... This should be enough to get you started. There's a couple…
…斯图尔特·麦克卢尔（Stuart McClure）的《倒计时到零日》（Countdown to Zero Day），作者金·泽特（Kim Zetter）；凯文·米特尼克（Kevin Mitnick）的《线上幽灵》（Ghost in the Wires）；布莱恩·克雷布斯（Brian Krebs）的《垃圾邮件之国》（Spam Nation）；迈克尔·西科斯基（Michael Sikorski）的《实用恶意代码分析》；亚当·肖斯塔克（Adam Shostack）的《威胁建模》；克里斯托弗·哈德纳吉的《社会工程》；彼得·金（Peter Kim）的《黑客秘笈3》；理查德·贝特利希（Richard Bejtlich）的《网络安全监控实践》；弗雷德·卡普兰（Fred Kaplan）的《黑暗领域》；西蒙·辛格（Simon Singh）的《码书》；《再次被黑》（Hacked Again）…
…Stuart McClure Countdown to Zero Day by Kim Zetter Ghost in the Wires by Kevin Mitnick Spam Nation by Brian Krebs Practical Malware Analysis by Michael Sikorski Threat Modeling by Adam Shostack Social Engineering by Christopher Hadnagy The Hacker Playbook 3 by Peter Kim The Practice of Network Security Monitoring by Richard Bejtlich Dark Territory by Fred Kaplan The Code Book by Simon Singh Hacked Again…