也许可以看看 Joseph Kong 的书？《Designing BSD Rootkits》https://nostarch.com/rootkits.htm 《FreeBSD Device Drivers》https://nostarch.com/bsddrivers.htm 以及《Playing Games With Kernel Memory ... FreeBSD Style》http://phrack.org/issues/63/7.html#article
Maybe Joseph Kong's books? Designing BSD Rootkits https://nostarch.com/rootkits.htm FreeBSD Device Drivers https://nostarch.com/bsddrivers.htm Playing Games With Kernel Memory ... FreeBSD Style http://phrack.org/issues/63/7.html#article
……http://poppopret.org/2013/01/07/suterusu-rootkit-inline-kern... 另一方面，如果你在找一本从零开始理解 LKM 以及它如何应用于 rootkit 的指南，我强烈推荐 Joseph Kong 的神作《Designing BSD Rootkits》。虽然它是针对 FreeBSD 且是 2007 年的老书，但在我印象中它一点也没过时：http://www.nostarch.com/rootkits.htm
…http://poppopret.org/2013/01/07/suterusu-rootkit-inline-kern... On the other hand, if you're looking for a guide on understanding LKMs from the ground up and how they can apply to rootkits, I strongly recommend Joseph Kong's excellent book Designing BSD Rootkits. It's FreeBSD-specific and dates to 2007, but it's not still outdated AFAIR: http://www.nostarch.com/rootkits.htm
确实是“Linux”……我敢肯定《Absolute OpenBSD》、《The Book of PF》和《Designing BSD Rootkits》都很棒。有点想把这个 bundle 买了，好去读读《FreeBSD Device Drivers》、《The Book of GIMP》、《Absolute FreeBSD》和《The Book of Inkscape》。
“Linux” indeed… I know for a fact that Absolute OpenBSD, The Book of PF, and Designing BSD Rootkits are great. Tempted to pick up the bundle to read FreeBSD Device Drivers, The Book of GIMP, Absolute FreeBSD, and The Book of Inkscape.
……你想要的，请先借阅图书馆的藏书，直到你确定自己需要拥有一本。我们不是要求大家都去共用一本 IDA Pro 的书，但我们也不想买10本《Designing BSD Rootkits》。### 离谱书籍 请不要用这项福利去买标价1000美元的 Knuth 亲笔签名初版收藏书，或者说，去买那些专业书籍……
…you want, please use the library copy until you're sure you need to own your own copy. We are not asking everyone to share a single copy of the IDA Pro book, but we also don't want to buy 10 copies of "Designing BSD Rootkits". ### Crazy Ridiculous Books Please do not use this benefit to try to acquire collector copies of first-edition signed Knuth prints that cost $1000, or, for that matter, to acquire professional books…
……汇编的话，我推荐 No Starch 出版的《Reversing: The Art of Reverse Engineering》和《The art of exploitation》（No Starch 还出版了另外两本广受好评但绝非我最喜欢的书——《Designing BSD Rootkits》和《Art of Assembly》）。祝好运！
…assembly, I'd recommend 'Reversing: The Art of Reverse Engineering' and 'The art of exploitation' both published by No Starch (Which also publishes two highly recommended, but certainly not my favorite - "Designing BSD Rootkits" and "Art of Assembly"). Best of luck!
也许可以看看 Joseph Kong 的书？《Designing BSD Rootkits》https://nostarch.com/rootkits.htm 《FreeBSD Device Drivers》https://nostarch.com/bsddrivers.htm 以及《Playing Games With Kernel Memory ... FreeBSD Style》http://phrack.org/issues/63/7.html#article
Maybe Joseph Kong's books? Designing BSD Rootkits https://nostarch.com/rootkits.htm FreeBSD Device Drivers https://nostarch.com/bsddrivers.htm Playing Games With Kernel Memory ... FreeBSD Style http://phrack.org/issues/63/7.html#article
……http://poppopret.org/2013/01/07/suterusu-rootkit-inline-kern... 另一方面，如果你在找一本从零开始理解 LKM 以及它如何应用于 rootkit 的指南，我强烈推荐 Joseph Kong 的神作《Designing BSD Rootkits》。虽然它是针对 FreeBSD 且是 2007 年的老书，但在我印象中它一点也没过时：http://www.nostarch.com/rootkits.htm
…http://poppopret.org/2013/01/07/suterusu-rootkit-inline-kern... On the other hand, if you're looking for a guide on understanding LKMs from the ground up and how they can apply to rootkits, I strongly recommend Joseph Kong's excellent book Designing BSD Rootkits. It's FreeBSD-specific and dates to 2007, but it's not still outdated AFAIR: http://www.nostarch.com/rootkits.htm
确实是“Linux”……我敢肯定《Absolute OpenBSD》、《The Book of PF》和《Designing BSD Rootkits》都很棒。有点想把这个 bundle 买了，好去读读《FreeBSD Device Drivers》、《The Book of GIMP》、《Absolute FreeBSD》和《The Book of Inkscape》。
“Linux” indeed… I know for a fact that Absolute OpenBSD, The Book of PF, and Designing BSD Rootkits are great. Tempted to pick up the bundle to read FreeBSD Device Drivers, The Book of GIMP, Absolute FreeBSD, and The Book of Inkscape.
……你想要的，请先借阅图书馆的藏书，直到你确定自己需要拥有一本。我们不是要求大家都去共用一本 IDA Pro 的书，但我们也不想买10本《Designing BSD Rootkits》。### 离谱书籍 请不要用这项福利去买标价1000美元的 Knuth 亲笔签名初版收藏书，或者说，去买那些专业书籍……
…you want, please use the library copy until you're sure you need to own your own copy. We are not asking everyone to share a single copy of the IDA Pro book, but we also don't want to buy 10 copies of "Designing BSD Rootkits". ### Crazy Ridiculous Books Please do not use this benefit to try to acquire collector copies of first-edition signed Knuth prints that cost $1000, or, for that matter, to acquire professional books…
甚至还有一本专门讲设计 FreeBSD rootkit 的书：http://www.amazon.com/Designing-BSD-Rootkits-Introduction-Ha...
There is even a book about designing FreeBSD rootkits: http://www.amazon.com/Designing-BSD-Rootkits-Introduction-Ha...
……汇编的话，我推荐 No Starch 出版的《Reversing: The Art of Reverse Engineering》和《The art of exploitation》（No Starch 还出版了另外两本广受好评但绝非我最喜欢的书——《Designing BSD Rootkits》和《Art of Assembly》）。祝好运！
…assembly, I'd recommend 'Reversing: The Art of Reverse Engineering' and 'The art of exploitation' both published by No Starch (Which also publishes two highly recommended, but certainly not my favorite - "Designing BSD Rootkits" and "Art of Assembly"). Best of luck!