فهرست مطالب

• About the Author
• Brief Contents
• Contents in Detail
• Foreword by Jacob Soo
• Foreword by Shubham Shah, aka "shubs"
• Introduction
• Chapter 0: Day Zero
• What Is a Vulnerability?
• What Is Zero-Day Vulnerability Research?
• Selecting a Vulnerability Research Target
• Summary
• Part I: Code Review
• Chapter 1: Taint Analysis
• A Buffer Overflow Example
• Sink-to-Source Analysis
• Summary
• Chapter 2: Mapping Code to Attack Surface
• The Internet
• Network Protocols
• Local Attack Surface
• File Formats
• Summary
• Chapter 3: Automated Variant Analysis
• Abstract Syntax Trees
• Static Code Analysis Tools
• Variant Analysis
• Summary
• Part II: Reverse Engineering
• Chapter 4: Binary Taxonomy
• Beyond Executable Binaries and Shared Libraries
• Scripts
• Intermediate Representations
• Machine Code
• Summary
• Chapter 5: Source and Sink Discovery
• Static Analysis
• Dynamic Analysis
• Evaluating Exploitability
• Summary
• Chapter 6: Hybrid Analysis in Reverse Engineering
• Code Coverage
• Emulation
• Symbolic Analysis
• Summary
• Part III: Fuzzing
• Chapter 7: Quick and Dirty Fuzzing
• Why Fuzzing Works
• Fuzzing Criteria and Approaches
• Black-Box Fuzzing with boofuzz
• Zero-Setup Mutation-Based Fuzzing with Radamsa
• Bootstrapped Fuzzing
• Summary
• Chapter 8: Coverage-Guided Fuzzing
• Advantages of Coverage-Guided Fuzzing
• Fuzzing with AFL++
• Fuzzing Optimizations
• Measuring Fuzzing Coverage with afl-cov
• Fuzz Introspector
• Summary
• Chapter 9: Fuzzing Everything
• Closed Source Binaries
• Managed Memory Binaries
• Syntactic and Semantic Targets
• Summary
• Chapter 10: Beyond Day Zero
• Coordinated Vulnerability Disclosure
• Securing Organizations with Vulnerability Research
• Summary
• Index