Penetration Testing mailing list archives

Re: Penetration Testing Literature


From: Sebastian Schlag <schlag.sebastian () googlemail com>
Date: Mon, 12 Oct 2009 20:39:29 +0200

Hi everyone,

thank you for your answers!

@ Chad Boyd: Thanks for the recommendation of "A Gift of Fire" - I'll add this one to my literature list.

@ Sekhar Vedantam: I read this guide together with "The Web Application Hacker's Handbook" and "How to Break Web Software" while researching some basics on how to test web applications and it was pretty useful.

@redmond1980: I've heard from quite a few people now, that Kraft's book is a bit outdated. I'll give it a try and otherwise start with Ruef's book.

Best regards
Sebastian

Sebastian Schlag wrote:
Hi,
i'm a student of Applied Computer Science and currently preparing for a student research project on "Systematic Penetration Testing".
Right now i'm searching for literature.

Currently i plan to read the following books:

- Marc Ruef  - Die Kunst des Penetration Testing
- Thomas Wilhelm - Professional Penetration Testing: Creating and Operating a Formal Hacking Lab - Peter B. Kraft - Network Hacking: Professionelle Angriffs- und Verteidigungstechniken
- Chris Hurley - Penetration Tester's Open Source Toolkit, Second Edition

What do you think? What books would you recommend to read?

Best Regards
Sebastian


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------


Current thread: