Chained Exploits
Advanced Hacking Attacks from Start to Finish
Upper Saddle River, NJ • Boston • Indianapolis • San Francisco
New York • Toronto • Montreal • London • Munich • Paris • Madrid
Cape Town • Sydney • Tokyo • Singapore • Mexico City
Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and the publisher was aware of a trademark claim, the designations have been printed with initial capital letters or in all capitals.
The authors and publisher have taken care in the preparation of this book, but make no expressed or implied warranty of any kind and assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in connection with or arising out of the use of the information or programs contained herein.
The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales, which may include electronic versions and/or custom covers and content particular to your business, training goals, marketing focus, and branding interests. For more information, please contact:
U.S. Corporate and Government Sales
(800) 382-3419
[email protected]
For sales outside the United States please contact:
International Sales
[email protected]
Visit us on the Web: www.informit.com/aw
Library of Congress Cataloging-in-Publication Data
Whitaker, Andrew.
Chained exploits : advanced hacking attacks from start to finish /
Andrew Whitaker, Keatron Evans, Jack B. Voth.
p. cm.
ISBN 978-0-321-49881-6 (pbk.)
1. Computer security. 2. Computer networks--Security measures. 3.
Computer hackers. I. Evans, Keatron. II. Voth, Jack B. III. Title.
QA76.9.A25W44 2009
005.8--dc22
2009002128
Copyright © 2009 Pearson Education, Inc.
All rights reserved. Printed in the United States of America. This publication is protected by copyright, and permission must be obtained from the publisher prior to any prohibited reproduction, storage in a retrieval system, or transmission in any form or by any means, electronic, mechanical, photocopying, recording, or likewise. For information regarding permissions, write to:
Pearson Education, Inc.
Rights and Contracts Department
501 Boylston Street, Suite 900
Boston, MA 02116
Fax (617) 671-3447
Text printed in the United States on recycled paper at RR Donnelley, Crawfordsville, Indiana.
First printing February 2009
Associate Publisher
David Dusthimer
Executive Editor
Brett Bartow
Development Editor
Andrew Cupp
Managing Editor
Patrick Kanouse
Project Editor
Mandie Frank
Copy Editor
Mike Henry
Indexer
Lisa Stumpf
Proofreader
Geneil Breeze
Technical Reviewers
Ralph Echemendia
Kevin Henry
Publishing Coordinator
Vanessa Evans
Interior Designer
Louisa Adair
Book Designer
Louisa Adair
Composition
Bronkella Publishing LLC
Dedicated to Training Camp and all of our students.
—Andrew
Dedicated to Sanaa, Kallejah, and Keke.
—Keatron
I would like to dedicate this book to my wife, Wendi, whose support through the years has made this possible. And to my son, who is serving in our military: See, anything is possible.
—Jack