[转帖]IDA Pro Book, 2nd Edition-安全工具-看雪-安全社区|安全招聘|kanxue.com

[转帖]IDA Pro Book, 2nd Edition

发表于: 2011-8-3 23:25 4106

[转帖]IDA Pro Book, 2nd Edition

linhanshi

2011-8-3 23:25

4106

IDA Pro Book, 2nd Edition

The Unofficial Guide to the World's Most Popular Disassembler
by Chris Eagle

July 2011, 672 pp.
ISBN: 978-1-59327-289-0

No source code? No problem. With IDA Pro, the interactive disassembler, you live in a source code-optional world. IDA can automatically analyze the millions of opcodes that make up an executable and present you with a disassembly. But at that point, your work is just beginning. With The IDA Pro Book, you'll learn how to turn that mountain of mnemonics into something you can actually use.

Hailed by the creator of IDA Pro as "profound, comprehensive, and accurate," the second edition of The IDA Pro Book covers everything from the very first steps to advanced automation techniques. You'll find complete coverage of IDA's new Qt-based user interface, as well as increased coverage of the IDA debugger, the Bochs debugger, and IDA scripting (especially using IDAPython). But because humans are still smarter than computers, you'll even learn how to use IDA's latest interactive and scriptable interfaces to your advantage.

Save time and effort as you learn to:
Navigate, comment, and modify disassembly
Identify known library routines, so you can focus your analysis on other areas of the code
Use code graphing to quickly make sense of cross references and function calls
Extend IDA to support new processors and filetypes using the SDK
Explore popular plug-ins that make writing IDA scripts easier, allow collaborative reverse engineering, and much more
Use IDA's built-in debugger to tackle hostile and obfuscated code

Whether you're analyzing malware, conducting vulnerability research, or reverse engineering software, a mastery of IDA is crucial to your success. Take your skills to the next level with this 2nd edition of The IDA Pro Book.

About the Author

Chris Eagle is a Senior Lecturer of Computer Science at the Naval Postgraduate School in Monterey, CA. He is the author of many IDA plug-ins and co-author of Gray Hat Hacking, and he has spoken at numerous security conferences, including Black Hat, Defcon, ToorCon, and ShmooCon.

Table of Contents

Acknowledgments
Introduction

PART I: Introduction to IDA
Chapter 1: Introduction to Disassembly
Chapter 2: Reversing and Disassembly Tools
Chapter 3: IDA Pro Background

PART II: Basic IDA Usage
Chapter 4: Getting Started with IDA
Chapter 5: IDA Data Displays
Chapter 6: Disassembly Navigation
Chapter 7: Disassembly Manipulation
Chapter 8: Datatypes and Data Structures
Chapter 9: Cross-References and Graphing
Chapter 10: The Many Faces of IDA

PART III: Advanced IDA Usage
Chapter 11: Customizing IDA
Chapter 12: Library Recognition Using FLIRT Signatures
Chapter 13: Extending IDA's Knowledge
Chapter 14: Patching Binaries and Other IDA Limitations

PART IV: Extending IDA's Capabilities
Chapter 15: IDA Scripting
Chapter 16: The IDA Software Development Kit
Chapter 17: The IDA Plug-in Architecture
Chapter 18: Binary Files and IDA Loader Modules
Chapter 19: IDA Processor Modules

PART V: Real-World Applications
Chapter 20: Compiler Personalities
Chapter 21: Obfuscated Code Analysis
Chapter 22: Vulnerability Analysis
Chapter 23: Real-World IDA Plug-ins

PART VI: The IDA Debugger
Chapter 24: The IDA Debugger
Chapter 25: Disassembler/Debugger Integration
Chapter 26: Additional Debugger Features

Appendix A: Using IDA Freeware 5.0
Appendix B: IDC/SDK Cross-Reference
Index

View the detailed Table of Contents (PDF)

View the Index (PDF)
(top)

http://nostarch.com/idapro2.htm

http://www.nostarch.com/download/idapro2_ch24.pdf

沒有下載的

Welcome forum.forum is a home.

Please respect the copyright from the Internet.
Пожалуйста, уважайте авторское право в Интернете.
來源于互聯網, 請尊重版權.
所發資源全部來自對互聯網公共資源的收集和整理,僅供學習之用,請于下載后24小時自行刪除!
Issued by all the resources of public resources from the Internet to collect and collate, study purposes only,
please delete themselves 24 hours after downloading!
Выпущено всеми ресурсами государственных ресурсов из Интернет
а на сбор и обобщение, изучение целей, пожалуйста, удалите себя
24 часов после скачивания!
You can Google.

Программное обеспечение выпуска и Windows Crack Обучение
Нам-Dabei Guanyin Бодхисаттва Нам без митабха

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课

#[other]

上传的附件：

idaPro2e_frontcvr.png （51.21kb，262次下载）

收藏・0

免费・1

支持

最新回复 (9)
linhanshi 雪币： 97697 活跃值： (200834) 能力值： (RANK：10 ) 在线值：发帖 9249 回帖 27947 粉丝 453 关注私信	linhanshi 2 楼第24章 Chapter 24: The IDA Debugger idapro2_ch24.rar Welcome forum.forum is a home. Please respect the copyright from the Internet. Пожалуйста, уважайте авторское право в Интернете. 來源于互聯網, 請尊重版權. 所發資源全部來自對互聯網公共資源的收集和整理,僅供學習之用,請于下載后24小時自行刪除! Issued by all the resources of public resources from the Internet to collect and collate, study purposes only, please delete themselves 24 hours after downloading! Выпущено всеми ресурсами государственных ресурсов из Интернет а на сбор и обобщение, изучение целей, пожалуйста, удалите себя 24 часов после скачивания! You can Google. Программное обеспечение выпуска и Windows Crack Обучение Нам-Dabei Guanyin Бодхисаттва Нам без митабха 上传的附件： idapro2_ch24.rar （1.79MB，41次下载） 2011-8-3 23:29 0
风谣雪币： 123 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 4 回帖 81 粉丝 0 关注私信	风谣 3 楼谢谢分享、、就是俺英文比较搓、、、不知道能完全看懂不？ 2011-8-3 23:47 0
linhanshi 雪币： 97697 活跃值： (200834) 能力值： (RANK：10 ) 在线值：发帖 9249 回帖 27947 粉丝 453 关注私信	linhanshi 4 楼第二版沒有下載的 Welcome forum.forum is a home. Please respect the copyright from the Internet. Пожалуйста, уважайте авторское право в Интернете. 來源于互聯網, 請尊重版權. 所發資源全部來自對互聯網公共資源的收集和整理,僅供學習之用,請于下載后24小時自行刪除! Issued by all the resources of public resources from the Internet to collect and collate, study purposes only, please delete themselves 24 hours after downloading! Выпущено всеми ресурсами государственных ресурсов из Интернет а на сбор и обобщение, изучение целей, пожалуйста, удалите себя 24 часов после скачивания! You can Google. Программное обеспечение выпуска и Windows Crack Обучение Нам-Dabei Guanyin Бодхисаттва Нам без митабха 2011-8-3 23:55 0
restoreip 雪币： 214 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 5 粉丝 0 关注私信	restoreip 5 楼谢谢分享，6月份出的吧，早就看完了 2011-8-4 00:50 0
sethsam 雪币： 318 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 65 粉丝 0 关注私信	sethsam 6 楼 http://d.download.csdn.net/down/3387664/ramboOne 这个就是吧？ 2011-8-4 12:35 0
CamelLu 雪币： 391 活跃值： (135) 能力值： ( LV2，RANK：140 ) 在线值：发帖 26 回帖 220 粉丝 0 关注私信	CamelLu 3 7 楼已经看过了，变化不大，看过第一版的同学没必要再看 2011-8-4 12:43 0
simonf 雪币： 202 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 3 粉丝 0 关注私信	simonf 8 楼这个有电子版啊，有兴趣的就下载吧。上传的附件： The IDA Pro Book, 2nd.part1.rar （1.39MB，187次下载） The IDA Pro Book, 2nd.part2.rar （1.39MB，189次下载） The IDA Pro Book, 2nd.part3.rar （1.39MB，195次下载） The IDA Pro Book, 2nd.part4.rar （1.39MB，185次下载） The IDA Pro Book, 2nd.part5.rar （474.17kb，156次下载） 2011-8-4 15:25 0
gagemel 雪币： 13 活跃值： (72) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 45 粉丝 0 关注私信	gagemel 9 楼 i think this is best book ever about ida 2011-8-8 12:11 0
mavermaver 雪币： 141 活跃值： (1135) 能力值： ( LV2，RANK：150 ) 在线值：发帖 47 回帖 362 粉丝 1 关注私信	mavermaver 3 10 楼 Here is another download link: http://www.mediafire.com/?ldeps3y2tw13om6 2011-8-10 10:43 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

linhanshi

9249

发帖

27947

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (9)
linhanshi 雪币： 97697 活跃值： (200834) 能力值： (RANK：10 ) 在线值：发帖 9249 回帖 27947 粉丝 453 关注私信	linhanshi 2 楼第24章 Chapter 24: The IDA Debugger idapro2_ch24.rar Welcome forum.forum is a home. Please respect the copyright from the Internet. Пожалуйста, уважайте авторское право в Интернете. 來源于互聯網, 請尊重版權. 所發資源全部來自對互聯網公共資源的收集和整理,僅供學習之用,請于下載后24小時自行刪除! Issued by all the resources of public resources from the Internet to collect and collate, study purposes only, please delete themselves 24 hours after downloading! Выпущено всеми ресурсами государственных ресурсов из Интернет а на сбор и обобщение, изучение целей, пожалуйста, удалите себя 24 часов после скачивания! You can Google. Программное обеспечение выпуска и Windows Crack Обучение Нам-Dabei Guanyin Бодхисаттва Нам без митабха 上传的附件： idapro2_ch24.rar （1.79MB，41次下载） 2011-8-3 23:29 0
风谣雪币： 123 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 4 回帖 81 粉丝 0 关注私信	风谣 3 楼谢谢分享、、就是俺英文比较搓、、、不知道能完全看懂不？ 2011-8-3 23:47 0
linhanshi 雪币： 97697 活跃值： (200834) 能力值： (RANK：10 ) 在线值：发帖 9249 回帖 27947 粉丝 453 关注私信	linhanshi 4 楼第二版沒有下載的 Welcome forum.forum is a home. Please respect the copyright from the Internet. Пожалуйста, уважайте авторское право в Интернете. 來源于互聯網, 請尊重版權. 所發資源全部來自對互聯網公共資源的收集和整理,僅供學習之用,請于下載后24小時自行刪除! Issued by all the resources of public resources from the Internet to collect and collate, study purposes only, please delete themselves 24 hours after downloading! Выпущено всеми ресурсами государственных ресурсов из Интернет а на сбор и обобщение, изучение целей, пожалуйста, удалите себя 24 часов после скачивания! You can Google. Программное обеспечение выпуска и Windows Crack Обучение Нам-Dabei Guanyin Бодхисаттва Нам без митабха 2011-8-3 23:55 0
restoreip 雪币： 214 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 5 粉丝 0 关注私信	restoreip 5 楼谢谢分享，6月份出的吧，早就看完了 2011-8-4 00:50 0
sethsam 雪币： 318 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 3 回帖 65 粉丝 0 关注私信	sethsam 6 楼 http://d.download.csdn.net/down/3387664/ramboOne 这个就是吧？ 2011-8-4 12:35 0
CamelLu 雪币： 391 活跃值： (135) 能力值： ( LV2，RANK：140 ) 在线值：发帖 26 回帖 220 粉丝 0 关注私信	CamelLu 3 7 楼已经看过了，变化不大，看过第一版的同学没必要再看 2011-8-4 12:43 0
simonf 雪币： 202 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 3 粉丝 0 关注私信	simonf 8 楼这个有电子版啊，有兴趣的就下载吧。上传的附件： The IDA Pro Book, 2nd.part1.rar （1.39MB，187次下载） The IDA Pro Book, 2nd.part2.rar （1.39MB，189次下载） The IDA Pro Book, 2nd.part3.rar （1.39MB，195次下载） The IDA Pro Book, 2nd.part4.rar （1.39MB，185次下载） The IDA Pro Book, 2nd.part5.rar （474.17kb，156次下载） 2011-8-4 15:25 0
gagemel 雪币： 13 活跃值： (72) 能力值： ( LV2，RANK：10 ) 在线值：发帖 0 回帖 45 粉丝 0 关注私信	gagemel 9 楼 i think this is best book ever about ida 2011-8-8 12:11 0
mavermaver 雪币： 141 活跃值： (1135) 能力值： ( LV2，RANK：150 ) 在线值：发帖 47 回帖 362 粉丝 1 关注私信	mavermaver 3 10 楼 Here is another download link: http://www.mediafire.com/?ldeps3y2tw13om6 2011-8-10 10:43 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复