Author Topic: What book to begin with  (Read 4474 times)

0 Members and 5 Guests are viewing this topic.

Offline Andesell

  • /dev/null
  • *
  • Posts: 6
  • Cookies: -1
    • View Profile
What book to begin with
« on: November 23, 2014, 07:13:03 pm »
As title says:
  • Practical Reverse Engineering
  • Practical Malware Analysis
  • Reversing
or any other; aim: write exploits and reverse engineer software / malware

Offline SanCliare

  • /dev/null
  • *
  • Posts: 9
  • Cookies: 2
    • View Profile
Re: What book to begin with
« Reply #1 on: November 23, 2014, 07:53:05 pm »
Google lenna tutorials. Have fun

Offline Deque

  • P.I.N.N.
  • Global Moderator
  • Overlord
  • *
  • Posts: 1203
  • Cookies: 518
  • Programmer, Malware Analyst
    • View Profile
Re: What book to begin with
« Reply #2 on: November 24, 2014, 01:01:15 pm »
As title says:
  • Practical Reverse Engineering
  • Practical Malware Analysis
  • Reversing
or any other; aim: write exploits and reverse engineer software / malware

These are the best I know, but there are also:
  • Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation
  • Malware Analyst's Cookbook

In addition it is suggested get some specific books about system internals, certain tools, certain file formats, and malware in general. E.g.:

  • Windows Internals
  • Inside Windows Debugging
  • The Art of Computer Virus Research and Defense
  • The Art of Memory Forensics
  • The IDA Pro Book

And don't forget books about assembly. You will need them.

Google lenna tutorials. Have fun

You should read the question again.
Being precise is especially beneficial for programmers and reverse engineers.
« Last Edit: November 24, 2014, 01:01:57 pm by Deque »

Offline L0aD1nG

  • Peasant
  • *
  • Posts: 83
  • Cookies: 6
  • NeverFear1isHere
    • View Profile
Re: What book to begin with
« Reply #3 on: November 24, 2014, 01:33:38 pm »
These are the best I know, but there are also:
  • Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation
  • Malware Analyst's Cookbook

I have this books too, though I have not read any of those two yet. But I can provide the links for ease here:

http://www.caluniv.ac.in/free_book/Cyber-Security/Practical%20Reverse%20Engineering%20x86,%20x64,%20ARM,%20Windows%20Kernel,%20Reversing%20Tools,%20and%20Obfuscation.pdf

http://download.adamas.ai/dlbase/ebooks/VX_related/Malware%20Analyst%27s%20Cookbook%20and%20DVD.pdf

Offline Andesell

  • /dev/null
  • *
  • Posts: 6
  • Cookies: -1
    • View Profile
Re: What book to begin with
« Reply #4 on: November 25, 2014, 08:46:18 pm »
Thank you! In what order?

Offline d!amond

  • Peasant
  • *
  • Posts: 60
  • Cookies: 15
    • View Profile
Re: What book to begin with
« Reply #5 on: December 01, 2014, 04:53:08 pm »
http://beginners.re/RE_for_beginners-en.pdf

If you start with this book, you won't need another book on the topic in a long time.

Offline Andesell

  • /dev/null
  • *
  • Posts: 6
  • Cookies: -1
    • View Profile
Re: What book to begin with
« Reply #6 on: December 01, 2014, 07:07:19 pm »
http://beginners.re/RE_for_beginners-en.pdf

If you start with this book, you won't need another book on the topic in a long time.
So you've read it. Why should I read it? Why is it better than the others?

Offline darangal

  • Serf
  • *
  • Posts: 26
  • Cookies: -30
    • View Profile
Re: What book to begin with
« Reply #7 on: December 01, 2014, 11:20:00 pm »
Are these books for all types of reverse engineering or geared towards either software or hardware?

Offline mindoverflow

  • /dev/null
  • *
  • Posts: 5
  • Cookies: 0
    • View Profile
Re: What book to begin with
« Reply #8 on: January 03, 2015, 08:58:29 pm »
Not for all architectures. Only for ARM (including Thumb), x86, x86-64.

Offline Arkalian

  • Peasant
  • *
  • Posts: 116
  • Cookies: 27
  • The UnSilent Majority
    • View Profile
Re: What book to begin with
« Reply #9 on: January 22, 2015, 09:19:27 pm »
I would definitely go with Practical Malware Analysis. It has labs that you can do that progressively get harder as you get more experienced as well as an accompanying website where you can download the sample lab malware. Also, this is a good webinar with Michael Sikorski and Andrew Honig (The guys who wrote it) that has some good info to help get you started. They both are top Malware researchers/analysts from Mandiant. So it's safe to say that they know what there talking about.

I hope this helps.

Ark

Practical Malware Analysis book (Axon's Link)
http://upload.evilzone.org/download.php?id=6047157&type=zip

The accompanying website with the labs and sample malware.
http://practicalmalwareanalysis.com/labs/

Practical Malware Analysis Webinar
https://www.youtube.com/watch?v=1PfVhvtuUDM

« Last Edit: January 22, 2015, 09:22:52 pm by Arkalian »
We few, we happy few, we band of brothers;. For he today that sheds his blood with me. Shall be my brother.
                                                                    -Shakespeare

Offline Aurora

  • /dev/null
  • *
  • Posts: 18
  • Cookies: -31
  • Reverse Engineer
    • View Profile
Re: What book to begin with
« Reply #10 on: August 16, 2015, 01:15:07 pm »
Thanks, this thread has been helpful. +1 to OP.

Offline bn1st

  • /dev/null
  • *
  • Posts: 10
  • Cookies: -1
    • View Profile
Re: What book to begin with
« Reply #11 on: August 16, 2015, 07:18:04 pm »
bruh RE for Malware

Books / Links / OS
- The Rootkit Arsenal
- https://zeltser.com/reverse-malware-cheat-sheet/
- Download Remnux

Offline novaccainne

  • Serf
  • *
  • Posts: 29
  • Cookies: 2
    • View Profile
Re: What book to begin with
« Reply #12 on: October 06, 2015, 02:44:29 pm »
Hi , I think there are a lot of good books are published on the internet but I think you should start it with Lena's reverse enginnering tutorial because it shows you the power of reverse enginnering and of course the basics of reverse engineering.  You can download it from tuts4u. It is a very good primer for everyone :)

A lot of good articles can be found on  infosec resources : http://resources.infosecinstitute.com/category/reverse-engineering-2/ .

Tuts4u is also a good site : https://tuts4you.com/download.php

RCE forum is also a good site : http://www.woodmann.com/forum/content.php



Offline chris_kzn

  • Serf
  • *
  • Posts: 25
  • Cookies: 2
    • View Profile
Re: What book to begin with
« Reply #13 on: October 12, 2015, 09:38:23 pm »
Just in case any of you still interested in the book:
Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation

Here is a download link to it as I was unable to obtain it from the previous post:
http://longfiles.com/ni9vhqy717yn/1118787315engin.pdf.html?from=cross-link-fun