Hacking exposed
by Joel Scambray, Mike Shema, Caleb Sima · first published 2000
12mentions
5recommended by
10HN commenters
2009–2026first – last mentioned
50% recommend40% neutral10% critical
Why HN recommends it
Broad hands-on overview of network and system security attacks and tools, often recommended as a practical starting point for people new to penetration testing and defensive security.
Summarised by Claude from recommending comments
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
I've looked at recommendations in 25 articles and compiled a list of the most recommended books on cybersecurity sorted by how often they were mentioned. Hacking Exposed 7 by Stuart McClure Countdown to Zero Day by Kim Zetter Ghost in the Wires by Kevin Mitnick Spam Nation by Brian Krebs Practical Malware Analysis by Michael Sikorski Threat Modeling by Adam Shostack…
on “Show HN: A compilation of cybersecurity book recommendations from 25 articles” ↗Not exactly, but these two are slightly related: Hacking Exposed: Web Applications, 3rd Edition - approaches the subject from a wider angle, not just about appsec. http://www.amazon.com/HACKING-EXPOSED-WEB-APPLICATIONS-3rd/d... Hacking: The Next Generation - more…
on “ Web App Hacker's Handbook 2nd Edition - Preview” ↗…to be very useful for hacking. Operating systems, hardware, and networking are great topics (and they are more concrete than most programming). Great book he might want to read: http://www.amazon.com/Hacking-Exposed-Network-Security-Solut...
on “A lesson on the importance of encouraging your children with their projects” ↗…you are looking for a decent community for this type of thing, visit reddit.com/r/netsec. Hacking: The Art of Exploitation, 2nd Edition http://www.amazon.com/Hacking-The-Art-Exploitation-Edition/d... Hacking Exposed 7 http://www.amazon.com/Hacking-Exposed-Network-Security-Solut... This next site is basically Youtube for security conferences. They also offer some online courses on writing exploits in assembly and…
on “The MiniDuke Mystery: PDF 0-day Government Spy Assembler 0x29A Micro Backdoor” ↗…providing the reader with the information needed to run a large set of hacking tools. Defense against the Black Arts is another in the line of hacking overview books that started with the first edition of Hacking Exposed. Like Hacking Exposed, the book walks the reader through the process of how to use hacking tools and how to make sense of their output. Defense against the Black Arts is written for the reader with a…
on “Defense against the Black Arts” ↗I remember reading one of the "hacking exposed" books (the exact one I can't remember now), where there was an incident where an online store used values in the webpage itself to handle the prices of goods. In the example in the book, the hackers…
on “How I Reimplemented My Shopping Cart To Sell More Software, w/ Code” ↗Hacking Exposed: http://www.amazon.com/dp/0072121270 Armadillo book: http://www.amazon.com/dp/0596003439
on “How We Got Owned by a Few Teenagers (and Why It Will Never Happen Again)” ↗You have no idea what you are talking about. George Kurtz authored the Hacking Exposed book over 25 years ago. That’s not really a sign of a non-technical person.
on “CrowdStrike CEO apologizes for tech outage” ↗…is worth highlighting that there is a whole ecosystem of bottom feeders in the world of government contracted 'whitehat hackers' & 'consultants'. They know as much about security as one can pick from 'Hacking Exposed IV' kind of book from your local book store. Some of them are just fakes who just have the right connection within the agencies (many are just ex-employees, friends of friends, college buddies and cousins).…
on “LulzSec versus FBI (We Challenge You, NATO)” ↗…https://www.owasp.org/index.php/Avoid_security_by_obscurity >not everything that is bad is "security through obscurity". And I agree with this, but my example most certainly is a valid case of security through obscurity. Update: Better Sources From Hacking Exposed: Wireless, 2nd Edition Pg. 80 From the first paragraph on security through obscurity: >Many wireless networks today operate in hidden or nonbroadcasting mode. These networks don’t include their SSID…
on “Life of Brian (Krebs)” ↗I am pretty sure that was it! I read Hacking Exposed back in the day. That's where I learned about it!
on “JPMorgan Chase & Co tracks employees to distopian extents” ↗I read Hacking Exposed around that time period. Up until then, my only "hacking" experience was with AOHell and everything that came along with that. It was interesting, but I wasn't really into the idea of trying to use CreditWiz…
on “A sentimental tour of late 1990s and early 2000s hacking tools” ↗