As more and more vulnerabilities are found in the Mac OS X (Leopard) operating system, security researchers are realizing the importance of developing proof-of-concept exploits for those vulnerabilities. This unique tome is the first book to uncover the flaws in the Mac OS X operating system—and how to deal with them. Written by two white hat hackers, this book is aimed at making vital information known so that you can find ways to secure your Mac OS X systems, and examines the sorts of attacks that are prevented by Leopard’s security defenses, what attacks aren’t, and how to best handle those weaknesses.
The Mac Hacker's Handbook
and over one million other books are available for Amazon Kindle. Learn more
 |
| |||||||||||||||
New! Introducing the tech.book(store), a hub for Software Developers and Architects, Networking Administrators, TPMs, and other technology professionals to find highly-rated and highly-relevant career resources. Shop books on programming and big data, or read this week's blog posts by authors and thought-leaders in the tech industry. > Shop now |
Book Description
Frequently Bought Together
Editorial Reviews
From the Back Cover
The honeymoon is over.
Prepare yourself to thwart Mac attacks.
Where security is concerned, Macs have long led a charmed existence. No more. If you manage security for a network that includes OS X machines, this update on the strengths and weaknesses of Mac OS X is required reading.
Beginning with the core differences between Mac OS X and Windows or Linux, this book follows the steps an attacker would take. You will learn the tools needed to find vulnerabilities, the techniques used to exploit them, and the means by which attackers maintain control once they gain access. When you know how they get in, you'll know how to keep them out.
See what makes Mac OS® X unique, what security improvements were added with Leopard®, and where vulnerabilities lie
Explore uncommon protocols—Bonjour®, the QuickTime® file format, and RTSP
Look for bugs in Apple's source code or use a black box technique such as fuzzing
Examine stack overflow and heap overflow attacks directed at PowerPC and x86 architectures, as well as shellcodes and payloads
Learn to inject code into running processes and how attackers use this technique
Understand Mac OS X-specific rootkit techniques
About the Author
CharlIe Millerwon the second CanSecWest Pwn2Own contest in 2008 and was named one of the Top 10 Computer Hackers of 2008 by Popular Mechanics.
Dino Dai Zovi won the first CanSecWest Pwn2Own contest in 2007 and was named one of the 15 Most Influential People in Security by eWEEK.
Product Details
Would you like to update product info or give feedback on images? |
More About the Authors
Discover books, learn about writers, read author blogs, and more.
Customer Reviews
Most Helpful Customer Reviews
16 of 16 people found the following review helpful
Format:Paperback|Amazon Verified Purchase
The Mac Hacker's Handbook covers a lot of useful technical topics surrounding vulnerability analysis and exploit development for Mac OS X. That said, it doesn't so much teach you directly, as guide your learning. For example, it introduces the use of DTrace on OS X for dynamic analysis. It makes a very good case for DTrace's usefulness in reverse engineering, and for you to go out on your own and learn about it. Its DTrace examples aren't really freestanding, and require some background that you must get yourself. If the book were to give you the necessary background on every topic it introduces, it would be an enormous tome, and the authors probably would still be writing it.
Think of the book as explaining to you what all tools you need in your Mac hacking toolbox and why you need them, and how to put them together once you have them. It's up to you do go develop those skills on your own.
The biggest shortcoming of the book, however, is it is out of date. The concepts are sound and still very applicable, but the examples are written for OS X 10.5. Most do not work on Snow Leopard. Many you can get to work if you go out and beat the pavement trying to figure them out. I recommend this, but be aware, your progress through the book will be slow going as you get bogged down trying to figure out how to adapt each example so that it works.
This book succeeds if taken for what it is: a guide for your learning. You'll need to invest a fair amount of sweat equity to get the most out of it, though.
Think of the book as explaining to you what all tools you need in your Mac hacking toolbox and why you need them, and how to put them together once you have them. It's up to you do go develop those skills on your own.
The biggest shortcoming of the book, however, is it is out of date. The concepts are sound and still very applicable, but the examples are written for OS X 10.5. Most do not work on Snow Leopard. Many you can get to work if you go out and beat the pavement trying to figure them out. I recommend this, but be aware, your progress through the book will be slow going as you get bogged down trying to figure out how to adapt each example so that it works.
This book succeeds if taken for what it is: a guide for your learning. You'll need to invest a fair amount of sweat equity to get the most out of it, though.
16 of 16 people found the following review helpful
Format:Paperback
The Mac Hacker's Handbook is the best reference for Mac-specific attack information that I have found. At 368 pages, it may appear small compared to the typical 750+ page security tome. That's because the authors have done a near-perfect job of sticking to the topic at hand, the Mac. The authors do not succumb to the usual temptation to try and teach assembly language or reverse engineering. Rather, they do an excellent job touching on those topics in an OS X context, and assume the reader has a little background in that area already, or can otherwise keep up. I have done some limited research into the areas of Mac malware and process injection in the past. This book has done a fantastic job of filling in many holes in my knowledge that I hadn't been able to take care of before. Plus, it introduced me to a number of Mac-specific security features I wasn't aware of before. Highly recommended for anyone interested in Mac security.
7 of 8 people found the following review helpful
By mjw
Format:Paperback
As a security professional Mac's are an interesting subject. They combine many of the best features from other operating systems into a wonderful package. I purchased a Macbook during a pen test about 8 months ago and have been in love with it since then. Before this book looking at security on Apple products was a difficult dive into the unknown. Charlie and Dino have done a lot of hard work and figured out the internals of OS X as related to security. They clearly present what's going inside the OS and how they learned the internals. This enables other security professionals to follow their method to both gain better understanding and to know what's wrong when something inevitably changes.
I'd definitely recommend this book for experienced security professionals looking to do exploit development on the Mac.
I'd definitely recommend this book for experienced security professionals looking to do exploit development on the Mac.
Most Recent Customer Reviews
5.0 out of 5 stars
Technical and detailed
This book provides insight into many applications and internals of Apple's Mac operating system from a security perspective, which was exactly what I was looking for. Read more
Published 16 months ago by Prime
5.0 out of 5 stars
Great Book
I really enjoyed this book, it teaches a number of techniques and does a great explaining the motivation behind an attack. Read more
Published on February 21, 2011 by J. Carlson
2.0 out of 5 stars
Well, it at least had Mac in the title
I have to disagree with the other reviewers of this book. The book seemed to be a jumbled collection of thoughts with only a very faint sense of direction. Read more
Published on May 18, 2009 by That IT Guy
5.0 out of 5 stars
Fantastic book for understanding details of Mac OSX
Well-written, readable, and fascinating, Charlie and Dino describe what goes on under the covers of Mac OS X, warts and all. Read more
Published on April 3, 2009 by Chris Marlowe
What Other Items Do Customers Buy After Viewing This Item?
Listmania!
So You'd Like to...
Look for Similar Items by Category
- Books > Computers & Technology > Apple > Home Computing & How-to > Mac Administration & Networking
- Books > Computers & Technology > Apple > Home Computing & How-to > OS X
- Books > Computers & Technology > Business & Management > Privacy
- Books > Computers & Technology > Internet & Web Culture > Hacking
- Books > Computers & Technology > Networking > Network Security
- Books > New, Used & Rental Textbooks > Computer Science > Operating Systems
