2022/03/12

Book review ‘Exploit! Code härten, Bugs analysieren, Hacks verstehen’

Rating: ★★★★★ (5 of 5 stars)

‘Exploit! Code härten, Bugs analysieren, Hacks verstehen’ (translated to english: Exploit! Hardening code, Analyze Bugs, Understand hacks) is the best German-language security book I have read yet. To get the most out of the book, I would recommend having some Computer Science knowledge, otherwise it could be diffucult to follow at some points.

I got the book recommendation from a colleague and would recommend everyone reading it with an interest in cybersecurity and with some prior computer science knowledge.

For me the chapters with the lower level concepts were by far the best and most interesting ones. In my point of view not all chapters in the book are interesting, especially the high level concept ones, but the low level chapters make up for it.

The index may suggests, that too many topics are covered in this book. Most of the topics are dealt with at a higher level, but in my opinion the essence of these all topics is conveyed. The book was written by 3 professors from Austria and the quality of the writing is accordingly very good. The chapters (3 and 8) dealing with the foundation of Secure Software Engineering and Cryptographie are written in a concise way and very easy to understand. I highly recommend anyone trying to get familiar with these topics to have a glimpse at these chapters.

Just the chapters 9 - 13, dealing with Buffer Overflows, ROP, SEH, ASLR, DEP and Format String Exploits are worth buying the book. Reading through the Corelan Cybersec tutorials / articles will provide more detail, but I haven´t seen anything compareable in a book - especially not in a German one - until reading this one.

To sum it up: an awesome book!