Look out for the Humoctopus!

Books

• Goodell, Jeff. The Cyberthief and the Samurai: The True Story of Kevin Mitnick- and the Man Who Hunted Him Down , New York: Dell, 1996.
• Hoglund, Greg; McGraw, Gary. Exploiting Software: How to Break Code, Boston: Addison-Wesley, 2004.
• Howard, Michael; LeBlanc, David. Writing Secure Code, Redmond: Microsoft Press, 2002.
• Huseby, Sverre H. Innocent Code: A Security Wake-up Call for Web Programmers, West Sussex: John Wiley & Sons, 2003.
• Shimomura, Tsutomu; Markoff, John. Takedown: The Pursuit and Capture of Kevin Mitnick, America's Most Wanted Computer Outlaw- by the Man Who Did It, New York: Hyperion, 1996.
• Stoll, Cliff. The Cuckoo's Egg: Tracking a Spy Through the Maze of Computer Espionage, New York: Simon & Schuster, 1989.

Online Resources

• CyberINsecurity: The Cost of Monopoly: The original article, available at: http://www.ccianet.org/papers/cyberinsecurity.pdf
• http://www.guninski.com/browsers.html: Georgi Guninski's IE bag-o-trix0rs.
• Malware.Com: We stole the ActiveX shell/link/HTA exploit from http://www.malware.com
• The Wayback Machine: Old images of the l0pht web site are available at http://www.archive.org
• Wiki: Project TICOM: A footnote in the Wikipedia discussion of the history of Cryptography, available at http://en.wikipedia.org/wiki/TICOM
• Insecure Wireless Access at DNC Convention: A fun article alluding to accidental association tricks, available at http://www.internetweek.com/allStories/showArticle.jhtml?articleID=23905152

Software

• ChkLock: A lame tool for studying Windows password policies. Available at: http://www.berbee.com/solutions/infra/security/resources/chklock-home.htm
• Ethereal: The tool of choice for packet capture and analysis. Available at: http://www.ethereal.com/
• enum: A nice NetBIOS information gathering tool from the fine folks at Bindview Razor: http://www.bindview.com/Support/RAZOR/Utilities/Windows/enum_readme.cfm
• HostAP: You, too, can impersonate a cheap access point with your expensive laptop! Available at: http://hostap.epitest.fi/
• Hotspotter: Proof-of-concept tool for attacking friendly XP wireless interfaces available at: http://www.remote-exploit.org/codes.html
• Hydra: A multi-purpose password grinding tool from THC. Available at: http://www.thc.org/thc-hydra/
• Kismet: A lovely wireless networking analysis tool. Available at: http://www.kismetwireless.net/
• Windows Resource Kits: Worthwhile toolboxes available at: http://www.microsoft.com/windows2000/techinfo/reskit/default.asp
• SMBProxy: Simple SMB proxy tool; we could never get it to work for us. Available at: http://www.cqure.net/tools02.html

Greetz