#bookclub
1 messages · Page 1 of 1 (latest)
Gave +1 Rep to @sand turret
no problem
+rep @hushed pagoda
Gave +1 Rep to @hushed pagoda
to help with making sure alek also gets the rep
ahh no worries guys 🙂
who's your target audience?
@long burrow Please do not advertise in this discord, it is against the rules
hey guys , could you recommend me some books? i just finished reading Linux basics for hackers , and i read the first two books from networking all in one for dummies , i have very basic bash scripting skills , i know python and javascript so i think i can consider myself a "script kiddie" atleast , i would like to advance , what would be the best books for kali?
I've enjoyed the "Hacker's Handbook" series, such as "The Web Application Hacker's Handbook".
There's lots of really good books depending what you want to learn next. No Starch Press has lot of books on various topics.
Any good up to date books about Linux kernel?
greetings
if anyone has this book can provide me osint investigations we know what you did that summer
Are you asking someone to send you the book?
yes in pdf or any document format
That would be book piracy and illegal. You know that right?
That's straight up stealing money from the author
@novel locust Please leave it to the mods
Sure, sorry. I understand this has to be an organised place.
Hey are we allowed to post books unrelated to cybersecurity specifically but still good for learning more efficiently
yeah probably
here is a great book that is not about hacking but teaches things in a hacking like manner: https://www.amazon.com/Complete-Guide-Felling-Woodcutting-Methods/dp/0615338798
At OMB Warehouse, we strive to provide the greatest selection and quality of parts for your outdoor power equipment.Need other parts to complete your project? Check out our huge catalog - we have what you need.To Fell a Tree Book by Jeff Jepson
I'm looking for an object-oriented python book, preferably that doesn't teach it through making a game. I kinda can't stand writing out miles and miles of code for a video game I'll never play. I'm currently working through Automate The Boring Stuff and looking out towards a book that will be more advanced. Thanks!
have you tried searching sites for python books like for example packtpub
I have. in particular "Python 3 Object-Oriented Programming: Build robust and maintainable software with object-oriented design patterns in Python 3.8, 3rd Edition". I just feel slightly overwhelmed by the choices. Wondering if anyone has found any interesting ones.
ah fair then
oh there's a 4th edition! nice.
Really good stuff not just for exams but for general tips on reading and memorization
Having an issue of finding a really good hacking audio book to read. Anyone got any recommendations? I liked The Fifth Domain, Dawn of the Code War, Dark Territory: The Secret History of Cyber War, Permanent Record, Kingpin: How One Hacker Took Over the Billion-Dollar Cybercrime Underground, This Is How They Tell Me the World Ends: The Cyberweapons Arms Race, Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon and The Cuckoo's Egg. 😄
You can try DarknetDiaries
Darknet diaries is best
You could read Binary Bullets; Bitskrieg; Cyberwarfare: An Introduction To Information-Age Conflict ; The Changing Face of Empire - Special Ops, Drones, Spies, Proxy Fighters, Secret Bases, and Cyberwarfare; The Art of Cyberwarfare; The Kill Chain: Defending America in the Future of High-Tech Warfare
Book Review - How to Hack Like a LEGEND by Sparc Flow. If you are curious about how real-world breaches happen, go for this book. It demonstrates a real-life supply chain attack.
https://yaksas.in/ycscblog/book-review-how-to-hack-like-a-legend/
I do like Sparc FLOW's books. Huge insights
Hello! I’m new to the coding land, and wanted to know where I should begin? I’d like to one day be able to access what I want when I want (in a sense) 🤷🏻♀️ not too sure exactly, but I know I want to be “tech-savvy”!
TryHackMe is focused on cyber security, not coding, just to make sure you aware of that 🙂
#start-here might be a good place to go first, after that grind your way through the paths
Not what this channel is designed for, it is to mention/recommend cyber security related books. Also not for self-promotion purposes. 🙂
http://explodingthephone.com/
Vv good book
Official web site for Phil Lapsley's book, 'Exploding The Phone: The Untold Story of the Teenagers and Outlaws Who Hacked Ma Bell'
That's against the rules here
Aah i am just asking of coding book
That's very different though
You're new here. I suggest that you read the rules now before you break more of them.
Aah ohk
These books are available from No Starch Press:
The Hardware Hacker - https://nostarch.com/hardwarehackerpaperback
the Hardware Hacking Handbook - https://nostarch.com/hardwarehacking
I would reccomend looking up the defcon talk about how to do hardware hacking by looking up the fcc info accessing the bus and glitching the chips the hardware hacker is a great book too
Is that your local library?
I would love to be there
These are the kinds of photos I used to take at the bookstores computer sections too before I had a job and the money to buy many physical books, just as a goal of which books I'd like to read
For those interested, No Starch is having a 25% off sale on their site over the labor day weekend
what is that?
No Starch Press is a book publisher focused on computing. they own very good books
Thanks
/java script
any interesting time management books for students (thought the message would be visible here sorry)
thanks!
Anyone know where I can purchase this book cheaply?
For a university course? No where. You might be able to get a physical textbook from a student from the form ahead of you, but don't count on it.
Oh man, Amazon have a printed, but they would like £195 for the pleasure.
Do you need it for a particular class?
Yeah, computer operating systems and troubleshooting
Textbooks tend to be expensive. Try to buy a used one if available.
Did you try ebay? Saw some similar ones for around 10£, maybe with some more searching you’ll find the specific one.
tried to look for it, found a lot of videos. Is it a video from 2022? Can you link if possible? thx
Gave +1 Rep to @hollow dagger
Is it anygood for someone wanting to do sec engineering?
I have also been looking for this one specifically. No luck.
I did aye, they didn't have that one.
It's really about learning how to prepare for the unexpected in every part of your life. The things it teaches are a set of transferable skills that can work in multiple aspects of your life. It would help you understand things in sec engineering but there's nothing in it about computers directly.
ahhh
You might benefit from Cyberjutsu by Ben Carty, Foundations of Information Security by Jason Andress or How Cybersecurity Really Works by Sam Grubb
https://nostarch.com/cyberjutsu
https://nostarch.com/foundationsinfosec
https://nostarch.com/cybersecurityreallyworks
Based on techniques adapted from authentic Japanese ninja scrolls, Cyberjutsu teaches ancient approaches to modern security problems.
Foundations of Information Security provides a high-level overview of the information security field.
Yeahh I read cyberjutsu
Have you bought and read a CISSP book?
Nope
You'll learn a hell of a lot about what organisations need to do in order to manage security you'll have a much clearer picture of what to look for when you are engineering security solutions.
Is there any good book to learn operating systems concepts that is cheap in price?
I have only found Operating Systems : Three Easy Pieces, but the reviews say that it doesn't work on kindle.
(I want to learn the fundamentals and if possible I'd rather read it on ebook)
If you look on Amazon, you see in the book's Editorial Reviews section, From the Author, the book has an official website where you can download individual chapters of the book for free as PDFs. There is also a link from there for a PDF edition of the complete book for $10
That's true, unfortunately PDFs don't read really well on kindle... But thanks!
Yeah Kindle sucks for PDFs. I use a tablet for those and epubs thanks to the number of books I've gotten from Humble Bundle over the last few years
Gave +1 Rep to @novel locust
the one I saw was by Philippe Laulheret (no affiliation I'm just a noob)
@tidal plume I have no doubt you will buy this
Yoink!
I have most of them from buying previous versions of that bundle. They're all worthwhile 🙂
Hello, any good books for Windows forensic ?
Good to know because I bought the whole thing 😉
-ban @floral hearth -ddays 1 Posting pirated books
🔨 Banned A7M4D#4150 indefinitely
This is a great Humble Bundle collection if you're working in cloud environments. There's several good security books in it as well as a lot of other greats
https://www.humblebundle.com/books/cloud-infrastructure-operations-oreilly-books
Would starting a real book club where we meet in vc here periodically be allowed?
Sandworm would be a good one to start I guess.
[Redacting this in case it's not actually open source]
It, uh, appears to be open source.
I honestly have no idea if or how that's legal, but it's the internet archive
How in God's name is that legal
Oh, it might not be. Apparently they don't check. One sec, will double check print status
🤨
Ah, hopefully it is legal,
I mean, I just found a PDF copy on a university domain
I mean...it's there....
And another one 
Hi guys which book would you preferably read
- Offensive Python
- Black hat Python
offensive python as shadow not wanna touch black hat stuff
shadow, black hat python really isn't black hat. It's basically 'intro to security elements of programming and networking with python'
would claim this is bad marketing then for the people that know what black hat means
It's still a good book. It's on the list of books I recommend to those who want to learn programming and security.
It's on my to read list.
At some point, you have to get over the marketing bullshit. It's like everything vehicle related is pushing 'autonomous driving' without actually having that be reasonably implemented (so far anyway.....), and the amount of 'red team' marketing garbage in security industry is similarly prevalent. Learn to take it for what it is, and realize that word choice in public facing stuff is chosen by the marketing and sales teams.
fair.... maybe shadow is not thinking as clearly or having read or seen as many books on different cybersecurity related stuff and therefor dunno how the marketing works
what networking book you recommend . ive heard good reviews about "Networking a top down approach" but i dont really want to read a book of 900 pages
oh so reading a long fantasy series is okay.... for a lot of people that is.... but an informational book of the same length is harder somehow???
It's a very common textbook for vocational and university classes on networking. Alternatively, you can use the CCNA exam study guide materials.
guess the iso documentation on the osi model might also help
Wanna know the 5 API hacking books I think you should have on your shelf? Check this out: https://danaepp.com/5-books-every-api-hacker-should-read
I want to be a pentester when I grow up so I got the Hacking for dummies and Linux for dummies. What do you think?
It was free and at the library
probably some good baseline stuff but to get really good you probably need newer information for some new vulns and exploits and not just stuck to the old stuff... sure nmap has not really changed and is a great tool to learn
Yeah, I understand. I just don’t have a job at the moment so I can’t just buy whatever I want rn
Hopefully in the next month
I guess I could read pdfs but I enjoy physical copies
The Linux version is from 2020 so not that bad
nmaps man page is free and a great resource on how nmap works
looking into it now
If money is an issue, there are plenty of resources and free ebooks online, don't hesitate to ask if you can't find any, but a quick google search should do it.
If you can afford it, this Linux Humble Bundle might benefit you. Getting all 21 books is €40 but you can get some really great security books in the 16 item bundle for €18
https://www.humblebundle.com/books/linux-no-starch-press-books
Cool, enjoy!
My professor uses the 9th edition of this book. But he's studying the last ed and will let us know if it is worthy or not cause he's new to that. What's your (professor) opinion about the 10th?
Dude I was just watching a Ty video going over commands and the guy going over it (Occupy the Web) is the author of at least one of these books
Gave +1 Rep to @tidal plume
Thanks man
Yeah OccupyTheWeb wrote Linux Basics for Hackers and has a couple of other books out or in the pipeline
I love humble bundle.
I'm currently reading "How Linux works", feel free to pm me if you want to discuss anything ^^
best book to learn javascript?
Eloquent javascript
thank you Lazy
Currently working through sandworm and it has been great
any audio book recommendations for learning language-agnostic software engineering concepts?
I'm thinking something similar to "clean architecture"
Hi guys any good books you recommend for webhacking
Web Application Hacker's Handbook, or go to the PortSwigger Academy , the official updated replacement for it
https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470/ref=sr_1_1
https://portswigger.net/web-security
Web Hacking 101 by Peter Yaworski - you get this book free when you join Hacker One or you can buy it online.
Also check out Hacker101
Real World Bug Hunting, also by Peter Yaworski, available from No Starch Press
https://nostarch.com/bughunting
The Web Security Academy is a free online training center for web application security, brought to you by PortSwigger. Create an account to get started.
also known as do not use third person to refer to yourself everywhere as then you stick out lots
You said it 
yes men#
Is MUMPS the MUMPS I think it is?
https://en.m.wikipedia.org/wiki/MUMPS meaning this one
MUMPS ("Massachusetts General Hospital Utility Multi-Programming System"), or M, is a high-performance transaction processing key–value database with integrated programming language. It was originally developed at Massachusetts General Hospital for managing hospital laboratory information systems.
MUMPS technology has since expanded as the pre...
Does anyone here have a goodreads profile and is willing to share it? (Can be in private)
I think it is a good way to find new reads and talk about them.
Yep 😄
There's some LIMS system at work that needs some SAST work.
You make it to the Defcon talk on it this year? Really cool talk about the VA and MUMPS
Nope, never been to Defcon 😄
Well I did for Safemode online
I work as a Pentester/Red team in a giant lab company, we have a little bit of everything

hey people
today i saw some books on linux and unix
they were named "Unix complete" and "Linux complete"
i couldn't find em' online...
so, could someone link me some book on complete cuz there are many of them out there...
and one more thing...is it good to do unix before linux?
What do you mean by find them online?
like, find them online as some documents or buy them
sorry for late reply
Do you realize that finding them as documents is book piracy and illegal?
I'd recommend expanding your search, I doubt the book will be as complete as it claims
I'd also recommend learning more about unix vs posix vs linux once you've learnt some more Linux
i was thinking, linux is based on unix so i would have to do unix first
Definitely not
okay
Computers are based on transistors and digital logic but you don't need to study electronics before using a computer
yea
There's limited relevance to learning Unix, especially considering how rarely it's used in favour of Linux based systems.
you mean, it won't be complete and sufficient?
I mean, I'm not familiar with the book.
Sufficient depends on your goal.
oh okay right
Unless it's regularly updated, I'd be extremely wary of it's completeness. Linux now is quite different to 15-20 years ago
yeah it may be the same as some other platforms have material
like outdated
any other books i should consider
or any other topics?
okay anyways
thank you brother
thank you @errant sundial
Gave +1 Rep to @errant sundial
I can't see anything in my library that I'd immediately recommend
oh okay np
i have seen some people not really recommending to read books
i didn't mean you
I'd certainly recommend learning it practically, but you asked for a book and this is #bookclub so I decided against recommending that
oh!
I can have a look at home if you'd like some book recommendations, I have some lists somewhere
yeah thank you i would really appreciate that
that would be really helpful
RHCSA is a good source of 'new to linux' material - it's intended as an entry level cert for linux sysadmins
CloudGuru has (from what I've heard) a similar Linux cert as well
I've seen some books on Amazon titled Linux Complete or Linux The complete Reference but they're more than 15 years old. While you're learning Linux, you'd be encouraged to read a book or two to get started. And as James has already implied, you don't need to learn Unix before Linux. Linux is an operating system of its own, based on Unix principles, so you'll be learning some Unix skills along the way.
As far as books go, here's my recommendations for getting started:
The Linux Command Line by William Shotts. He gives the book away as a pdf under a Creative Commons licence on the book's official website: https://www.linuxcommand.org/tlcl.php or you can buy it from the publisher, No Starch Press from their website or other stores online https://nostarch.com/tlcl2
Linux Basics for Hackers by OccupyTheWeb, also from No Starch is a great book for introducing you to the general skills you'll need starting out in cybersecurity:
https://nostarch.com/linuxbasicsforhackers
How Linux Works by Brian Ward is a nice way to learn some of the depth of the Linux OS in a friendly way
https://nostarch.com/howlinuxworks3
There are loads more Linux books at https://nostarch.com/catalog/linux-bsd-unix
Also, yeah as Juun said, the RHCSA is one of the most recognised Linux certifications. You shouldn't have much difficulty getting into the flow of it with a good book like the ones from Sander van Vugt or Asghar Ghori
oh so doing a cert can also be used as to learn new things thank you brother
Gave +1 Rep to @regal pond
thank you brother
that'd help a lot a lot
Gave +1 Rep to @tidal plume
I can vouch for How Linux Works. I read it while preparing for OSCP and it really helped me.
Oh! That's great
Well good luck for the exam
I am currently reading "How Linux works" and it really is a good book for beginners. I strongly recommend you read it while having a Linux machine close by.
I don't have a Linux machine, I have windows with wsl 2 CLI on it
But I'll check it out tho
Thanks…Cleared it 5 years ago 🙂
Oh!
You can spin up a simple VM
It's 4gb of ram
Ah! I see…in that case a free tier AWS ubuntu machine will be a good companion
So I don't think I can do that
That's related to cloud computing computing ig?
Yes.
Gave +1 Rep to @bronze mango
It’s simple to create a AWS based machine. Let me know if you need help with that.
Thank you!
Sure, I will ask you if I encounter some problem...
WSL can sometimes behave pretty...oddly. Especially with networking stuff. IMO you are better off installing vmware workstation or vbox for a low-cost windows VM host.
Yeah ofc that would be far far better than WSL,
But the reason I couldn't set up a Vm is that I have 4gb of ram
Next, that I am 13, and I don't have enough money rn for that but ofc I am collecting
(Hope this doesn't make you all feel awkward and stop convo with me)
Anyways, thank you
Gave +1 Rep to @regal pond
Not at all. When I was trying to install linux for the first time, I ended up formatting my entire hard disk (I was about the same age as you but much less informed)
Oh
Thank you for the support🙏
Hi guys anyone know if there is a 3 Edition
I can only find this on and its kinda very old
Been replaced with Portswigger academy
im already doing the academy but it is still worth reading the book?
Chapter 21 of the book is really good: A Web Application Hacker's Methodology. It gives you an insight how it was done as a methodology prior to automation.
Does this also relate to networking concepts for beginners?
I don't think we as hackers need to go into much deep of networking ig
Or is it just for like web developers?
(I am asking only for beginners)
You need a very strong understanding of metworking for hacking
As you do with the other fundamentals
i mean like, physical layer or most of the datalink layer, aloha, cms, point-to-point, ethernet, frame relay, atm
i think all those are for people studying core networking
it's not for us
isn't it?
90% of those things you named haven't been seen for the last 20 years, but yes you need to know about various technologies
How are you going to connect to the target network if you don't know what connector you're looking at or what equipment or configuration you need in order to connect?
yeah right
sounds good
I bought these two books just for curiosity. I figure out these are the good mines in their our fields.
Both excellent books. Web Application Hacker's Handbook is a worthwhile read but as said above, has been replaced by PortSwigger Academy. The Art of Memory Forensics is a worthwhile book in computer forensics, malware analysis and some other areas. complement it with Practical Malware Analysis and the Malware Analyst's Cookbook
https://nostarch.com/malware
https://www.amazon.com/Malware-Analysts-Cookbook-DVD-Techniques/dp/0470613033
Both books helps to learn how to develop malware, or is just reversing?
(Hacker's handbook)
It's basically for the beginners who are learning networking
And it's mostly based on the application layer as the title of the book suggests
yes, but what about Practical Malware Analysis and the Malware Analyst's Cookbook? I was seen the index of practical malware analysis and it's look interesting. But idk if it can be used as learning path about the malware development area.
of course, it's for malware analysts as the name suggests but it covers a vast range of the field, one can't define a specific topic for the book...i haven't read it yet but some searching shows it...
like it's basically for the problems one would get while following the field
All these cyber related books have been turning me into a bookworm the past 2 weeks
Its so fun to read
Can you suggest me some
Do you want beginner targeted ones?
i have this old mac 2014, i played a lot of ctf's back in 2018 on it and i have some files from one of events that i can't delete. its technically delete it but i can't empty my bin, its telling me "file or folder in use". long story short is there any good books on mac penetration testing?
TL;DR
suggest me a book similar to Learning iOS Penetration Testing but for mac OS. thanks in advance
It arrived a few hours ago.
Compared to the original, I prefer the colours on the cover.
The Art of Mac Malware and its related website might help
https://nostarch.com/art-mac-malware
https://objective-see.org/
thanks buddy
Gave +1 Rep to @tidal plume
-banspam @proper cairn
🔨 Banned ronaldojuv#8952 indefinitely
Computer networks are a fundamental part of computer science. It enables computing devices with networks to share information with each other by using data links. The most common devices which use the computer network technology are servers, desktops, laptops, mobiles, etc. Computer networking is...
Hey guys, how would you rate this book for a beginner trying to learn networking
let’s go
It's been out since 2018 and there are zero reviews for it on the site. Possibly written for college networking courses, considering the price but doesn't appear too popular. You would probably be better off picking up an updated CCNA book or Network+ book
yes can i get some?
i am at a stage where i am starting to learn networks and linux fundamentals
don't know where to learn and many resources, not sure about anything
and so most of the times not feel like learning to hack
I need some recommendations for good pentesting books, I've heard that this one is supposed to be good "Penetration Testing" by GW, but I also see that it came out in 2014, and a lot has happened since then. (Also takes recommendations on kali linux books with)
You can go for Ethical Hacking by Daniel G. Graham
In many aspects it can be considered an updated version of Penetration Testing book. Though I would recommend you read both.
Alright! ty for the recommendation and i will most likely buy them both 😄
🤘
i don't have any idea on which network+ books are good for beginners (or even if they are any good for beginners...)
internet has very confusing reviews, can i get some suggestions please?
The All-In-One guide is usually highly recommended
https://www.amazon.com/CompTIA-Network-Certification-N10-008-Comptia/dp/1264269056/ref=sr_1_1
The Sybex guide is also highly recommended
https://www.amazon.com/CompTIA-Network-Study-Guide-Authorized/dp/1119811635/ref=sr_1_4
Thank you human!
Gave +1 Rep to @tidal plume
@regal pond from what I've heard, your pretty knowledgeable in this kind of stuff - would you recommend this book for learning more "deeply" into writing more better, efficient, python code ?
I think I have that one
Books like that can be great to have more idioms in your programming repertoire. Efficiency can have different meanings, if you are looking to learn code optimization, learn how to use profiling tools.
any way to get discounted paperbacks of good books?
like the humble bundle got good books but ebooks
Currently a sale on No Starch books on their website, ebooks or print...
https://nostarch.com/
any recommendations for Cyber threat intelligence related books?
is this book good for learning linux fundamentals for "beginners"
beginners= one who knows nothing about linux other than its an OS
i even found one review like this about the book
Havn't read it yet but if you're just trying to learn linux fundementals as a complete beginner i recommend The Linux Bible
It's good to learn atleast some linux basics and get your interest in hacking
But if you're already interested there's better resources to learn linux
Also downloading snort on the latest version of kali linux is a pain in the ass
So unless you're adamant about using kali linux there's much better resources
This is one niche usecase that doesn't mean Kali is bad.
You could try download older versions
I think linux for hackers uses the 2018 version
Don't use older versions
It's a reasonably good book for Linux fundamentals. You might also benefit from The Linux Command Line book by William Shotts. You can get a pdf copy of the book free under a Creative Commons licence from the book's official website or buy a copy from nostarch.com
https://www.linuxcommand.org/tlcl.php
Is there a way to save certain messages for reference later? Like I'm on my phone but I'd like to save a few books here in a personal storage on disc or something similar. Thought discord had this option?
You can hold in a message and copy message link,
Then store that link a text file on your phone.
it says 5th internet edition, so does that mean updated edition, OR 5th part of the whole series?"
the same way, as said by @chrome parcel, linux bible has 10 editions, so does it mean 10th part or does it mean the latest edition?
and is there really an order for reading these books?
like reading The Linux Commandline first then this then another?
or can we read them in any order?
Edition is like an updated version. Publishers use this to keep a book up-to-date, especially technical books and textbooks (for school). 🙂
thank you 🙏
Gave +1 Rep to @west fjord
Yeah I guess that's the option for now. Thanks!
Gave +1 Rep to @hallow star
hi guys can you recommend some books about cloud security
or even not only books, just some material
Practical Cloud Security
CSA Material
Are you also looking for vendor specific books (Azure, AWS, GCP etc.)?
yes, i am
Thanks!
Gave +1 Rep to @bronze mango
Try goodreads, you can make a list of personal books there easily
Oooooh good idea! Hadn't thought of that!
Thanks MN
Gave +1 Rep to @deep nebula
No problem!
Hi guys. I'm a bit confused now. I checked this chat, and all recommend different books. I know that it's impossible just read one book and become professional. But can you give some advices, what to choose, CCNA, Network+ or even some other book?
I mean what to choose first
If it's possible at all
We generally recommend that you should know some Linux, some networks, some Windows, some coding/scripting. The Network+ is usually sufficient for a good grounding in networking but CCNA is more thorough and will give you a better understanding. Choose one or the other. It's usually a good idea to spend some time building networks
Only thing I would maybe say differently is that the difference between CCNA and Net+ is practical portion of the material. CCNA makes assumptions that the reader will be doing exercises either on cisco hardware or on some network emulation tool (like packet tracer). As far as actual theory of modeling of networks, they both cover the same material
Pentesting Azure Applications by Matt Burrough
Penetration Testing Azure for Ethical Hackers by David Okeyode , Karl Fosaaen
Thank you so much! @bronze mango @tidal plume @regal pond
Gave +1 Rep to @bronze mango
?
I guess you’ll have to mention each account in a separate message for them to get rep (assuming your question was about Robocop).
5 min(s) cool down in between each rep.
oh, then
thanks!
Gave +1 Rep to @tidal plume
thanks!
Gave +1 Rep to @regal pond
Thanks for the tip
Gave +1 Rep to @hallow star
Can Anyone recommend me best Linux book so that I can complete in short period of time?
I think you need to be a little more specific in what you're looking for. I can give you a book about Linux that is 100 pages long but it doesn't mean you'll get any value from it. What are you trying to learn? Whats your current experience level with Linux?
@opaque vortex actually I just complete Linux fundamentals yet I want more into it . So acc. To your which is best to me to do now you can recommend that book.

Ahh han, when there's Kyle Simpson's YDKJS yet?
@orchid patio has been warned.
Thanks for the tip, I immediately started on the Sandworm one
Gave +1 Rep to @glacial vector
@modern geode Awesome. Enjoy the read.
Yeah nah on unsanctioned giveaways here
🥳🥳
Sorry for late response. I find the best way (at least for me) when I was learning Linux is to just do things. Set a goal. e.g. Set up a webserver. Then go do it. Figure out the steps to take and learn from there. I still remember the first time I installed Linux (early 1999). I had the first linux book I ever bought. I think it was called "Building an intranet site on Linux" (I think I still have the book). Installed Redhat Linux on a 486DX4 box with SCSI drives. Holy shit I'm aging myself here. After getting the install done I was like. "Okay. Login. Right "root" and password". Now what the heck do I do? 'dir'. Nope. 'help'. Nope. Fun times. If you really want a book are you trying to learn server side of things? desktop? Where does your interest lie in learning?
@glacial vector Hydra has already said that unsanctioned giveaways aren't allowed - to you and for this case specifically.
Huh? Ok. Sorry about that. News to me. Just saw his msg.
Not sure why free physical books is bad, but I respect the position.
getting started becoming a master hacker brilliant book
hi
👋
what book about kubernetes should i read after finishing "Docker in action"?
If you liked the format of Docker in Action, get Kubernetes in Action. Otherwise, the Kubernetes Book, Kubernetes: Up and Running... https://booksoncode.com/articles/books-on-kubernetes
man. i didn’t think about the same publisher. thanks i will try to find it.
Gave +1 Rep to @tidal plume
Has anyone here read Modern Operating Systems Global Edition?
I can't find any proper reviews for it
I've currently grasped half of Linux Kernel Development by Robert Love, but someone recommended MOS to me
hence, I was wondering on what level MOS is
There's loads of reviews for it on Amazon and Goodreads. Someone here recommended it a couple of years ago as well
#bookclub message
https://www.amazon.com/dp/013359162X#customerReviews
https://www.goodreads.com/book/show/166195.Modern_Operating_Systems
Hello everyone! I'm looking for books focused more on Blue team operations/security for beginners. What suggestions do you have?
BTFM
HUGE huge huge topic. Can you narrow it down to a specific domain of blue team ops?
Blue Team Handbook: Incident Response Edition
Defensive Security Handbook: Best Practices for Securing Infrastructure
New Humble Bundle on Hacking: https://www.humblebundle.com/books/hacking-no-starch-press-books-2022?mcID=102%3A638110b0714bc49459092799%3Aot%3A629fd98757e4488cee3dd524%3A1&linkID=638521741a117a23ce05a999
Currently learning reversing, and there are ghidra and IDA pro books🤩
I looked at these, then realised I have the majority of the books.
guy's help me any other alternatives of zlibrary.org.
What are you trying to achieve ?
want ebook
You mean for free, which would usually have to be paid ?
-ban 893710107513331782 Asking for help for pirated ebooks. You can appeal at bans@tryhackme.com
🔨 Banned ⟨ Subham | Avinash Raj ⟩#9355 indefinitely
I have all but 4 of them from past bundles and buying them direct but their books have benefited me so much
A couple of days ago, Defcon released the content creators' style guide for DC31
It discusses some writers, books/movies that influenced the theme for the con
Link to the full guide here with background etc
https://defcon.org/images/defcon-31/dc31styleguide-wide.webp
Snow Crash is one of my favourite stephenson books, huge recommend
Although Diamond Age takes the cake for my favourite stephenson book
Yeah I love his writing and it's pushed me onto other authors. Emily St. John Mandel is one I'm catching up on recently, China Mieville and that whole speculative/weird fiction buzz is definitely my thing
I haven't read either of those, although it sounds right up my alley if it's a stephenson-vibe, so i'll add them to my unmaintainable want-to-read goodreads list LMAO. Yes i love it as well! I've leaned more into the sci-fi genre since reading snow crash, with the Dune series especially (currently my favourite series, and also sort of speculative-fiction-esque). One I really like is the Three-Body Problem, although I'm not sure if it's comparable to the genre Stephenson writes in. Really good sci-fi book though
The women in that book are just terribly written though, stephen king and murakami are experts at writing women in comparison to that book
I think that's probably why I prefer Dune, the whole matriarchy concept is really cool
Yes, Dune is quite a wondeful, the Three Body Problem is a wonderful series. My favourite sci fi series happens to be Iain M Banks' Culture series, was introduced to it while I was studying computing in college many years ago. The Culture series is a loosely connected, chronological collection about a post-scarcity, ai-driven space society and their dealings with other races, frequently whether or not to integrate less-advanced races and how to interfere with them to move things along 🧙♀️ Although there's no need to read them in any particular order, most people read them chronologically, but a lot of people start with the second book, as it's slightly better composed and teaches a lot about how The Culture functions
That sounds brilliant, I'll definitely check it out! I've been looking for a new scifi series to dig into. Thanks for the recommendation
It's definitely a fun set of books, enjoy
As well as the No Starch bundle released on Monday, Wiley has just released a Cybersec Humble Bundle. It's a repeat of the bundle they released this past February
https://www.humblebundle.com/books/holiday-encore-become-cybersecurity-expert-wiley-books
Heyo! Can somebody recommend some modern book on disaster recovery? Intermediate and up. I read Toigo's book, but it's like two decades old, and some stuff is completely outdated and irrelevant today...
Cryptonomicon was the first book of his I read and still my favorite.
I wish more of the Culture series was on Audible. Player Of Games was a heck of a fun ride, so was Use Of Weapons and Consider Phlebas.
Oooh! I need to get around to reading Cryptonomicon :) It's on the list haha
Some good books there
Kevin Mitnick's "Ghost in the Wires" was what renewed my interest in getting into IT/Cybersecurity.
I started reading this today cause of you and so far its been a great recommendation, thank you
Gave +1 Rep to @wicked dirge
You're welcome!
thanks for sharing those humble links, i've just passed the No Starch and Wiley Links to are lass saying Cough Hint Hint - Xmas present
I ordered a hard copy of Metasploit on friday, which should be turning up Tuesday.
is there a 'lifespan' on some of these technical books, like before they are no longer valid in what they teach/preach, if that makes sense?
if so, are their any to avoid and any 'must haves'? I'm a big reader and always looking to expand my personal library
Next year they come out with a new metasploit book
Thanks! Not a bad price with the discount too
Gave +1 Rep to @sturdy slate
Most of the books are very relevant. Some of the older books still provide good information on process/skills etc. You should definitely read thsee books as much as you can.
The Web Application Hacker's Handbook is from 2009 but the author decided instead of bringing out a 3rd edition, he would make a training platform. Check out PortSwigger Academy for some great, and absolutely essential training in web hacking. Hacking: The Art of Exploitation is an old book but still very relevant. Penetration Testing by Georgia Weidman is a great book for learning the basics. Even though some of the techniques are outdated, it still teaches very relevant skills.
Didn't v2 of Weidman get released within the last year or so?
No, we haven't seen any updates about it in a long time. It was her pinned post and there was discussion a year or so ago about book signing but it's not out on No Starch or Amazon. There is an Ethical Hacking book by Daniel Graham that seems to be substituting for it. It's good but the style/structure are a little different
There was talk of the update being on Github, if I remember the threading correctly. I may have that update pinned, somewhere
If you could find it, it'd be great but all I can find is a Patreon. Pretty sure she's giving a lot of training lately and spending time with horses
dang it, looks like $30 coming out of my pocket
web app hackers handbook is such a staple
ughhh I need to budget for these.
I already had the Wiley one from earlier in the year so I'll be picking up the No Starch one tomorrow. There's 4 of those books I haven't had from previous bundles, that's how they keep pulling me back in
yep ripppp
i have a few already too but the pdf is convenient
honestly, I think I'd be better off using my brooklyn library card and noting all the books down to see if they're available to rent
It's always useful having your own pile of them. The No Starch and Wiley Xmas Cyber bundles have always been worth waiting for. I have bought some of those books straight from No Starch
yeah it's very tempting
Has anyone read Andy Greenburgs Sandman? About the Russian hackers?
Sandworm? Yes, it was good
@steel saddle cool I just picked it up from bookstore
Wats the main topic here
if you enjoy that one you will also enjoy takedown by Tsutomo Shimomura....it's an older story but it was one of the inspirations that got me into forensics
@steel saddle I’ll check that one out getting a masters in Cybersecurity so I’m trying to explore all paths
Seems to be share anything worth reading - readers love books 🙂
Laws of human nature by Robert greene is a great book( it's a great book if you apply it in life) great for understanding micro-expressions and understanding yourself why you're irrational and rational. The subconscious mind
Also social engineering the science of human hacking
Open source Intelligence tehcniques by mike bazel
Is a great one too
Thanks for the Humble Bundle info. Just got my books. 🙂
Gave +1 Rep to @tidal plume
looks so worth, don't tempt me ;P
I just finished Station Eleven and jesus what a book! Thank you for recommending to me, it's one of the best books I've read this year. Immediately picking up Sea of Tranquility! :)
Gave +1 Rep to @tidal plume
People who didn't buy this bundle in Feb, have a chance now. There are few great positions there. In NoStarch bundle only Hacking APIs is new, the rest already was available in other bundles. Both bundles are great. :)
Thanks to all of you for sharing these two nices bundles, I've took both. As is it my first acquired books, I am now wondering what is the best order to read all of these books :D. Also, I'm not familiar with reading a book with a computer (I usually prefer paper books), what's your best advice ? Is a digital reader a good option for this kind of books with a lot of schema and code blocks ?
They're both great collections if you haven't had any before. I would suggest the first book you read is 'Penetration Testing: A Hands On Introduction to Hacking' by Georgia Weidman. It's an older book at this stage but most of the information is still relevant, even though some tools and techniques have been superseded since then. Also, reading some of the interviews from the Tribe of Hackers books can be very insightful. There's no need to read them cover to cover in one go but dipping in an out can give you worthwhile info about the different roles in cybersecurity, expectations about learning/education/career potential
Thank you, that will be my first steps :).
Gave +1 Rep to @tidal plume
anyone read if its smart its vulnerable
Oh there's also a TV series of Station Eleven that was on HBO Max... Not sure where else you'd find it
I was reading about it earlier, it looks cool, I'll check it out! I just finished Sea of Tranquility earlier today and she really does not miss
Brilliant progress! Keep at it
I'm taking a small break from her for now but I'll definitely read her other books soon, they're really immersive reads haha
I love how the books kind of tie into each other
Depends on how you read. If you flip back and forth, paper with sticky flags. on a couch with a notepad? A slate laptop or phone or reader would work - I like my laptop on slate mode and phone with stylus for notes. Lighter reading (not a text book) phone is okay for more portablility and short opportunities, with screencaps and writing on the images for notes. For laptop, calibre for epubs.
I like Lithium or Readera on android for them, less good for reference books though
Thanks! I haven't gotten a good epub reader for android yet, but overdrive has worked passibly.
Lithium is aimed at epub iirc, readera does PDFs really quite well
Thanks, I would like to read every where, so phone should be ok finally ? I was afraid of screen size of a phone, which is smaller than a digital reader (but I know a phone is more perfomant :-)). I was very interested in e-ink also, but I find 10" digital reader a bit too costly for me :-).
Gave +1 Rep to @lucid zenith
Thanks for sharing these, I will try it on my phone !
I second readera, I've used it for years, even have the premium version
For phone, I highly recommend epub over pdf. Epub is a text format so images mess up but you can set text size, dark mode or light, and not have to zoom and scroll like with pdf because it being text means each phone screen page is only as much text as fits. I explained poorly. PDF is print size and good for printing, but on phone you have to zoom in and it does not change line length so then you scroll right for each line and it is annoying.
Ok ! I'll try with epub, I'm wondering what is the rendering with books like that (with schema and code blocks...) let's see !
Sorry, I do not know that much about how it works. Good luck with it though. If you are in the US, Overdrive (or Libby) is a system and app public libraries use for ebook and eaudiobook borrowing so if you have a library card it is free to use. Libraries pay per checkout though I think, and the libraries I have access to seem to have best sellers and self help but are missing a lot of books I want like scifi and textbooks... I do still check it though, especially for novels in audio.
isn't metasploit rarily used nowadays outside of CTF envs?
honestly I'd expect C2's are used for everything
Worth it?
For the price, it's definitely worth it. If you were to buy these books directly from No Starch, the price of even just one book would total to more than the bundle price. Also, good to consider your career path, you may find great value in some of these books depending on whether they line up with the type of work you do.
calibre reader is awesome for pdfs and epubs, all the above. free and open source.
calibre: The one stop solution for all your e-book needs. Comprehensive e-book software.
all platforms too
This is what I use on a laptop in slate mode, but the person asking was looking for a mobile device and calibre did not have that last I saw.
Oh, interesting, but it looks like mobile is there now
Android & iOS
android now? That is new. Guess I have a new project for tonight.
Google play store either does not have it or - ahhhh
So there does appear to be a google play app that connects to it, low on the list though, by "tony maro". Might be others too.
Browser read and cord for sync do appear to be marked improvements from when I last looked.
Found another calibre companion app, but neither are free. hmm
e-paper is amazing, and worth every penny. There are smaller than 10'' too. It is really worth to wait and save for it.
All old kindles and nooks had e-ink, and they were cheap, but I am not sure if they sell them still. I use remarkable since 2017, and it's the best thing ever. I got it mostly because it was firts e-ink reader with possibility to write on displayed text. If you don't need that, there are plenty of devices way cheaper.
eInk doesn't work in the dark though, does it?
no, it doesn't, but it also does not burn your eyes off ;)
you need a light
that's the point of e-ink, to not blast a light on you all the time, and be gentle to the eyes.
I like darkmode, but yeah, lowest dim for my phone is too high, but I found an app that does an overlay that dims it more but can't extra dim the notifs and system ribbons. Need a middle.
Nice thanks ! I will try this app on my computer 🙂 I've downloaded readera for my phone
Gave +1 Rep to @frank loom
I saw that remarkable got a second version, but I am a but disappointed with their monthly subscription to get all the features 😦
Do you need to manually add the pdf's
Or does it import from folder?
@near stone You got this book?
Yes sir
Also you woke me up lol
Good night!
It's 5:49 AM 
Well I didn't know.
So, good morning!
This is cool!
Why thank you! 
Gave +1 Rep to @livid gust
Out of all of them, which one do you recommend?
You can import from a folder, drag and drop, etc.,
I'm using Lithium as my mobile solution though, for sure.
You could probably use Syncthing to sync the books so that the calibre folder syncs to the mobile folder
Honestly, haven't read all of em yet, but if I had to choose, Nmap
Looking into lithium, I want endless scroll. I checked up into Moon Reader, which seems to support it.
I got so many books (mostly pdf's) in my collection... college, humblebundle, and a book collection I have no idea where it came from lol
Lol yeah it stocks up pretty quick
Only downside to epubs and pdfs is organization imho
Lithium supports endless scroll iirc
I'll get back to you on that
o rlly? thatd be awesome
i must be overlooking it in settings?
Really thinking about that hacking humble bundle rn
You won't regret
Book Review - Ethical Hacking by Daniel G. Graham. Hands-on book with good coverage of concepts. In some ways it can be considered as the much-awaited updated version of Georgia Weidman’s Penetration Testing book by No Starch Press.
Oh, I wasn't aware there is some subscription involved. I have first version, and I don't pay any sub, and I have all functions I need. Maybe it's for cloud storage or something?
Yeah, it's for cloud storage related services.
The new kindles are preloaded with ads for the cheaper devices, you need to pay more for their device without ads
Yeah, when I got my Kindle, I also paid 10$ more for add free version. There are plenty e-paper readers not tied to any company like this. Also, Kindle Fire is a trash. It's not e-ink. If you want a reader, get e-ink. I don't like Kindle really because it often butchers formatting, especially in technical books, but for regular novels with text only it's good, and it's small, so easy to travel with. I mentioned remarkable because I needed writing on text. They were only brand which had that at a time. Not everybody needs that option.
Not only ! In the features in the sub, there is also the handwriting conversion and screen sharing that was quite interesting... 😐
What about the new kindle scribe vs the remarkable one ? :p
Oh, ok. That's a boomer then. I get cloud storage payment, but to put other stuff into sub is very questionable. I guess they listen to Gates, who does want everything to be in subscription... That's sad part of technology. I got handwriting conversion on mine for free, since I have it long time. Idk about Scribe, since I don't have it. It's probably fine. I am glad that more devices like this come to the market, it will draw prices down.
Seriously, if you just want a reader, get some used one e-ink, like Juggernaut suggested for cheap. If you want remarkable or scribe, save for them, but also ask yourself if you will even use all these additional functions.
I also understand that the Cloud storage service is not free, but not the other features like the screen sharing ><. That's an ambitious strategy for them to do that but that really stop me to buy it.
Yes, for now I'll keep my phone and computer until I'll got some bad lazy eyes 😅. I'll wait some occasion / promotion
It's just the way world is drifting, unfortunately. I hate that trend, I agree. I personally don't need screen sharing in a reader, haha, but I absolutely agree, it should not be paid. You absolutely don't have to have remarkable. Do you even write a lot on pdfs/epubs? I make tones of notes in both paper and digital books, so I got it in preorder, lol, but many people don't need that functionality at all. And don't wait for lazy eyes, just don't. It's not worth it.
Thanks for the advices :-). I'll wait after Christmas, there is usually a lot of resellable things 😁
Gave +1 Rep to @cobalt whale
Alreader might be what you want? It allows scroll or page flip at omce and can dim (easy right edge up or down) lower than the phone screen. Did not see it holding more than one open book at once - have to pick from the folder.
Readera seemed to pull everything, even random PDFs, allows collections (to pull the actual books from that garbage list)
Just played with then for a few minutes though.
Readera swotches page turn from horizpntal (pages) to vertical (scroll) in an easy setting, but does not allow both at once.
Readera sounds nice
Hey guys, what book/resource would you suggest to learn malware analysis / reverse engineering?
huh
Idk if I have that button? Is it on the book itself
ohhhhhh maybe it is
wow thanks so much
that is incredibly helpful
wait
it's actually acting up a bit
only seems to let me scroll to the page length?
It scrolls per-chapter for me? You might have to mess with the settings
Practical Malware Analysis
Also there is a free book which is called Reverse Engineering for Beginners (RE4B) which is pretty good in my opinion, though I have not finished it yet.
thank you i'll give a look!
Gave +1 Rep to @novel locust
Practical Malware Analysis, Malware Analysts Cookbook and The Art of Memory Forensics. The latter two are in the Wiley Humble Bundle collection
thank you. What about the one "learning malware analysis" by packt?
Gave +1 Rep to @tidal plume
I haven't read it but it seems to rate quite well on Amazon and the author works cybersec for Cisco so it might not be all that bad. It came in a packt bundle I picked up in 2019 but those other books I mentioned are the ones I used for malware analysis in my postgrad
understood, thank you again, i will give a look to all of them 👍
Gave +1 Rep to @tidal plume
hello everyone, im planning to take the Comptia Linux, any books would you guys introduce to me ( im very appreciate it), and does this certification worth it ( for my Data Engineer career). Thanks!
If you're considering the Linux+, you might prefer the LPIC series. The Linux+ is a reasonable introduction to Linux and is quite thorough in its coverage. They used to be aligned with the Linux Professional Institute's curriculum for LPIC1 but not anymore. While the Linux+ covers a lot, it doesn't give you the scope to prusue a higher level exam like LPIC2 but at that stage if you're going for a Linux cert, you might be considering Red Hat RHCSA/RHCE...
thank you so much! btw any books about web scrapping?
Gave +1 Rep to @tidal plume
rhcsa ftw
Thank you somuch
Gave +1 Rep to @lean mango
no sorry that's not what I meant
I just meant to say that I like RHCSA, I don't know about any web scraping books
will consider it as a motivation!
Has anyone read this? Should I get this one or the Art of Memory Forensics?
They are on different topics. I didn't read this one, but I can vouch for a quality of NoStarchPress books. I didn't have a bad book from them (Practical Forensic Imaging was cool). The Art of memory forensics is now in the Humble Bundle, even on a mid tier, and it is great book (SDF's video courses are also golden if you like videos). Practical Binary Analysis also appears in bundles sometimes, but not in the current one.
I actually was planning on getting a physical version of the book, but thanks for the info! I thought that they are both about reversing and disassembly, the Practical Binary Analysis for the Linux, and the Art of Memory Forensics for both Linux and Windows.
Gave +1 Rep to @cobalt whale
Hi all,
Had anyone read the Tribe of Hackers books? Any thoughts?
They both circle around forensics and analysis, but they cover different topics. Binary Analysis is about investigating content of binaries, and Art of Memory Forensics is about investigating content of a memory and various artifacts in it.
hi
hey.
Oh, I need that one.
They're worth a pick up to read a few of the interviews from each but there's no need to read them all the way through, just occasionally for inspiration or advice on questions about a career or an interest in any of the areas they cover. All 4 of them are in the Wiley humble Bundle atm
Can we upload books, pdf here
Not if they're illegal, such as sharing without the owner/writer consent
Hi, Any suggestions for a book on ELK stack?
We’ve teamed up with O’Reilly for our newest bundle. Get books like Arduino Cookbook and Raspberry Pi Cookbook. Plus, pay what you want & support charity!
We’ve teamed up with Wiley for our newest bundle. Get cybersecurity books to help you learn how to better protect your systems. Plus, pay what you want & support charity!
also there is... If some might like it
https://www.humblebundle.com/books/c-and-net-ultimate-bundle-packt-books?hmb_source=&hmb_medium=product_tile&hmb_campaign=mosaic_section_1_layout_index_1_layout_type_threes_tile_index_2_c_candnetpackt_bookbundle
Packt books are hit or miss, right?
Yeah I agree
Book Review - How to Hack Like a GHOST by Sparc Flow. It covers exploiting DevOps and Cloud (AWS to be precise) technologies (a nice deviation from other books on the topic).
https://yaksas.in/ycscblog/book-review-how-to-hack-like-a-ghost/
can confirm is nice packs of books to have
I meant, from what I know packt books aren't the best quality so I'm not sure if it's worth getting
But I guess it's nice to have
Pretty much, sometimes they're really detailed and other times they're just like a bunch of Google search results put together
Ah yes okay cool
Just found my Linux reference from 1997. Anyone up for some light reading? Haha
I've got Linux books this old somewhere around here too... I've a bit of a collection dotted round the house
That's awesome. I've got some other ones too kicking around. Old DOS 6.22, Win 95, and C++ books. How I used to learn computer things back in the day!
holy, since 1997 but it looks perfectly!
Packt is hit or miss. If you know that some book is good due recommendations, opinions, etc - get it, but don't blind buy.
unless you like a lottery ;)
Haha makes sense, thanks for the tip!
We’ve teamed up with River Publishers for our newest bundle of books on electronics, science, IoT, circuits, AI, robotics, and more. Plus, pay what you want & support charity!
Oh wow, I had the FreeBSD one back in '96. 😄
I have a lot of nostarchpress books and all of them are great, they don't overwhelm you but teach you a lot of practical knowledge. This is one of the few I don't have. Nostarchpress is a great technical publisher, though
@blissful valley that is not a book nor related to this server
#BookReview - Practical Social Engineering by Joe Gray (@C_3PJoe). It talks about process aspect of social engineering engagements and contains various metrics for reporting the effectiveness of an engagement.
https://yaksas.in/ycscblog/book-review-practical-social-engineering/
Hey guys I need your help. I am looking for books that will help me write "secure code". This sounds so general, it is. I'm looking for a literature that e.g. reveals typical pitfalls, explains patterns or any routines to write as clean as possible code.
" Secure Coding Practices " would be the Keyword i guess hahaha
I would take a look at some of the resources OWASP has. They're really great, and infamous for their top 10 web app vulns list.
Granted, it's geared towards web applications, but many of the principles still apply to other types of applications as well.
Here are some links:
OWASP Top 10
https://owasp.org/www-project-top-ten/
OWASP Secure Coding Practices Quick Reference Guide
https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/
I know these aren't books, but figured they'd help you just as much.
In addition, if you want to write clean, robust code, I highly recommend the Refactoring Guru website. I'm actually going through their course now, and it has completely changed the way I code. It teaches you code smells, refactoring, and design patterns.
Here is their website:
https://refactoring.guru/
Hope this helps! 🙂
The OWASP Top 10 is the reference standard for the most critical web application security risks. Adopting the OWASP Top 10 is perhaps the most effective first step towards changing your software development culture focused on producing secure code.
OWASP Secure Coding Practices-Quick Reference Guide on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
Also, to keep in mind, when writing secure code, you must treat user input as the source of most evil. If you think about it, that's the primary way applications are hacked. By accepting data from the user that is malformed and causes your program to do something it's not supposed to.
Im really thankfull for the last one, didn't know this and it seems to be exactly what I was looking for
thanks mate 🙂
no problem! 🙂
what’s a good book to read to learn about web vulnerabilities?
Web application hacker's handbook
Real world bug hunting
May it be the first of many! It's a fun read
Now I have a lot of information about hacking to add in my obsidian 
Chapter 21 is very good.
Hey @oblique ocean if you want some recommendations on some other books like that one, check out https://danaepp.com/5-books-every-api-hacker-should-read
I review a bunch of my favorite books, including that one. It's a great book. Huge. A bit older. But still very useful.
How are you doing with obsidian? I take my book notes in Notion but I have heard obsidian is awesome.
(DM me if you want, I believe this channel is not meant for this)
is a way to still have access to the mdsec.net to practice what ive learned from book?
mdsec.net is part of PortSwigger Academy. Access to it is free. The academy is the book author's attempt to keep the content up to date and available
https://portswigger.net/web-security
It's a great collection. I've gotten most of them in previous bundles
same 🙂
@teal siren Can we chill with the negativity? You’re harshing my vibe
If they don't like reading, they're in the wrong field 
Yeah it seems I've averaged 100 unique new books a year just from Humble Bundle collections the past 6 years... So much to be curious about!. Getting around to actually reading them all is a different story, but it's definitely making things easier
Who u saying that to with that cute bunny pfp which I want to adopt rn and sleep with it wake up with it go to school with it code with it
Hi
Is "Basics of Ethical hacking and pentrsting" book relevant today?
Patrick E.
It's a very old book and there are more up-to-date books relevant to modern hacking/pentesting challenges.
Penetration Testing by Georgia Weidman (a little old but some really good discussion of concepts)
Ethical Hacking by Daniel Graham
How to Hack like a Legend & How to Hack like a Ghost by Sparc Flow
The Hacker Playbook series (2 is basically a cleaned up version of 1 but all 3 are relevant)
Gray Hat Hacking by Allen Harper
Red team Field Manual v2 (RTFMv2)
Those are some good books worth considering
It's a good book but the author has replaced it with the free PortSwigger Academy to keep that learning up to date
Thanks 
Gave +1 Rep to @tidal plume
yeah, is nice
It's good but the author has produced the PortSwigger Academy website to provide updated and free content to people learning these techniques
Hey all! I'm curious. I dont currently own any books about cyber security as I am very new to the field.
First of all I would like to know how you use the books.. Is it just a read through and you gained some knowledge, or do you use them more as your own "google" to find stuff when you need it?
Second, do you have any suggestions for good beginner books, preferably more to the red side, but I would be interested in good basic blue side books as well.
why software development
some might find it useful
oki, I thought I must learn proggraming to become good security specialist
Depending on where you are in security, understanding software engineering and SDLC practices can be extremely helpful. Certainly not required for all roles though.
I would suggest looking through No Starch Press's collection of books. They have something on every topic. Also Wiley produces a lot of great cybersecurty books on many topics. Sybex produces a lot of excellent certification books and O'Reilly produces lots of great books on almost every topic. Thanks to Humble Bundle and their vast collections I've accrued tonnes of books from several publishers over a few years. They regularly produce cybersecurity bundles some time mid year and around year end/xmas.
I've used them to read and understand topics, to learn techniques and new skills, many of them have been a part of my college work and professional research.
Good beginner books include :
(From No Starch)
How Cybersecurity Really Works
Linux Basics for Hackers
Penetration Testing: A Hands On Introduction to Hacking
(From Wiley)
the Tribe of Hackers collection
Web Application Hackers Handbook (though preferably just use the PortSwigger site)
Gray Hat Hacking (published by McGraw Hill)
There's lots of other books we can recommend as you progresss
Gave +1 Rep to @elder flax
Thank you so much. I will look all of these books up! 🙂
Gave +1 Rep to @tidal plume
Does sb know good Windows books, for beginners? seasoned linux user asking ....
About system internals? Windows internals part 1 by Mark Russinovich.
Can someone suggest me some good books to learn Data structure from scatch.
I personally used that book and it was good but its in c
thanks, im learning in C
Gave +1 Rep to @tropic finch
I'm looking for sm kind of administration and components overview. Thanks for your recommendation! I think it's a book for non-novice users.
Gave +1 Rep to @cobalt whale
Yes and no. :) It may be intimidating at first look, but it talks a lot about how windows is built an how it works. it's just a different angle. But if you look for something more on how to use windows and how to administer it, look for guides on win server and active directory. I cannot point to any particular book because I learned 'admining' it in 'all over the place' style. :D Active Directory by O'Reilly for sure will be good and detailed. You can also see Microsoft Learn modules for MD-100, MD-101 (desktop) and AZ-800, AZ-801 (hybrid: server and cloud). Microsoft docs are usually great too! Also, there is Udemy course by Denilson Bonatti on server 2019, which is pretty cool, with labs and all.
If you decide to get Udemy course, wait for a promo, they have promos every 2 weeks, and you can get it for 10-12 bucks then.
Thanks very very much!
Gave +1 Rep to @cobalt whale
You're very welcome. have fun!
Any beginner friendly book for web pentesting? Something that builds the basics.
Not a book but: https://portswigger.net/web-security/learning-path
I do use portswigger but was hoping for some other resource go along with as well lol
PortSwigger was created as a replacement for the Web Application Hacker's Handbook. Real World Bug hunting and Bug Bounty Bootcamp from No Starch are good books in this domain
:)
How good/relevant is "Blackhat Python" book
Huh, I didn’t know that one
https://neilmadden.blog/2023/02/16/book-review-the-joy-of-cryptography/ review of book about cryptography
hey guys im searching for a book recommendation. A book who can tell me a lot about the basics of windows operating system, security, overall functions, and "good to know stuff". I want to understand Windows and if you have similar books for the Linux world, I would also take them x)
This evening a bundle of No Starch programming books were released. I've acquired and explored some of these from previous bundles or direct from the publisher in recent years and found them engaging and enjoyable. Understanding a little bit about how code is put together can significantly help your understanding of computing and cybersecurity; having an understanding of the process behind the systems we engage with can reveal paths that help you progress in your work, even if you don't intend to programme at a high level
https://www.humblebundle.com/books/think-like-programmer-no-starch-books
Woah nice find!
I want them but they’re way out of my budget right now
They'll come around again I'm sure.
You can always reduce the number of items to say 10 if thats more affordable
Mhm, but all the books I'd use aren't included in the cheaper donations, it's fine though! I have plenty to read
oh packt still exists and still publish more ebooks in tech topics????
shadow kinda abused their free ebook of the day back in 2013-2017 or somewhere around there when they still had thatr
Why wouldn't they? 😆
now to set a reminder to get that bundle in 10 days
the on i linked ?
yuups
shadow will have a bit of a pain to download them from packt if the download is not from humble bundle directly though as shadow has over 700 ebooks on packt:s site
and making a script to download it from there seems weird
that is nice colection ❤️
yuup it has a lot of different machine learning and programming and game development books
one which is test driven java development that shadow has wanted to read some day
it is part of shadows anti library of books/ebooks to read if they ever need to learn something specific
indeed. is nice to have collections of books
oh this is a nice looking bundle
hi guys. I'm starting a job as junior pentester in a week, any recommended books to prepare myself?
Did I post that earlier?
About to finish Social Engineering, Second Edition. Anyone got any other cool books that tell peoples hacking stories
preferably if each chapter was a story of another person
I'd also be interested in social engineering books
Jenny Radcliffe has a book out, called the people hacker.
I haven't read it yet so I don't know how much covers social engineering.
If you're unfamiliar of the name.
It's the woman from the Darknet Diary podcast titled Jenny.
Practical Social Engineering by Joe Gray (No Starch Press) is also a really great book. So fun to read
I have a bunch of books in my library that I personally bought from humble bundle, I went through most of them already and they’re just sitting there, what’s the best way to share them with the community? Can I do that?
if physical books you can sell them at a flee market or to a book store
if digital books you are most likely not allowed to share them
Got it, thank you 👍
Gave +1 Rep to @sand turret
Might want to check the art of deception by kevin mitnick
Already read it
Christopher Hadnagy's books on the subject are very good but he's been banned from DEFCON for his inappropriate behaviour
Seems like a really good bundle, thank you for sharing.
Gave +1 Rep to @young pelican
they do have nice ones from time to time. in cyber and so area
Oh yeah, I have a good chunk already on the pipeline. I got this one a few days ago https://www.humblebundle.com/books/cybersecurity-packt-2023-books and I am going through the CEH book on my Remarkable
that is one of nice bundles indeed. and reading on remarkable2 is nice
new book bundle is out: https://www.humblebundle.com/books/linux-mega-bundle-packt-books
Sweet, another set for the interminable line of books I want to read. Thank you for sharing.
no problem... the selinux one looks interesting
yeah, I am checking it out and there are quite a few ones for me.
What are you all reading on? Kindle Scribe? Remarkable?
I purchased a Ramarkable2 and I like it. There are of course other options. The only thing about the tablet I do not like is that it does not have back light. If you read at night or in dark rooms, you need a neck light or something like that
A lot of people here recommend the RHSCA book by Sander Van Vugt. I am trying to go through it, but it is so hard because of all the mistakes in it. I am using the uCertify course version of the book. Is the original this bad?
These are all in Chapter 4.
I have guided people through the v8 exam using his book, both first and second revision. What errors are you talking about?
At first glance, those screenshots don't look inaccurate.....
What about the awk command shows the 4th line?
ah, i see. It looks liek that version is missing the awk program command to read the 4th line only
both of those are in Chapter 4? Let me doublecheck the copy on my desk.
4.4 and 4.6
From the Pearson editions I have in front of me, those errors do not appear in my copies
Does the Pearson edition have these flashcards?
IIRC Pearson has a very nice online version of the course and study guide that's pretty affordable - when I took the RHCSA, I primarily used that and passed within 45 minutes of starting the exam (typically 3 hours is allocated for the proctor)
It's also the one I recommend to people looking to study with more materials than just the cert guide textbook
I just looked here https://www.pearsonitcertification.com/authors/bio/4b5219b6-d4c0-4ebd-866c-c2132adbc744 and it looks like Pearson is selling the uCertify version.
I wouldn't worry too much about the flashcards, in any case.
The exam is 100% practical, you are better off doing practice exams than trying to memorize stuff with flashcards. There are something like 13 possible exams, doing the practicals and labs from each chapter and the practice exams with a fresh vm each time will be a much greater benefit
I ran the practice exams over and over until I didn't need to look anything up; the only part of the exam I didn't score perfectly on was the VDO and stratis parts, which ended up being a very small part of my exam. Others have said they got more VDO/Stratis than I did, and I've also talked to people who got no VDO/Stratis questions
I see this one with 2 practice exams. Is that the one you are referring to? https://www.rhatcert.com/training-materials/red-hat-rhce-8-ex294-cert-guide/
The 2 exams are a good place to start - Pearson used to have a online part to the book that that 4 additional practice exams
Thanks. I just wasted $63 buying the uCertify version from my college.
Gave +1 Rep to @regal pond
Are there any good books out there that discuss active directory hacking ? Yes I know there are plenty of online resources available but I'm specifcially looking for a book
l
i haven’t seen any for ad hacking, but i used some the official microsoft AD ones a while back which were insightful
design, implementation and security i think
Any recommendations for beginner pen testing books?
I haven't read much of it but the Kali Linux Pentesting Bible looks cool
Hi everyone what is a good language to learn API programming and book?
Hi everyone, i am looking for Book or online courses to learn and understand (just the skills needed for web pentest) PHP, HTML and JavaScript.
Thanks😄
halfway through the this. very educational
Ive read all the book, some of it not good but in general that is a good book. btw if u r going to take the exam i preferred to the the udemy course practical exam
Looking for scrapping techniques, any recommendations guys??
Howzit! I wanted to ask if anyone has any book recommendations. I tried a hands-on introduction to hacking - Weidman, and it was a little difficult because I couldn't get my VMWare to work with KVM for the Android Emulation parts. I am interested in OccupytheWebs The Cyberwarrior Handbook but I cant find a copy that ships to my country.
For context, I'm looking for something that walks through setting up a Virtual Lab environment for practice. Setting up you own vulnerable machines. Id just like to read through the book while completing the Complete Beginner path - Half way starting Burp this week. Maybe this is a bit advanced for where I am at...
Im focused on learning Linux at the moment - using it as main system for about 7 months now. I might actually have to go back and read Linux Basics for Hackers first. The O'Reilly special above seems great.
Thanks for any recommendations.
For Linux I find OverTheWire is great, what types of vulnerabilities do you want to set up labs of? Web? Prive esc? Rce? There are infinite possibilities and each requires a different approach.
Web Pric Esc at the moment, if you have any recommendations
I keep trying to read the Web Application Hacker's Handbook, but I keep switching away before I can finish a chapter
That book is still good but was largely superseded by https://portswigger.net/web-security
guys , can you give me recommendations for books that are related to cyber security (beginners)
Check the pins
If you're just starting your journey in cybersecurity, I would recommend checking out the books available through No Starch Press. https://nostarch.com/catalog/security
For absolute beginners, I would recommend 'How Cybersecurity Really Works' by Sam Grubb. It's about 450 pages and it's really easy to follow.
Then I would suggest 'Linux Basics for Hackers' by OccupyTheWeb. It gives a great introduction to Linux and using Kali, a particularly popular version with cybersecurity people.
There are other publishers like Wiley, O'Reilly and Sybex who publish lots of great books. Keep an eye out for book collections on Humble Bundle, as there's usually a collection of 15-20 books released by one of those publishers that will really improve your understanding.
Other No Starch books I've had lots of fun reading are Cyberjutsu by Ben McCarthy and Hacking: the Art of Exxploitation by Jon Erickson (old and complex but really entertaining and educational)
Thanks for replying 🙂
are no starch press programming books beginner friendly ?
Yes, very much, they have a lot of beginner friendly programming books on lots of topics. A lot of people will recommend their favourite language as a good place to start but picking up a good book in any language will teach you the basics. Learning one language really well makes learning any other language a lot easier. You can start with C or Java or Python or Rust as good examples. All of them are widely used in the world today
thanks alot
If anyone's looking for books, No Starch Press is having an Anniversary Sale with 29% off until April 16th
Thanks for the news
I might be good on no starch books from those amazing humble bundle deals
I need to read them still lol
I'd say that nostarch is very good at communicating to the target audience. Mostly that's beginners, but their more advanced books are also pretty good
I know what you mean, I've got hundreds of books thanks to Humble Bundle, almost all of the security, python, linux, programming, sysadmin books in the last 6 years
Gave +1 Rep to @frank loom
I used The Art of Cyberwarfare as one resource in a project on my postgrad and yeah, there's lots of other books from them I treasure
i heard good things about that one
I think that's the one I started
isn't there a way to sync epub to kindle somehow?
i gotta figure out the best format to read these
bc I love using calibre reader but it doesnt sync across devices
I had actually bought it on Early Access from the site, I have an edition from pre-publishing that's pretty cool
my progress, i guess, but I can just remember the page
wow that's cool
Yeah it's pretty cool, if you buy any of the books from the 'coming soon' section, they give you the latest Early Access edition and every new one as they update it. They're sometimes missing many chapters or have empty sections but you can see how it's progressing as the editor approves things. It's very interesting
I liked cyberjutsu, I picked up the Book of Ninja too. Very interesting concepts.
Are they new updated versions or something?
I'm more than sure I have them...
I contacted the author of cyberjustsu because I wanted to use the front page design for a tattoo, the dude is really nice, hopefully, I will find the time to read the book one day
No, these were 'In Progress' editions sent occasionally if you bought the book a few months before the final book was published. They're incomplete, not all chapters included or even outlined, introductions not added. still needing edits, etc. You get one occasionally before the final version and then on publishing day your copy arrives in your account for download
I have the physical copy of no start penetration testing its very outdated and you need to do alot of googling but its solid
i have the paperback of this its really helpful
https://www.amazon.com/Nmap-Network-Scanning-Official-Discovery/dp/0979958717
Nmap Network Scanning is the official guide to the Nmap Security Scanner, a free and open source utility used by millions of people for network discovery, administration, and security auditing. From explaining port scanning basics for novices to detailing low-level packet crafting methods used by...
Yeah it's true the Penetration Testing book by Georgia Weidman is outdated. There's still some good info in it. there are better books coming out all the time. The Kali Linux Penetration Testing Bible from Wiley appeared in a bundle last Christmas and Feb last year as well. It appears to cover a lot of the same stuff. They're about the same length as well.
The Hacker Playbook series is a good discussion of the strategy of hacking an organisation and the tools you might use. A few years old at this stage but still very relevant in a lot of ways.
And Yeah, the NMAP book is still one of the best books out there to learn network scannign
I've looked @ getting the hacker playbooks
But as you said they are a few years old
I'll definitely look into that testing bible
Thanks for the recommendation
Gave +1 Rep to @tidal plume
The Hacker Playbooks are still an excellent read. You can just pick up 3 and see lots of benefits. They're written to encourage you to experiment with new tools as you progress
But having all three does show you a kind of evolution of the field
It's interesting that you say that
As it has emerged and changed so much over the years
Aswell as broadened into 3 extra fields in the last 5 years
Blockchain
Cloud
Ai
And with networks becoming more & more automated & ai implementation into the sector aswell
It will be interesting to see how it grows
I Will however say that if I have to see another fibre optic cable I will puke
Especially splicing that stuff in the hot sun😢
Picked this up today
From: cats with jobs
Thanks
Im about 70% done going to try finish the rest tonight
Its pretty good
Gave +1 Rep to @sage zodiac
anyone knows a good book for SQL? I know as much as SELECT * FROM Insert table name
Take a look at Burp Suite Academy
This supersedes the web application hackers handbook 2nd edn
Oh thanks mate. I was also watching videos on more advanced burpsuite stuff after I finished the Repeater room
Gave +1 Rep to @karmic gorge
They got learning paths. I’m already loving this
Yep, its quality content, especially at the price 😂
100% agree with you, but it has nothing to do with learning sql. yes they teach sqli, but I think further learning of sql itself is needed in most cases
I also agree with you here and was working off the assumption that he wanted to learn SQLi being the THM discord. 🙂
IMO you are better off learning relational algebra first. Learn the math underlying how RDB works, and all the RDB engines are accessible - locking yourself into a SQL flavor without understanding the mechanics of the commands is going to make transitioning between Oracle, T-SQL, postgres, sqlite, et al much more painful than it ought to be
It's not a book, but what helped me learn is doing the little exercises on w3schools, and then while reading what was written there and on the documentation of the sql server I chose, I made a console app using cpp and sqlite3.
Similar exp here but using PHP and mySQL. Makin a small program will learn ya real good.
Oh yeah W3 is pretty nice. I still hit them up for python stuff that I forget every now and then. Thanks mate
Gave +1 Rep to @lament saddle
Just came across this which may interest you, I haven’t watched yet but it’s on the list: https://m.youtube.com/watch?v=HXV3zeQKqGY
In this course, we'll be looking at database management basics and SQL using the MySQL RDBMS.
Want more from Mike? He's starting a coding RPG/Bootcamp - https://simulator.dev/
The course is designed for beginners to SQL and database management systems, and will introduce common database management topics.
Throughout the course we'll be lookin...
Guys what do you think of this book "C Programming Absolute Beginner's Guide by Greg Perry"
i'm new to programming and I wanted to learn C in parallel with some THM study for cysec
Sounds like it will fit your needs
netcatttttttttttt
I would go straight up for K&R, but that one doesn't sound bad.
was also under consideration, a friend of mine used it as a coursebook in uni
I just started the Absolute beginner one, as soon as i finish it ill move to K&R
K&R! It’s the bible!!
Go straight to the shellcoders handbook and explode your brain
What do you guys think about some of the legacy books like hacking: the art of exploitation, shellcoders handbook, practical malware analysis? I’ve had them on the shelf for ages but I’m wondering if it’s pertinent to work through them given the age of the content? Practical malware analysis used XP in all its screenshots 😅
well one of the hacking books shadow got is from the 1800:s and is about how to cut down trees
it is a great example in how well made instructions are written
Shadow is probably right, it’s gonna be a good exercise in further research and turning the brain on to relate it to a couple decades later
Are you shadow… And if yes why refer in 3rd person
yes shadow is shadow and refers to themselves in third person
the reason is because it is a very old habit that never died and shadow don't feel like stopping now
Shadow is above her own persona to refer to herself. Elevated may her name be
We need a role for “cult of shadow”
This is some Lovecraft stuff

art of exploitation covers almost all the basics you'll need
it does make assumptions though, so maybe #start-here is a better place to begin your journey
alright @regal pond
Other than Stuxnet books, anyone have any other cool books that goes over other APT attacks?
well that is an unnecessarily large link
here is the link shortened to not contain all amazons tracking things: https://www.amazon.com/Linux-Basics-Hackers-Networking-Scripting/dp/1593278551/
i copy the Link & send it
about this book'
yeah... but everything after the /dp/<number> thingy is used by amazon to track searches and people linking to it so that they can figure out who links to what and what they searched for.... it makes the links unnecessarily large and heavy when you can just use the smaller form that takes less chat space on discord.... unless you also wanna avoid the tracking to a bit which this also helps with
ok
ok , Next Time use short link .
please tell about book
well not read this book but it looks like a decent beginner guide book
ok, I am beginner on this field.
There's a collection of Python books from No Starch on Humble Bundle
https://www.humblebundle.com/books/python-no-starch-books
It's a really good book that teaches you lots about Kali Linux and the beginning journey into penetration testing. The author has a good reputation in hacking circles for his work and is a former college professor in computer science. You can get loads of other books in cybersecurity from No Starch or other publishers like Wiley/O'Reilly etc... Check out these books from No Starch https://nostarch.com/catalog/security
Hello everyone! Did anyone start reading Rick Howard's
"Cybersecurity First Principles: A Reboot of Strategy and Tactics"?
It looks like an interesting book and professes the good solid concepts shared in lots of other books about getting the basics right. Usually mitigation strategies are founded on good principals of policy, procedure and ensuring the basics are tackled primarily. These include things like effective device protection, such as password policies/rotation, device firewalls, antivirus, network segmentation/traffic routing/firewalls/proxies/filters, identity and access controls, separation of duties, Backups, Disaster Recovery etc.
These concepts are covered and encouraged indepth in lots of the literature from Sec+/SSCP to CISSP, hacking and cyberwarfare mitigation books. I'm sure it would make an interesting read and it does seem to cover some interesting topics and techniques and the author is well experienced and qualified to be considered an expert in the field
Because we are so many here and I hope for the swarm intelligence I wanted to ask if anyone here has good literature or links to learn C++. Preferably according to the latest C++20 standard.
Maybe someone here already has the C++ hell behind him and can help me with his experience xD
I think learning through projects while maintaining high curiosity on the way is the best way to learn cpp, and any info you need on the way will be available via Google or chat gpt.
This website is gold, thats exactly what I needed. Projects to get familiar with stuff! Thanks a lot Friendo!
Happy to help! Feel free to dm me if you need anything
many of the references and library documentation on cplusplus.com is inaccurate; cppreference.com is much better.
good to know! I have used both in the past but didn't remember the name of this one, thanks for correcting me!
Gave +1 Rep to @regal pond
for ones who are in AI madness
https://www.humblebundle.com/books/ultimate-guide-to-chatgpt-ai-chat-bots-books
I purchased the art of exploitation but no longer have a disk drive. Would anyone happen to know a place on the internet where I can download the CD contents?
haha nvm. I found it.
perfect, i literally just started Colt Steele's python course today too 😆
Colt Steele is a good teacher
Are there any good books which cover the majority of cyberlaw/ Information Security Law in the United States?
Need a updated one
There are probably lots of books. You need to understand the Computer Fraud and Abuse Act, US Electronic Communications Privacy Act, USA PATRIOT Act, US Homeland Security Act, US Controlling the Assault of Non-Solicited Pornography Act, US Intelligence Reform and Terrorism Prevention Act, the Council of Europe's Convention on Cybercrime, the UK Computer Misuse Act, the EU GDPR and lots of other legislation on things like intellectual property, privacy, healthcare, child protection, data protection and handling laws and a bunch of other stuff. These are discussed in certs like the CISSP but you should be aware of the ones in your locality and if you really need help, you should speak to a lawyer
Hello fellow bookworm peeps,
I want to purchase a book, my end goal is red teaming but the goals in between follow up with the offensive certifications. So any good books you might suggest me to start with? I'd love to have some time off screen.
There are lots of books about penetration testing that are worth reading. No Starch Press publishes lots of great books on various aspects of cybersecurity. Georgia Weidman's Penetration Testing book is quite good though some info in it is a little outdated. They have lots of other good books on various cybersec topics https://nostarch.com/catalog/security
The Hacker Playbook series by Peter Kim is very good. Book 3 is a great book on its own but they make a great collection
I recently got grey hat hacking 6th Ed and while limited in its scope it’s a very good book
Yeah it's an interesting but easy read to start off the process
Gave +1 Rep to @solid walrus
which book is best for hacking
It's a broad topic. Could you please be more specific?
What are some good books that would help me learn more about cyber security and basically how the hidden stuff of computers work?
Thats the cert I'll need to get a potential job in cyber sec right?
Does mention how some malware likes to hide behind mass storage
In a very peculiar way
Go to #cyber-and-careers and ask that question
Ok, well ty for the suggestion
Also, is the SOC Level 1 Path from TryHackMe
All about how malware hides and how to detect it
Thank you. Just trying to find all the free rooms I can soak up at the moment
About 88% of their rooms are free so dive in
No Starch Press does loads of great books about cybersecurity and they currently have a Python collection on Humble Bundle
https://nostarch.com/catalog/security
https://www.humblebundle.com/books/python-no-starch-books
Thank you so much. Just ordered them
Gave +1 Rep to @tidal plume
Keep an eye on Humble Bundle because they release a lot of great collections. Thanks to Humble Bundle over the last number of years I've acquired piles of books (hundreds and hundreds) from No Starch, O'Reilly, Wiley and other publishers on all kinds of tech topics...
Gave +1 Rep to @wheat solstice
Someone suggested this book to me today, and I was curious to see if anyone has been through it? I feel like it's a bit "text bookie". https://amzn.to/3pSo8tY
for people interested cloud stuff humble bundle has a cloud bundle both with aws and azure books and videos
https://www.humblebundle.com/software/complete-cloud-computing-bundle-software
Any of the books in this vein are going to be quite a bit "text bookie". This discusses real-world advanced analytics for crime detection. It's made for law enforcement, counter terrorism and federal agents and that sort of level. These people have no sense of humour about the content of these kinds of books. It's not a casual read
there is no one cert
I meant 'one of'
Myea i guess, there's so many of them nowadays
That book you suggested is not a certification book and it's not a cybersecurity book. It's a data science and criminology book. If you want to discuss cybersec certs, we've discussed a lot of them in #cyber-and-careers 🙂
Got my set, thanks!
Gave +1 Rep to @tidal plume
Sup guys, any recommendations on web hacking books?
Web hackers handbook or skip it and do the free portswigger academy
Web Application Hacker's Handbook (https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470/) is still considered the bible for web application hacking. It's outdated, and desperately needs a 3rd edition, but the fundamentals are all there. Just a tip, don't try read it as a book from cover to cover - use it as a reference guide whenever you want to look something up - otherwise you're gonna get bored very quickly.
It's not getting a third edition, the author felt the same way and so produced the PortSwigger Academy. The academy is free. The certification is cheap but you then need a full price copy of burpsuite to do the exam (not all the academy stuff)
Hello everyone, I have started reading The Shellcoder's Handbook and want to go through the examples on my computer as I read. I am having some trouble getting the same compilation results as the book, I guess because of the machine that I am using. Is there any VM that you know I can use for this purpose? I have tried AoE's machine as well as some old ubuntu distros but can't connect to the Internet to download the source due to what looks like a problem with ssl certificates.
Have you confirmed that your cpu type & architecture and is the same as the book? e.g intel / 32bit
Or perhaps your compiler has inbuilt overflow protections and you need to use a switch to disable it?
Refer to this for two suggestions that may fix your issue: https://www.reddit.com/r/netsecstudents/comments/4va2tj/help_runing_the_shellcoders_handbook_examples/
15 votes and 1 comment so far on Reddit
Yes, I have already compiled with the flags -m32, -fno-stack-protector -z execstack -fno-pie
In fact, the issue is that I can't put breakpoints on it with gdb, the compiled program runs as expected outside gdb
Not explicitly a security book, but has a very security-focused approach: This book really helped me with AD (both for my blue team job and for learning offense)
https://www.packtpub.com/product/mastering-active-directory-third-edition/9781801070393
Highly recommended
@livid relic That is piracy. Please do not offer to share copyrighted content here. This is the one and only chance you'll get over it
My apology!
Ty, But i actually wanted something that i could read on a day-to-day basis on the bus/subway
But thank you anyways, i will defo look after this one too
Gave +1 Rep to @earnest apex
Haven't really read anything from CRC Press, anyone know if they're generally good?
Yeah they do a lot of really good books on various topics
Hey, i'd suggest https://nostarch.com/how-computers-really-work and https://www.goodreads.com/en/book/show/44882
Yeah I got the python one from the Humble Bundle. I'll check out the other one too. Thank you!
Gave +1 Rep to @cobalt blade
These are both superb choices. I might also add, once done with either of those, Bryant and O'Hallaron's Computer Systems: A Programmer's Perspective for a full-on textbook
From there the sky's the limit in terms of getting into systems.
I've been working my way through How Computers Really Work - I've learned a ton!! Kinda stalled out on one of the last breadboard projects though, need to get back to it and figure it out. I definitely agree that it's a great recommendation!
I really want to follow along and do the project, I struggle to fully integrate these concepts by just reading, especially the whole electrical part. But def a great book to understand the inner workings of a computer.
I had a difficult time finding some of the parts and couldn't get one of the IC chips, but luckily that one was only for one project. You should definitely give it a try if you can though, it's fun and frustrating and empowering when you actually make the things work. I will say that the instructions are a bit sparse, especially in the later projects, and there aren't really "answers" anywhere. The photos are all in b&w and not great, so if you have trouble deciphering the wiring diagrams, it is difficult to troubleshoot. I had to have my dad help me out a bit (he was an electrical engineer) but he was pretty excited about it in typical dad fashion, he even gave me his old multimeter 😄
Awesome! It is def on my list of projects, as I think this is the only way my brain can truly understand how everything works. Just need to find all of the parts, and time haha
Excuses excuses ^^
