bookclub

[zinc vine]

Hii guys I want to learn free el ethical hacking h from basic , anyone have idea Abt free alternative. ?? Plz DM and reply me..

[glossy mango]

I tried to make an account and buy that humble bundle with paypal and my order got cancelled and my account got disabled. that sucks

I'm trying to find something to read when i am too lazy to do labs, but all the books i am finding that aren't super basic want you to set up labs. Is there anything you can just read in a lazy way when you don't feel like putting the effort into spinning up vm's and stuff but you still want to read about cybersecurity that isn't just the same basic things about enabling 2fa and not clicking on phishing?

[tawdry dagger]

I want the books for Operating system

[tidal plume]

You can check out this THM blog post to get started with free rooms on the platform:
https://tryhackme.com/resources/blog/free_path

[tidal plume]

You should get in touch with Humble Bundle and/or your bank about such things. They might be able to help you

[glossy mango]

I opened a ticket but they haven't responded yet

Makes me feel better about my company's support when it takes this long to get a response on a ticket though

[desert monolith]

Krebs on Security!

[glossy mango]

I'll check it out

[tidal plume]

No Starch has lots of books discussing various operating system topics. O'reilly, Wiley, Sybex, APress and others publish lots of books on all kinds of computing/operating system and software topics

https://nostarch.com

[glossy mango]

I think i read his blog before and i liked it

[glossy mango]

Thanks

[hidden bough]

Gave +1 Rep to @desert monolith (current: #625 - 12)

[glossy mango]

Oh I guess you did mean the blog

[tawdry dagger]

Thanks

[hidden bough]

Gave +1 Rep to @tidal plume (current: #19 - 582)

[tidal plume]

If you're new to Linux, perhaps Linux Basics for Hackers by OccupyTheWeb would be a good way to get started

[zinc vine]

Really thanks buddy

[hidden bough]

Gave +1 Rep to @tidal plume (current: #19 - 584)

[zinc vine]

Um I wanna download youtube in 1080p in free

Anyone knows the idea of Abt that?

[unreal obsidian]

im knew i have started thm got a basic knowledge any tipd

tips for a begginer from aus

[pure bloom]

I'm guessing this is the right place to ask this? I'm in the UK and a few weeks ago I came across a cyber security magazine in TG Jones (formerly WH Smiths). I cannot remember the name at all. Does anyone know of any physical print magazines that would be sold in shops in the UK?

[obsidian stirrup]

Telegram bot

[rain latch]

I dont think we can help with that

[tawdry dagger]

I have just basic knowledge of linux

[tawdry dagger]

Thanks

[hidden bough]

Gave +1 Rep to @tidal plume (current: #18 - 591)

[tidal plume]

The Linux Command Line by William Shotts is a great book to learn how to work in the command line. It can be downloaded free under a Creative Commons licence from the book's official site, or you can buy a copy from No Starch

https://www.linuxcommand.org/tlcl.php
https://nostarch.com/linux-command-line-3rd-edition

[tawdry dagger]

Sure

Thanks Buddy

[glossy mango]

Has anyone read this book and is it any good

i don't know why it says black hat

[sand turret]

lots of pentesting material uses black hat in their titles

[glossy mango]

i guess it's the alliteration

[lethal hatch]

they just wanna sound badass

[tidal plume]

This is the contents page of the book. It was in a recent Humble Bundle collection from the publisher. It basically explains all the steps and a method to script each phase of a pentest. It's pretty easy to follow along

[glossy mango]

oh cool i wish i would have seen that bundle. I will probably get it for full price lol

[glossy mango]

thanks

[hidden bough]

Gave +1 Rep to @tidal plume (current: #17 - 593)

[humble goblet]

Or wait like 10 months for the next one 😄

[zinc vine]

Hii

Guys

Can someone guide me plz ?

[tidal plume]

I've bought several books directly from them, and a whole bunch of their different hacking, coding, linux and machine learning bundles over the years

[tidal plume]

You can ask your questions and be directed to the correct channels, but the best thing to do is to #start-here

[glossy mango]

That's too long to wait. I'm not that patient lol

[glossy mango]

My account got disabled somehow last time i tried to buy a bundle and their support team still hasn't gotten back to me. It was weird

i was using paypal. it should have worked

[willow wren]

I wanna learn bash scripting to the advance
Any idea ?

[tidal plume]

If you don't hear from them after a couple of weeks, get back in touch with them

[glossy mango]

I might, but if they are so busy it takes this long for anyone to answer I don't really want to bug them more

I thought they were finally responding but it was just another automated email that they have my ticket and will start working on it soon

It's been about a week i think

[tidal plume]

Learning the bash Shell: Unix Shell Programming and the Bash Pocket Reference should cover everything you need. Even one of those books would teach you quite a lot

[tidal plume]

Well if you've received the acknowledgement then they'll probably get back to you before long

[glossy mango]

yeah i hope so.

[gritty garnet]

Book reccomendation: The Art of Intrusion by Kevin Mitinick. It isn't an instruction manual, so dont expect to get any hips on how to use tools, but it is full of stories of all kinds from different hackers and what they did, how they learned their skills, and sometimes how they got caught and prosecuted after doing some shady stuff. If you're into hacker stories and interested into what can be pulled off by some of these guys, and how dangerous a little knowledge is, this is a page turner.

[queen tusk]

Which are the best books for learning cybersecurity and ethical hacking from the beginning... Could someone help me.... ?

[tidal plume]

You might also like some of the ones listed here: #bookclub message

[tidal plume]

You can get 'The Linux Command Line' book from its official website as a free download. Learning Linux is very important. If you want a print version of the book, go to https://nostarch.com
No Starch also have lots of other good books on Linux, networking, cybersecurity fundamentals, hacking, cryptography, python and other topics.

There's a Humble Bundle collection from Wiley that has a bunch of books on many of those topics as well as Tribe of Hackers and Blue Team Toolkit, two books I'd recommend if you're new to the field:
https://www.humblebundle.com/books/cybersecurity-wiley-books-2025

If you're just starting out I'd suggest following the instructions at #start-here

[split atlas]

Any books on cyberlaw + digital forensics?

[hallow star]

I mean, lots.

What sort are you looking for?

[ashen gale]

Anybody with a pdf of malware development for ethical hackers by zhassulan Zhussupov

[split atlas]

Honestly anything... surprise me lol

[tidal plume]

The Linux for Seasoned Sysadmins Humble Bundle from O'Reilly is back up again for anyone who might have missed it. I picked up this collection a good while back. You don't need to be a seasoned sysadmin to learn from these books. Books like 'Learning Modern Linux', 'Efficient Linux at the Command Line', and 'Practical Linux System Administration' could get you quite comfortable with it. There's lots of other good books in it too

https://www.humblebundle.com/books/linux-for-seasoned-admins-oreilly-books-encore-2026

[undone grove]

@tidal plume You seem to read a lot of books. Do you usually read them cover to cover, selected parts or mostly just use them to look up things? Reading these technical books takes a lot of time, compared to novels, since you need to be very focused and perhaps re-read some sections to understand. Last year I only managed to complete three books related to hacking.

[tidal plume]

I've read a lot of computer books over a lot of years. I read some cover to cover, others selected parts or research. And yeah they can take a long time. I've done a lot of technical work so I can breeze through a lot of it, but a lot of the books too require you to be doing something active, like setting up a server or applications, etc. Three books related to hacking is good going.

I do have many hundreds of books thanks to Humble Bundle, but I haven't read anywhere close to all of them. Books from particular publishers tend to have a format and design to them that makes it easier to decide how you treat a particular tome. There's a lot of dialog, plenty of instructional info, technical concepts, and it's up to you to pick and choose.

[hidden bough]

Gave +1 Rep to @undone grove (current: #2335 - 2)

[undone grove]

Yes, but there are so many interesting books in these humble bundles, but I already have bought bundle books for a decade, at least at my current reading rate 😆
Most of them will probably be too old and never read.

[tidal plume]

A lot of old books still have relevant info. Things change in the field, but not everything changes quickly

If I'd been reading one book a week from humble bundle the last decade, I'd have a hell of a lot of knowledge, and no time for anything else, and I still wouldn't be close to the end! 😆

[smoky karma]

One or two hours a day goes a long way

[reef pike]

Yeah I am in the same boat. Looking at my kindle app I have 290 books that Ive grouped as "interesting", so if I managed to go through one every two weeks thats 12 years 👀

[tidal plume]

Yeah but don't think of it as a burden you've placed on yourself, just adventures you haven't had yet. If you read a book a week from the age of 8 to 80 you'd read 3744 books. Most people read far fewer than that, but that's not the point of it. You read what interests you at the time, or what's important, or what's popular or what's obscure. Sometimes the books you'd like to read, but don't get to can be an interesting part of your adventure

[reef pike]

Hear, hear!

[short carbon]

I have a bad habit of reading half a book and moving onto another one 😄

[timber turtle]

Same.. so many books started xD and I bought one: "Finish what you started" =.= did not finish that one

[short carbon]

I think it's due to seeing another book that looks interesting so I move on and then forget to go back to it

[timber turtle]

Riiight? My bookshelf is crying at me xD I'm at the point where I can't look that direction xD just going to read the ones near me bed

[rain latch]

Not IT related but ive heard kafka is very good

[timber turtle]

It was on the list. :)

[rain latch]

What list? ( i might be dumg)

[timber turtle]

The reading list... books I want to buy

[rain latch]

Ohhhh

[timber turtle]

Currently I'm switching between these: "Physics if the future" by Michio Kaku, The Great Story of Math: From Prehistory to the Present Day" by Mickaël Launay, "Starry Messenger: Cosmic Perspectives on Civilization" by Neil Degrasse Tyson and George series, by Lucy Hawking :) (don't have the entire series but I like space story for kids)

[tidal plume]

Yeah I have the Complete Stories, Complete Works, Letters to Felice, Letters to Milena, and of course, Kafka on the Shore by Haruki Murakami

[desert monolith]

I like the Trial by Kafka

[wet cargo]

Hey guys, i have a question about Packt/O’Reilly books, they seem to have a terrible reputation, does anyone here has experience with books from those 2 editors ?

[timber turtle]

I wasn't aware of that.

[reef pike]

O'Reilly are usually decent, not sure where you've heard they're terrible. Packt have a bit of a reputation for not being great overall, but I wouldn't rule out Packt books completely. Typically I will pick them up (usually humble bundles or through Fanatical) if there are topics I'm vaguely interested in. Look at the author not the publisher for them.

[glossy mango]

O'Reilly is awesome. where did you hear that they have a bad reputation

I have no idea who Packt is though

They write a lot of good programming books that are thourough and accurate and are much less dry than most alternatives

[wet cargo]

A bunch of guys were talking bad about them in a HumbleBundle subreddit, and they were a lot

they do a lot of humblebundle so idk why they get all this hate

[glossy mango]

weird

[tidal plume]

Yeah it's true, Packy can be kinda hit or miss. They seem to have a lower standard for the kinds of books they'll accept, but they do have some wonderful books as well. O'Reilly has always had a great reputation for IT/Programming books. I've used them myself many times over the years.

The thing is that, because they both tend to cover a lot of different topics, and the topics themselves can be quite involved, they can require a lot of work, and don't always have the answers a particular reader might be loojking for. Frequently an application or solution might be able to do something it's not necessarily promoted as, or a niche use might have some traction, but it's not covered. There are also several ways to read a book. So it might just be over their heads.

I wouldn't take the ramblings by a bunch of redditors as gospel. Whatever their reasons, if they have access and decide not to buy something, that's their choice

This is the Playbooks and Workbooks bundle from O'Reilly
https://www.humblebundle.com/books/cookbooks-playbooks-and-workbooks-oreilly-books

And this is the Cloud Solutions Architect bundle from Packt
https://www.humblebundle.com/books/ultimate-solutions-architect-cloud-bundle-packt-books

[modern elk]

I'm haf convinced Packt authors pay for their books to be published to add to their CV's

[vapid jackal]

Whats a good book about cyber/redteaming?

[tidal plume]

Red Team Development and Operations. The book is full of excellent information on the topic. It's one of the books we used in college on the topic. The website is full of useful info as well

https://redteam.guide/

[tidal plume]

Have you checked with your local library?

[scarlet mesa]

ensihoito in English is "emergency medical care"

[true rock]

Hello yall I am wondering if yall have some recs on cyber security interview books!

[tidal plume]

I'd suggest reading some of the interviews from one or more of the Tribe of Hackers books. There are a number of books on the topic, which I haven't read. My experience of cyber interviews involved being able to discuss technical matters, company/client needs and project goals, your experience and ability to perform in various aspects of a role, your work and study history, any projects/blogs/events/books you might have experienced. Perhaps they'll do a technical test, so maybe a bunch of technical questions or a practical assignment related to the job you're going for...

There's plenty of websites about the topic of interviewing for various roles and what you might be asked

[desert monolith]

https://tenor.com/view/ban-hammer-yoshi-mario-discord-gif-12444703281338986867

[sick wraith]

Is that a name of a book? Sounds quite good

[tranquil parrot]

Guys, any books for SOC?
Please let me know if you find any good book pdf for free

[tidal plume]

Here's some good blue team books. You can buy them from many stores. We don't advocate book piracy
#bookclub message

[tranquil parrot]

Thank you....

[tidal plume]

You might find some use out of this collection from Packt on Humble Bundle:
https://www.humblebundle.com/books/ethical-hacking-cyber-defense-bundle-packt-books

[languid sandal]

😫

[tidal plume]

Big Linux bundle from No Starch on Humble Bundle atm. The higher price of the bundle is because of the two books:
Linux Programming Interface, and
System Programming in Linux
Both of which are individually normally $80-100, but you always have the option to pick a smaller bundle, including things like the newest editions of:
The Linux Command Line
Linux Basics for Hackers
How Linux Works
and more...

https://www.humblebundle.com/books/linux-good-stuff-no-starch-books

[chrome parcel]

good find, thanks! 🙂

[hidden bough]

Gave +1 Rep to @tidal plume (current: #17 - 628)

[wide cypress]

hello is there someone who can help me to get free resources for learning cybersecurity , i appriciate for the help

[wet cargo]

https://www.hacksplaining.com is good for web sec

[last tide]

I too want

[burnt pulsar]

ping THMDC.za.tryhackme.com
ping: THMDC.za.tryhackme.com: Name or service not known - doesn't work in the attack box for ad enum

[burnt pulsar]

please update the bloodhound tasks they are outdated

[tidal plume]

This is the Book Club. We talk about books in here. If you're having problems with a room, or a room has a bug, visit https://discord.com/channels/521382216299839518/1333993673381253162 so it gets seen

[native totem]

Which book would you guys recommend for me? I started studying cybersecurity last year but i'm putting on practice what I learned this year doing simulations and THM rooms (until someone finally give me a infosec job...)

Something like "Cibersecurity for dummies" for example

[tidal plume]

You should check out the books from No Starch, Wiley, Sybex and O'Reilly that are frequently discussed here. You might consider Cyberjutsu or Linux Basics for Hackers from No Starch (see the Linux bundle above), the Tribe of Hackers books from Wiley are worth checking out

APress has released a series of Agentic AI books in this Humble Bundle collection:

https://www.humblebundle.com/books/intelligent-agents-agentic-ai-and-large-language-models-apress-books

[native totem]

Cyberjutsu?

Cool name

[tidal plume]

It's a cool book!
https://nostarch.com/cyberjutsu

[drifting finch]

Hey guys... do you know any good books on Cybersecurity that would help me learn a bit and get more knowledge in the field? physical book

[hasty jungle]

There are tons of books ...
bug bounty bootcamp vickie li
Linux Basics for Hackers
The Tangled Web: A Guide to Securing Modern Web Applications

[drifting finch]

ty

[hidden bough]

Gave +1 Rep to @hasty jungle (current: #824 - 9)

[broken ridge]

Hey everyone
I’m GreenBA here:), working my way into Business Analysis with a background in banking ops and ICT. I’m really curious about how AI and cybersecurity connect with areas like KYC and AML, and I’m hoping to learn, share, and grow with others here. I’d love to find a mentor or team to help me follow a structured path toward my goals. Outside of tech, I enjoy creative problem‑solving and even improvising recipes when I can. Looking forward to connecting with you all.what book can i start reading? is there anyone we can discuss the book with aswell?

[cold shard]

Just sharing, I'm reading the Portuguese version of The Art of Network Penetration Testing by Royce Davis

book (en): https://www.amazon.com/Art-Network-Penetration-Testing-company/dp/1617296821 (just the source, i'm not promoting)

If you have the opportunity, I recommend; it's excellent content with a practical open-source lab via Vagrant and Ansible

[jovial scaffold]

@gentle swallow can someone do something about these spammers

[serene flint]

Hello, What books do you recommend about money truth, or financial literacy?

[sharp dock]

Think and grow Rich

[gentle thicket]

Andrew Tanenbaum Modern Operating System

[wet cargo]

Andrew Tate if he liked tech

[languid sigil]

Hi everyone,
What’s a must-read book for an Information Security student?

[fiery mountain]

I also live in the phillipinea

Phillipines*

[supple cliff]

I'd say the web application hackers handbook. There are online resources as well

[glad fern]

@frigid blade Please slow down. Further spam will result in a short timeout.

[winged mauve]

As possible 😁

[solemn jewel]

welcome

[silk crater]

https://nostarch.com/mangacrypto

https://nostarch.com/mg_databases.htm

[solemn jewel]

What should I read first: social engineering, the web hackers handbook, tribe of hackers?

[silk crater]

Social Engineering

That book was my bible as a kid

Taught me how to understand basic emotions

[solemn jewel]

i had the same experience with How To Win Friends and Influence People

[north spade]

@hoary mortar seeing as we've got this now, might be worth writing and pinning a message as a guideline for how to use it? i.e. no piracy or uploading copies of paid-for books -- just discussion and reference to said books (assuming that is the stance of course). Similarly, it shouldn't be a problem to share free books, I would assume?

[hoary mortar]

ezpz

[tidal plume]

I love humble bundle. In the last couple years I've collected hundreds of books from No Starch/O'Reilly/Wiley/Packt/CRC. IT books usually drop Monday 19:00 GMT

[north spade]

Think they're better known for their games, aren't they? I agree though -- their book bundles are superb. Just got the new Cybersecurity 2020. It looks amazing.

[errant sundial]

Bought top tier of this humble

Let's go

[north spade]

Yep! I have no idea what to read first!

[solemn jewel]

I'm readying social engineering atm

really good so far

[silk crater]

I read some weird books as a kid

[errant sundial]

I had to learn all the emotional stuff

[silk crater]

Like this one that taught how to biomechanically engineer a super virus to wipe out the population

[errant sundial]

I think a social engineering book would have turned me into a little psychopath

Well, sociopath

[silk crater]

I read the one Bee is reading now and MItnicks one as a kid

[north spade]

Recommend it?

[solemn jewel]

what

this social eng book

[errant sundial]

I got the whole bundle, so like I'll read them in time

[solemn jewel]

taught u how to biochemically enginner a super virus

[silk crater]

It most certainly turned me that way

Nah, a different one

lemme find it

although

if I'd had said yes it still would have been true

because lies and deceit

Then there was this one book on how to start a drug cartel

[errant sundial]

This shellcoder's handbook is exciting me

A lot.

RevEng, windows token things

[silk crater]

I wonder if I can use Humble Bundle Partner money to buy it

[errant sundial]

Cisco IOS exploitation

hnnng

[silk crater]

Like I could probably get the funds released but that requires US tax forms and ew no

[zenith plank]

This shellcoder's handbook is exciting me
I have its ebook version, it's pretty cool.
I bought a huge bundle of ebooks a while back, I got quite a few SE books, RE, the Shellcode's handbook, Malware analysis too

[robust salmon]

Shellcoders handbook is a great book ^

i need to make time to read it though

[tidal plume]

A book about organisational and team strategy, not directly about but makes reference to hacking/cybersecurity methodology. Partly about playing devils advocate and recognising alternative solutions to recognising and solving problems that can otherwise lead to stagnation. Someone mentioned it last night in 2600 so I played devil's advocate but read it cover to cover. Good fun.

https://www.amazon.com/Red-Teaming-Competition-Challenging-Everything/dp/1101905972/ref=mp_s_a_1_1?keywords=red+teaming+bryce+hoffman&qid=1582045214&sprefix=red+teaming&sr=8-1

[sage cloak]

Hello there, I think this is the right place to leave this: https://www.humblebundle.com/books/cybersecurity-2020-wiley-books?hmb_source=navbar&hmb_medium=product_tile&hmb_campaign=tile_index_2 I hope it will useful!

[errant sundial]

Been posted a few times, I recommend people pick up the 1st tier and more if they're interested

[zenith plank]

Oh that's the 2020 version of the bundle I got a few years back heh

[solemn jewel]

Really liking social engineering atm

[tidal plume]

Oh that's the 2020 version of the bundle I got a few years back heh
@zenith plank

Yeah i got one too but there's a couple I don't yet have :)

[zenith plank]

So they did change the stuff inside of it, I'll check it ou

@solemn jewel the social engineering books are really cool, yes !

[chrome parcel]

After browsing one of the books from 2020 CyberSecurity Bundle it looks like Adam Shostack(Microsoft) has created a card game. Named "The Elevation of Privilege threat modeling game... Free to download. https://www.microsoft.com/en-us/download/details.aspx?id=20303

Elevation of Privilege (EoP) is the easy way to get started threat modeling. It is a card game that developers, architects or security experts can play.

[solemn jewel]

@errant sundial https://nostarch.com/blackhatgo

[errant sundial]

Oooh

It's already the tool I go to for custom HTTP stuff

[solemn jewel]

This looks great https://nostarch.com/miningsocialmedia

[errant sundial]

If that go book wasn't $30...

[silk crater]

No Starch is worth it tbh

[solemn jewel]

https://www.vice.com/en_us/article/bvgy85/how-big-are-jeff-bezos-feet-an-investigation

Excellent use of OSINT imo

[frail quest]

More like "I have so much free time that I'll make money out of somebody's divorce and his new gf's picture"

[tidal plume]

Well that's the most time I've ever or likely will ever spend reading about another man's feet...

[hard echo]

assda

[old pier]

Hello there, I think this is the right place to leave this: https://www.humblebundle.com/books/cybersecurity-2020-wiley-books?hmb_source=navbar&hmb_medium=product_tile&hmb_campaign=tile_index_2 I hope it will useful!
@sage cloak Thanks for this. Just bought this bundle.

[errant sundial]

it's real good

[old pier]

Yeah, 1$ for those books is quite a deal.

[errant sundial]

I bought the top tier

the second tier is the real interesting one imo

[scenic iron]

Still gotta look through my library and see if I have these

[tidal plume]

I have most of them from last time but a lot of them are essential reading for pentesters

[proud valley]

Sort of off topic, but a beautifully written, book about spy planes. Very motivating, enjoy!

[tidal plume]

I remember reading a couple of these books many years ago ☺ old skool shenanigans

https://www.goodreads.com/book/show/6225696-stealing-the-network

[wary needle]

did anyone here get the indie humble cybersecurity bundle

because I won't let me buy it without getting a monthly subscription.

[errant sundial]

Weird, I got it

It was worth getting

[wary needle]

I am trying to right now

[silk crater]

https://www.humblebundle.com/books/cybersecurity-2020-wiley-books ?

[wary needle]

but it wont let me buy it without a monthly subscription as well

yes that

[errant sundial]

It's expired now

[silk crater]

What tier are you after?

[errant sundial]

They've moved on

[errant sundial]

Oh weird

[wary needle]

so the red means its expired

[silk crater]

nah

[errant sundial]

Don't think so

[wary needle]

ok

[silk crater]

There's 15 hours left

[scenic iron]

15 hours left to buy

[errant sundial]

I was wrong

[silk crater]

What tier are you after?

I'll walk you through it

[wary needle]

the 15 dollar one

[silk crater]

Click $15, re distribute the money as you wish, enter your email and then pay

[wary needle]

got it thanks

[silk crater]

np

[wary needle]

@silk crater appreciate it

[silk crater]

Humble Affliate btw

[wary needle]

btw I am on bandit level 23 now

[silk crater]

nice

[wary needle]

looks like I am going to finish it at this rate

[silk crater]

when you comin' for my #1 spot then?

[wary needle]

A LONG TIME FROM NOW

literally about a year out from attempting that

[scenic iron]

Is it even possible to get #1 with new point system?

[wary needle]

maybe

[silk crater]

Likely

If I keep slacking with new rooms it will be

[scenic iron]

tru

[tidal plume]

so the red means its expired
@wary needle

The timer is how long is left. Computer bundles usually come out on Monday at 7pm gmt

Scroll to the bottom and you get to pick how much you pay

It'll change at 6pm cos of their daylight savings change

[wary needle]

@tidal plume Thanks for the response, but I decided not to get the books. I have wwwaaaayyy too much to do already.

[tidal plume]

@tidal plume Thanks for the response, but I decided not to get the books. I have wwwaaaayyy too much to do already.
@wary needle i hear ya. I got most in the last wikey bundle and still have a massive reading pile...

[languid flume]

Anyone know when the next edition of A hands on introduction to hacking by Georgia Weidman will be released?

I've heard a lot of great things about the first title but it was released a very long time ago and I'm enthusiastic to snag the 2nd edition when it comes out, hopefully soon

[cerulean tundra]

No exact ETA, she does post updates from her Twitter though about it. Most recent one I saw was her trying to decide whether to keep Win 7 as the easy first exploit with Eternal Blue or not since it’s no longer supported

[robust salmon]

sadly, just because an OS isn't supported doesn't mean you won't see it in the wild

[cerulean tundra]

I don't think that was the point of her polling it. It was more an intro to more up-to-date things rather than "hey this old vulnerability is still around so we'll just pick the easy one"

Otherwise she wouldn't even bother with a v2

[tidal plume]

The first one is really good, slightly dated now. The theory is sound but the techniques and targets need updating.

It's also a bit unfortunate that her advanced course on cybrary is now behind the paywall

[chrome parcel]

Anybody read the Snowden book? Finished it a few weeks ago, definetly an interesting guy.

[tidal plume]

Haven't read his book yet but I read the Glen Greenwald book about the whole thing

[robust salmon]

@tidal plumei loved the glen greenwald book

i did my 11th grade english report on it

to sum the report up in a picture

[tidal plume]

@robust salmon fantastic work :D

[chrome parcel]

Not sure if already mentioned but “Ghost in the wires” is my favorite hacking book. I’ve read it 3 times. Very realistic and very easy to read too

It’s written by Kevin Mitnick and is about his years as a fugitive

[chrome parcel]

I read ghost in the wires. Definitely a good read. Mitnick comes across a bit cocky for my liking but I did like the book.
Reading “countdown to zero day” at the moment about Stuxnet

[robust salmon]

a lot of people get that vibe from him

How To Disappear by Frank Ahearn was a good book, @zenith plank can attest

[zenith plank]

^^^^^^^^^^^^ I do

[mental pelican]

Hi all, I have read quite a few great books recently. I'd definitely recommend "Sandworm" by Andy Greenberg. Fantastic book.

I read ghost in the wires. Definitely a good read. Mitnick comes across a bit cocky for my liking but I did like the book.
Reading “countdown to zero day” at the moment about Stuxnet
@chrome parcel Love this book!

[main hinge]

Anyone has a good book on enumeration and black hat topics?

[north spade]

Anyone has a good book on enumeration and black hat topics?
@main hinge why are you after black hat topics?

[sacred terrace]

What even is a black hat topic?

[main hinge]

@north spade I study Cyber Security and will move on to a master in cryptography after my A.S. I believe that understanding black hat topics will advance your skill as red hat.

[north spade]

You do realise, yes, that it's exactly the same skillset?

[main hinge]

Yes

[north spade]

A white hat hacker studies the exact same topics as a black hat hacker.

Asking for "black hat topics" is just kinda suspicious

[main hinge]

Not really suspicious

[north spade]

!rules

[cerulean dawn]

TryHackMe

Rules

1.

No unsolicited direct messages (DMs) to other members of the discord. This includes staff. Verify that the member you are messaging is ok with you sending them DMs.

2.

No personal drama or drama from any other discord community is allowed to be brought into this discord. This is a space for infosec discussions and learning, keep it that way.

3.

No excessive self promotion. Linking to another discord server is strictly prohibited, just don't turn it into advertising.

4.

Keep it civil. If action is necessary in a dispute or any other sort of disruption on this discord punishment will be doled out evenly both to the individual(s) who started the issue and to those who reacted inappropriately in their response.

5.

No cheating is allowed whatsoever within this discord. Any cheating (other than specifically within a developmental environment where it has been preapproved by staff) will result in an immediate and permanent ban.

6.

Racism is not tolerated and will result in a permanent ban.

7.

Administrators reserve the right to modify the rules at any time and extend them accordingly to cover infractions which may not be currently included in these rules.

8.

Keep conversations SFW (Safe for work). This is an educational and professional environment, be sure that your words do not offend or make other members uncomfortable.

9.

No discussion of illegal topics or actions.

10.

Do not post viruses or malicious files without explicit permission from the administrative staff. We understand that this is a discord for learning, however, there are plenty of places online to get malware for forensic examination and reverse engineering.

11.

No distribution of illegally obtained materials within the discord. Do not pirate books in #bookclub

From TryHackMe with ❤!

[sacred terrace]

For what it's worth, I think it is suspicious

[north spade]

See 9

I don't have access to my library just now, but I can send on a few titles that are good for pentesting on Sunday if no one else has responded by then.

[main hinge]

@north spade I understand your concern. Thanks, I got quite a few books already but I'm struggling to find more on those topics. If you have any good books on steganography and cryptography too I'd love to know!

But I haven't found many good books on Enumeration..

[sacred terrace]

enum books { }

[main hinge]

@sacred terrace lol not that kind of enumeration. Just google Network Enumeration

[sacred terrace]

hey, enumeration is enumeration man c:

[main hinge]

I mean I program too so I understand you very well!

[sacred terrace]

Have you done any website programming? I've done a few things here and there to prevent user enumeration attacks

[main hinge]

Yeah I have, but mostly I create tools. I use Golang, C#, C++ mostly.

Sometimes Java and Javascript.

[sacred terrace]

C# and aspnet all the way, baby! :p

[errant sundial]

do hackernote!

[main hinge]

Yeah C# is cool, but for the tools I make I like the concurrency and parallelism that Golang offers.

[sacred terrace]

I will when I finish the crashcourse in the tools - aka. the primer. I've gotten wildly sidetracked while doing those room thus far

personally, my opinion is that if you aren't a vendor that does that one specific thing you need, and that thing needs to go real fast, then It's worth paying a vendor to do it for you.

can't reinvent the wheel each time. Especially not the wheels that have to be super round and smooth

[main hinge]

If you port scan, bruteforce, and cracking hashes you want things to be as fast.

Just wait til Quantum computers comes out, rip AES256

[errant sundial]

*AES 128

256 is OK

[chrome parcel]

@mental pelican My girlfriend got me Sandworm today actually as a birthday gift! Going to get stuck into it soon

[sacred terrace]

exactly my point - no point in playing DYI when there are pros who do it for keks

[errant sundial]

I wrote an academic literature review on this, ask me anything about post quantum crypto @main hinge

[sacred terrace]

I heard good things about the sandworm book

neat, james!

[main hinge]

@errant sundial isnt 256 stronger than 128?

[errant sundial]

yes

But 256 isn't at risk from quantum computing

[main hinge]

Did you read Quantum apocalypse?

[errant sundial]

Yes

256 is safe

NSA is saying use 256

I wrote a paper on this, I know

I can chuck sources at you too

[main hinge]

My bad Cryptography Apocalypse

Its a pretty good book.

[errant sundial]

Yes I did read that book

And dozens more

256 is not at risk from Grover's algorithm

[main hinge]

Do you have any other great books on Cryptography then? So far I have Cryptography Apocalypse, the serious cryptography from no starch press and maybe one more

[errant sundial]

I can drop some links in here if you'd like

But not books

[main hinge]

Yeah if you dont mind!

[errant sundial]

Only academic papers and stuff, so you can't access unless you have access through a uni

[main hinge]

Yeah I have access

So you had to write an academic paper on that topic? Through what degree?

[errant sundial]

https://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8105.pdf

A literature review

https://kryptera.ca/paper/2019-03/

[main hinge]

Thanks a lot! Ill check it out!

[errant sundial]

https://apps.nsa.gov/iaarchive/library/ia-guidance/ia-solutions-for-classified/algorithm-guidance/cnsa-suite-and-quantum-computing-faq.cfm

@main hinge There's my source on aes256

[main hinge]

Interesting, I appreciate that! I will give them all a read!

[woven herald]

have you read the "Kali Linux Web Penetration Testing Cookbook"? What do you think about it?

[tidal plume]

@woven herald I got it in a humble bundle last year. Haven't read it but it looks to have plenty of info to get started

[woven herald]

Me too. There is some basics with many kali tools.

[tidal plume]

Thanks to Humble Bundle I've got so many books on Cybersec, AI, Programming, Data Science, DevOps, Linux/BSD that if they were physical I could open a library

[covert zealot]

Hello, someone could tell me a complete book for penetration testing, because I read some but when I do labs sometimes I'm frustrated because some knowledge are missed... Sorry for my English I'm from Belgium 😅

[ocean grove]

@covert zealot Web Penetration Testing with Kali linux

or Hacker’s handbook 2

[covert zealot]

Thank you very much!

Hacker's handbook 2 - Susan Young & Dave Aitel?

Could you please send me a link for buying it? 😄

[ocean grove]

it’s on amazon

and bookdepository (best for UK and EU)

[covert zealot]

This one :
https://www.bookdepository.com/Web-Application-Hackers-Handbook-Dafydd-Stuttard/9781118026472?ref=grid-view&qid=1585511351977&sr=1-1

Sorry to bother you, it's just that I didn't buy the wrong book.

[ocean grove]

yup!

that one

@covert zealot don't worry! you are not bothering at all 🙂

[covert zealot]

OK Thank you very much! 👍 👍 👍

[tidal plume]

@covert zealot Plenty of books for Pen Testing along with the ones mentioned above;

Georgia Weidman's Penetration Testing,

Hacking : The Art of Explotation by Jon Erickson,

The three Hacker Playbooks by Peter Kim,

Advanced Penetration Testing by Wil Allsopp

This is not a complete list. There's loads more to explore from No Starch (nostarch.com), Wiley, O'Reilly, Packt and others. check out bookdepository.com, nostarch.com, humblebundle.com for reasonably priced collections

[covert zealot]

Thank you very much! 👍

[mental pelican]

This one :
https://www.bookdepository.com/Web-Application-Hackers-Handbook-Dafydd-Stuttard/9781118026472?ref=grid-view&qid=1585511351977&sr=1-1
@covert zealot great book!

[covert zealot]

Thank you very much Professor 😄 👍

[tidal plume]

@mental pelican Yep that's another essential read

[neon snow]

actually if you read the absolute introduction of the book where it talks about additional resources and you follow one of the links you get redirected here:

https://portswigger.net/web-security

Web Security Academy by port swigger is meant to be the always-up-to-date replacement to that book, and its run by its author, and it's free so I would use that instead

[tidal plume]

@neon snow Yep that's true and it's excellent 🙂 I just like having books around... call me old fashioned 😛

[mental pelican]

Thank you very much Professor 😄 👍
@covert zealot just noticed you did that lol, I wish I was as smart as him!!!! 😁

[mental pelican]

@mental pelican My girlfriend got me Sandworm today actually as a birthday gift! Going to get stuck into it soon
@chrome parcel it really is great!!! @sacred terrace

[sacred terrace]

Huh..?

[mental pelican]

Huh..?
@sacred terrace you said you’d heard good things about sand worm 🙂

[sacred terrace]

Oh right. Thats was like ages ago. I barely remember it :p

[mental pelican]

Haha sorry

[sacred terrace]

No worries~

[chrome parcel]

Still reading Countdown To Zero Day
Reading motivation has been super low so only getting through a chapter a night

[mental pelican]

@chrome parcel ahhh get to it! Awesome book

[torpid yarrow]

Still reading Countdown To Zero Day
Reading motivation has been super low so only getting through a chapter a night
@chrome parcel Is it technical book about hunting 0 day etc. ?

[chrome parcel]

No it's about Stuxnet the malware which the US unleashed to target Iranian nuclear facilities. it's a really good read, I'm about halfway through

[torpid yarrow]

I see, sounds fun. Thanks : )

[raven cosmos]

jack from darknet diaries interviewed the journalist who wrote countdown to zero day, seems like a nice lady

[chrome parcel]

At the moment I'm going through The C Programming Language 2nd edition. It was the first recommended thing I learn from a reverse engineering book called Practical Reverse Engineering by Wiley. I opened(scrolled since ebook thanks to humble bundle) Practical Reverse Engineering and it told me that I should first learn C 😄

Has anyone read Kingpin by Kevin Poulson? Great book!

[tidal plume]

@chrome parcel That C book is pretty cool, from the creators of UNIX, makes a great accompaniment to Donald Knuth's 'The Art of Computer Programming series and Doug Hofstadter's Gödel, Escher, Bach but those books alone are a whole other dimension 😛

[chrome parcel]

I think I have a KNuth book

No I dont. It's Wirth's algo+data structs = programs

😄

another book I have to read but havent read.

[glad patio]

The fact there’s a chapter named “the trampoline phase” is all I need to say

[chrome parcel]

jack from darknet diaries interviewed the journalist who wrote countdown to zero day, seems like a nice lady
@raven cosmos Was this on an episode of Darknet Diaries? I must have missed that one

[tidal plume]

@glad patio i got that in a humble bundle last May. It's pretty cool :) would expect another cybersec bundle from them at some stage this year

[shut mountain]

@tidal plume didn't they just had one?

@tidal plume Jep! they had one this feb https://www.humblebundle.com/books/cybersecurity-2020-wiley-books

[tidal plume]

That's the Wiley one... No Starch had one last May and Dec 2018 as well so i got most of their cybersec books through those 😛 No Starch currently has a beginner programming one til tomorrow evening, mainly aimed at kids. O'Reilly has a programming one that's pretty good and Packt has an Azure one. Those publishers do regular bundles in all kinds of topics

The computing bundles generally come out at 7pm uk time on a Monday and occasionally other days

[shut mountain]

@tidal plume I didn't know you where speaking about nostarch specifically... I love them.. I always take their bundles 😉

[tidal plume]

Yeah I've got loads of their Linux and python bundles and other stuff too. Their books are really cool.

Georgia Weidman has a new version of her Penetration Testing book due out soon so possibly expect a bundle around that time...

[thick jasper]

@glad patio That PBA is a gem from a perspective of a guy who's first priority is binary exploitation and their vulnerability analysis.

[raven cosmos]

@chrome parcel yes it was stuxnet episode https://darknetdiaries.com/episode/29/

[chrome parcel]

Ah okay it's been a long time since I've listened to that one

[sturdy iris]

Is anyone having the udemy course "blackhat marketing: A detailed guide to date" .

[scenic iron]

To this day I'm yet to find a udemy course that provides value for money. With a name like that, I'd imagine it to be a waste of time

[chrome parcel]

To this day I'm yet to find a udemy course that provides value for money. With a name like that, I'd imagine it to be a waste of time
@scenic iron agree ....

i have also seen a course.... complete ethical hacking..... course length 2 hours 😂😂

[scenic iron]

If only it were that simple, Two hour course turns you into a l33t hackor

[sour ridge]

there's a python for ethical hackers that is quite good and TCM's practical ethical hacker

[chrome parcel]

To this day I'm yet to find a udemy course that provides value for money. With a name like that, I'd imagine it to be a waste of time
@scenic iron Agreed, I've given a fair few a shot not just for "hacking" stuff. Usually they're pretty low quality

[humble goblet]

Programming in C : Stephen G. Kochan : 9780321776419
https://www.bookdepository.com/Programming-C-Stephen-Kochan/9780321776419

For anyone that wants to learn C, this is the ONLY book I recommend. One of the best programming books I've read too.

[tidal plume]

@chrome parcel The only Udemy courses I've subscribed to were the intro course from The Cyber Mentor (Heath Adams) and the Python course from Cristi Vlad and only cos they were free and I find their YouTube content generally good.

There's plenty of other quality resources on the web and if you want to really learn something, you're better off paying for reputable books and signing up for recognised courses from an accomplished training provider unless you're the kind of person who likes to find and compile the resources you need yourself. Most people need some kind of formalised training in anything they really want to pursue :)

I get a lot of my books from Amazon or Humble Bundle or from the publishers or other online shops and use training from Linux Academy, Cybrary (not recently) or other providers.

[chrome parcel]

@tidal plume Yeah books are definetly a plus. I've got a few of Humble's cyber bundles and I've got enough books to last me years of learning individual topics. Labbing is highly underrated as well

[analog bluff]

@humble goblet why would you recommend this against K&R's book? genuinely curious as I am learning C right now

[tidal plume]

@chrome parcel I find books essential to learning and some of them are really enjoyable, but yeah having a lab environment is incredibly valuable. The books don't do you much good if you're not getting hands on. I use a combination of books, Linux Academy (They give you a bunch of machines, including Kali to practice), VMs, THM, HTB and other resources like Hackerone and Portswigger. The only thing then is planning and prioritising your learning plan and including a little bit of fun 🙂

[humble goblet]

@analog bluff I remember picking up that book and dropping it shortly after because I didn't really like it at the time, so I can't speak about it. I felt like it was unnecessarily complicated. I know it's considered the golden standard though, and if I read it today I might had a different opinion. The reason I recommended "programming in C" is because I read it when I was a beginner in programming in general (with C as my first language), and understood everything perfectly. IMHO it's exactly how a programming book should be written, and it also begins from the very basics and takes you up to some advanced C stuff, so it's not strictly an introductory book. I don't think that anyone looking to get into C is going to have a hard time with this one.

[analog bluff]

thanks 👍

[cedar quail]

If you had to choose a book, which one would you choose?

[shut belfry]

any one recommend python book

[arctic parcel]

https://automatetheboringstuff.com/ thats what i used

[shut belfry]

anyone pls suggest book for assembly language

[shut mountain]

@shut belfry I didn't got far into the book but I liked The Art of Assembly by Randall Hyde https://www.amazon.com/Art-Assembly-Language-2nd/dp/1593272073 (also: https://www.secjuice.com/guide-to-x86-assembly/)

[shut belfry]

@shut mountain any online book...its amazon link...but now in lockdown i cant buy it....

[tidal plume]

@shut belfry You can buy it on Kindle

Or you can buy it as an ebook from the publisher
https://nostarch.com/assembly2.htm

[shut mountain]

also on amazon.. for kindle.. or at least as an ebook

[thick jasper]

@shut belfry asmtutor

[shut belfry]

okie thanku

[gentle dune]

hey everyone, has anyone read The Web Applications Hacker's Handbook? If so do you recommend it?

[ocean grove]

@gentle dune i have read it. It gives a good approach but most of the vulnerabilities described there are outdated or fixed

i would not necessarily recommend fully reading it, it’s much better to find some newer version books

[gentle dune]

@ocean grove thank you I will keep looking then for some other versions then

[ocean grove]

“Web Penetration Testing with Kali Linux” is a good one

[gentle dune]

@ocean grove who is that book by?

[ocean grove]

there are actually couple of them with a same name

just go through reviews and check which one is the best

but i found this one useful back in the days

[tidal plume]

@gentle dune @ocean grove https://portswigger.net/ is the official follow on from The Web Applications Hacker's Handbook. The book is good but the site is maintained with lots of up to date training resources

[gentle dune]

@tidal plume thank you so much going to check it out now

[shut belfry]

anyone knows a good book to data structures

?

[shut mountain]

@shut belfry data structures in general? or more with a specific language in mind

[shut belfry]

data structure with c or c++

@shut mountain its good if u give some link of datastructure with c or c++

[shut mountain]

yeah sorry, can't help.. C and/or C++ are not really my thing 😒

or at least.. i'd need to read up on it myself 😉

[shut belfry]

okie okie......np p:

[chrome parcel]

This book is free for limited time: https://thehackernews.tradepub.com/free/w_pacb119/prgm.cgi also I think this page will help you https://www.fakenamegenerator.com/gen-random-us-us.php

[woven herald]

This book is free for limited time: https://thehackernews.tradepub.com/free/w_pacb119/prgm.cgi also I think this page will help you https://www.fakenamegenerator.com/gen-random-us-us.php
@chrome parcel thanks. Just downloaded

[chrome parcel]

Hope you enjoy it ^-^

[woven herald]

I got a bunch of this books from humble bundle a few months ago, but all are a little bit dated, but good for starting

[chrome parcel]

I also have some about sql injection and pentesting but they're in Spanish

[cedar quail]

ouh, send It @chrome parcel

[chrome parcel]

Think I've got like 2 years of various Humble Book bundles
Will collate them

[hallow radish]

@chrome parcel what you think of them

[chrome parcel]

I've got enough books to last me years lol
I like them a lot, good way to get cheap textbooks

[hallow radish]

Me buying for amazon vs people buying from humble

[chrome parcel]

Depends if you're looking for something in particular

[errant sundial]

Want a cool read? 10.23919/IFIPNetworking46909.2019.8999403

That's a DOI number, don't think I can share the paper

[tidal plume]

The last couple of weeks I've been dipping into security management and going beyond the reference knowledge you generally find in certs like the CISSP (and the boatload of knowledge and info, such as the Common Body of Knowledge (CBK) that accompanies it) into the wider world of the CISO, a career move that requires skills beyond the masses of technical and management skills many of us might be familiar with.

To that end, Todd Fitzgerald, a leader in the field of CISO research and support (and contributor to the above-mentioned CISSP CBK) recently published his own guidebook geared towards directing people down the path towards CISO and other cybersecurity/information security paths, discussing the skills and experience, resources and effort required to be considered for a position at that level.

At around $50-60, the CISO Compass is definitely an investment worth considering if security management is in the pipeline, even if you're only starting your cybersecurity career.

https://www.amazon.com/CISO-COMPASS-Navigating-Cybersecurity-Leadership-ebook/dp/B07LH3DRLR/ref=sr_1_4?crid=6DVG941DUCIV&dchild=1&keywords=ciso+desk+reference+guide&qid=1589199655&sprefix=ciso+%2Caps%2C304&sr=8-4

[placid dome]

https://automatetheboringstuff.com/ that's what i used
@arctic parcel I second this book. Very good for getting into the meat and explains it very well

[sterile belfry]

Anybody have a good PDF for Car Hacking?

[delicate lava]

@sterile belfry You can purchase PDF here: https://nostarch.com/carhacking

[sterile belfry]

Thanks

[woven herald]

https://www.humblebundle.com/books/learn-you-some-python-no-starch-press-books?hmb_source=navbar&hmb_medium=product_tile&hmb_campaign=tile_index_2

idk if someone could be interested

[chrome parcel]

Anybody read "Gray Hat Python"?

[woven herald]

no, but it's in the bundle

[humble goblet]

@woven herald many thanks for the heads up

[grizzled dock]

did someone say bundle?

o it's for python

[sterile belfry]

I have a copy of Cracking Codes

[woven herald]

I love this site. From time to time they offer good bundles like this. I think this is the 4th or 5th I got

[glad patio]

Please point people to the original source @sterile belfry 🙂

[sterile belfry]

?

Umm, it's on there, I was making a comment on the bundle

[glad patio]

Ah!

I gotcha, my bad - sorry.

That bundle looks real neat indeed

[sterile belfry]

No worries

Yeah it's pretty well formatted information, I got the Cracking Codes one about 2 years ago

[glad patio]

I'm tempted but I've got like 5 bundles already to get through at some point ahaha

[wet gull]

Which book would you recommend for a developer, who has some knowledge of python and other languages as well, but is new to cybersec? Thanks in advance

[glad patio]

For ethical hacking? @wet gull

[wet gull]

yeah 🙂 not cars, but what other options are there?

[glad patio]

Ahaha. I brought a book recently for it bare with

[wet gull]

I'm a webdev in work, so I would mostly like the web security, but I don't want to box out my skills, but cars are out of topic for now for sure

[sterile belfry]

Humble had a bundle a bit ago with a lot of good cybersecurity books, they might bring it back

I'll screenshot my folder with them

[humble goblet]

@glad patio nah brah, get them all. collecting books and reading books are separate hobbies, it is known

[errant sundial]

Yeah that bundle was a good one

I picked it up

[humble goblet]

@wet gull https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641 I haven't read this one, but I keep hearing good things about it. It's an introductory book. For web stuff, I can't think of a book right now but definitely look up portswigger. They offer excellent training and it's free.

[glad patio]

@glad patio nah brah, get them all. collecting books and reading books are separate hobbies, it is known
@humble goblet Hahahaha for real! I've got all the textbooks from my course / dissertation completed so hopefully over summer I can start chewing through them. Really looking forward to more RE & hopefully pushing it ous

[sterile belfry]

well time to play the game that portrays hacking the worst

watch_dogs 2

See ya guys later

[glad patio]

I've got a lot waiting for me

Have fun! @sterile belfry

[humble goblet]

oh boy

[sterile belfry]

Any good literature?

[humble goblet]

yeah, ever heard of H.G. Wells? he's a legend

[wet gull]

Anyone have red the hacker playbook by Peter Kim? Any thoughts?

[regal river]

yea

it's a good book

[pastel moon]

ooh read the phantom tollbooth

[regal river]

i recommend starting it with some shell or scripting language knowledge

[tidal plume]

Anyone have red the hacker playbook by Peter Kim? Any thoughts?
@wet gull They're excellent books, the three editions build on each other.

I'd also recommend Advanced Penetration Testing by Wil Allsopp

https://www.amazon.com/s?k=advanced+penetration+testing&crid=2DRNAJAV25FYO&sprefix=advanced+pene%2Caps%2C423&ref=nb_sb_ss_i_1_13

[wet gull]

I'd also recommend Advanced Penetration Testing by Wil Allsopp

https://www.amazon.com/s?k=advanced+penetration+testing&crid=2DRNAJAV25FYO&sprefix=advanced+pene%2Caps%2C423&ref=nb_sb_ss_i_1_13
@tidal plume Thank you.... And about the hacker playbook, is it needed to go through all three? Or are the other two just newer editions of a same book?

[tidal plume]

@wet gull You might want to hear it from the man himself. His recommendations were pinned in this reddit thread

https://www.reddit.com/r/AskNetsec/comments/8h8bvy/hacker_playbook_1_vs_2_vs_3/

I personally enjoyed all three and keep them handy.

[stiff sand]

I’d recommend any of the books by this guy

https://www.amazon.com/How-Hack-Like-GHOST-detailed-ebook/dp/B0852RCVTC

[fathom crow]

Hello everyone, I would like to share my favourite publisher.
They do only good stuff :)
https://nostarch.com/catalog/security

[stiff sand]

What’s people’s opinion of the Packt Publishing books?

[topaz pulsar]

@stiff sand They are often really low in quality, at least their development books aren't any high quality.

[stiff sand]

Yeah, I agree. I’ve been looking at the red team related books and they’re pretty meh.

[glad patio]

https://www.amazon.co.uk/Art-Assembly-Language-2nd/dp/1593272073
https://www.wiley.com/en-gb/Malware+Analyst's+Cookbook+and+DVD%3A+Tools+and+Techniques+for+Fighting+Malicious+Code-p-9780470613030
https://www.amazon.com/gp/product/1118787315/
https://www.amazon.com/gp/product/1593272898
https://nostarch.com/malware @paper raven

Is what I have on hand

the practical malware analysis one is a bit old but it's still super relevant

• the labs are sick

[paper raven]

Thankyou! I think I have that book from a humble bundle a while ago.

[glad patio]

Yuisss it's basically flung in every bundle hehe

[humble goblet]

I'm just waiting for the next bundles with all the books I've missed

No starch books are great

[chrome parcel]

my web app hacking handbook vol. 2 arrived today

[calm nest]

https://nostarch.com/tlcl2
I;m about to start reading this book, any one has red this book ?

I feel like im not strong enough when it comes to command line

I'm just waiting for the next bundles with all the books I've missed
@humble goblet btw can you explain how that bunble works ?

[humble goblet]

Ah it's not a specific bundle mate, I only mean I have seen too many bundles I liked but didn't get, and I'm just waiting for them to pop up again @calm nest

[calm nest]

im just not sure how this all bunble thing works, what happens if i pay 1$ ? 😄

do i get few pages ?

[humble goblet]

@calm nest no, you get a few books, and if you pay for a higher tier you get more. You should sign up, it's amazing, and pretty straight forward. You can get great stuff even for 1$ at a time and you can give it all to charity too

[tawny schooner]

Hey guys

I am fairly new and have been doing a few boxes on THM and HTB, but want to get into Bug Hunting eventually. Thought these books would be good. Any feedback on them or any other suggestions for someone fairly new? Please

I appreciate any help

https://www.amazon.com.au/Bug-Bounty-Hunting-Essentials-Quick-paced-ebook/dp/B079RM344H/ref=nodl_

https://www.amazon.com/Hands-Bug-Hunting-Penetration-Testers-ebook/dp/B07DTF2VL6/ref=nodl_

[urban yew]

I think you'd be better off finding resources for web apps. Anything bug bounty related is going to be mostly marketing towards it because it's an overbloated trend. Web app is bug bounty hunting. I recommend looking for something specific to the task.

[stiff sand]

@tawny schooner https://nostarch.com/bughunting

https://portswigger.net/web-security

[tawny schooner]

Thanks @stiff sand

[stiff sand]

No probs

[hoary mortar]

I highly recommend checking out this book^

I had it recommended to me recently by the Black Hills infosec guys, it's a book about quitting and managing what to do when you hit the 'wall' (referred to as the dip in this book)

[stiff sand]

Nice

[reef lintel]

Suggestions for cyberwarfare books non-fiction or otherwise?

[tidal plume]

@calm nest The Linux Command Line book is excellent to get you going once you have a distro installed. It's available as a free pdf from the book's official website here:
http://www.linuxcommand.org/tlcl.php/

And of course the Kali book is available free at https://kali.training

@reef lintel Countdown to Zero Day is about about Stuxnet, Sandworm by Andy Greenburg was recommended to me recently, The Hacker and the State by Ben Buchanan was another recommendation

[tidal plume]

Unmasking Maskirovka by Daniel Bagge is on my kindle atm waiting...

[reef lintel]

@tidal plume thanks got a couple in my audible wish list now

[north spade]

If that's a paid resource, then no

[reef shore]

yes its a paid resource

[errant sundial]

Then that's piracy

Don't ask people to pirate material for you.

[reef shore]

ok im soryy

[north spade]

^^ Both Rule 9 and Rule 11 there

[reef shore]

Sorry 😦

[errant sundial]

If you want a book, buy it.

Support the author.

[reef shore]

Here due to lockdown no services are available

any equivalent to that?

[tidal plume]

The Web Application Hacker's Handbook has been superseded by the portswigger website and there's free security training resources there
https://portswigger.net/

[errant sundial]

Yes

Online.

Purchase books. Get them delivered.

[reef shore]

thats what i m saying here no online services can deliver for now due to containment zone of covid

[errant sundial]

Ok, this doesn't let you off on piracy

Don't argue.

[reef shore]

i said sorry for that 😦

[errant sundial]

Arguing over rules with mods is a very fast way to get banned.

[tidal plume]

@reef shore You can use the Kindle app or buy ebooks from many publishers' websites. Sites like Humble Bundle (https://humblebundle.com) provide collections of books for ridiculously low prices and occasionally have amazing cybersecurity and other computing books too

[reef shore]

oh thanks

i will go through it

[subtle axle]

Good Notes on Linux 👍

[limpid bough]

what are your opinions on libgen and scihub for getting books and resources for computer science?

[ocean grove]

those are pirate sources and are in fact illegal

Rule 11 also

[limpid bough]

yes i guess they are, my bad

[subtle axle]

what are your opinions on libgen and scihub for getting books and resources for computer science?
@limpid bough google and dark web

[ocean grove]

excuse me? 😄

[calm nest]

@tidal plume thank you man

[blissful glade]

Guys how's this book?
HACKING The art of explotiation by jon erickson

[errant sundial]

Considered very good

[blissful glade]

the 2008 edition?

[errant sundial]

No clue.

[blissful glade]

i'll read it then

[solemn jewel]

I have read it, it's pretty good for some manual exploitation and low level stuff

[humble goblet]

@blissful glade it's a great book, but if you're not looking for something that specific and maybe looking for a more introductory book about hacking, I wouldn't pick that one

[blissful glade]

@humble goblet
it actually was Recommended, i'm trying to dive deep in.. i'll go with some Data structure and some Assembly then i'll take a look on this book again and read it fully

[sterile belfry]

Book words

[solemn jewel]

face books?

fave*

[sterile belfry]

Learning to Swear in America was pretty good

Even had sex jokes and suicidal protagonists

[solemn jewel]

sounds perfect

is it young adult?

[sterile belfry]

14+ I'd say

[empty cairn]

How do you differentiate in 13+ and 14+

[sterile belfry]

I just read from common sense media

14+ is EU, 13+ is US

[empty cairn]

I was wondering whether there are some things appropriate for 13 only but not up and above XD

[sterile belfry]

Summary I ripped from the back of the book:
|| LEARNING TO SWEAR IN AMERICA is about 17-year-old Russian physics prodigy Yuri Strelnikov, who's suddenly whisked off to Pasadena to help NASA figure out a way to prevent an asteroid from hitting Earth. They have three weeks to find a solution or the western half of the United States will be obliterated. Although he's constantly watched and chauffeured from his hotel to the lab and back again, he happens to meet the fiercely free-spirited Dovie, a high school junior. Through Dovie, Yuri gets to know a quirky American family, who help him understand there's more to life than the Nobel Prize. Yuri has no doubt that his unpublished work on antimatter containment is the key to eliminating the asteroid, but no one else at the lab agrees. When he's unable to change minds, he secretly replaces codes and calculations to implement his plan without anyone else knowing. Will the plan work, and if it does, will Yuri be able to live with the consequences?||

[solemn jewel]

Does anyone know where I can buy The Cuckoo's Egg by Cliff Stoll ebook (not Amazon) ?

[sterile belfry]

The Pirate Bay

[solemn jewel]

oops i shoulda mentioned legally ;-;

i can only find it on amazon

[sterile belfry]

https://lmgtfy.com/?q=ebook+storefronts

[solemn jewel]

what is a google

[plucky kayak]

@sterile belfry seems pretty rude. it's just a question.

[solemn jewel]

nah but seriously i have searched many ebook sellers and i can only find it on amazon

[sterile belfry]

https://www.ebooks.com/en-us/

Hey hey it's just my go to website

[solemn jewel]

https://www.ebooks.com/en-gb/searchapp/searchresults.net?term=cuckoo's+egg

it's not on ebooks.com ;-;

[sterile belfry]

Aw sowwy

[solemn jewel]

no worries!!!!

maybe if i email the author and beg really nicely

[plucky kayak]

it's a great book from a different time, where computer crimes weren't understood or cared about by law enforcemnet.

anyone read sandworm? like it?

think that may be my next book.

[sterile belfry]

Ooh, I haven't but I might

I'm currently reading Through the Looking Glass

[reef yarrow]

@solemn jewel it is also located in Google play https://play.google.com/store/books/details/CUCKOO_S_EGG?id=0q1_5QkqV8EC

And I also found it on ebooks.com

https://www.ebooks.com/en-us/book/914038/cuckoo-s-egg/clifford-stoll/

[humble goblet]

@solemn jewel I get my stuff from bookdepository.com, definitely check it out

Most of the time it's cheaper than amazon even if it's a child company

And there's a counterpart for used books too

@sterile belfry please refrain from lmgtfying members in general, but especially in reply to questions like these. You can find a ton of stores through Google, but Google won't tell you which one I (for example) recommend. Knowledge is not same as experience.

[solemn jewel]

@humble goblet unfortunately they're owned by Amazon and I refuse to support Amazon in any way 🙂

[humble goblet]

Fair 🙂

[solemn jewel]

@reef yarrow neither of those bookstores will let me buy it in the UK

This eBook is not available in your country.

😦

[humble goblet]

Your best bet is buying an ebook I think

[solemn jewel]

@humble goblet its not available in Uk either, only americas 😦

maybe i'll have to fake being in america to buy it

[errant sundial]

@reef frost can you uh

Not

I saw.

[sterile belfry]

Any books you reccom? Was thinking of getting the RTFM

[gentle dune]

that is more of a guide not a book that you read @sterile belfry

I have it and it is amazing alot of tips on different tools/commands to use.

[coarse rivet]

I read the Cuckoos egg many years ago, really enjoyed it at the time. Re-read it not that long ago, still good, but possibly not aged as well as i hoped.

[solemn jewel]

Cliff Stoll is my fave mathematician so I'll probably love it

[lament adder]

Hey, can.anyone recommend me some good books on Physical security, red team, physical pen testing... You get what is the idea. If i don't see your msm ping me or dm me. Tnx in advance

[placid dome]

Anyone else read this? I'm not advanced but I like the way the writer thinks

[errant sundial]

I own it

I've read some of it

[placid dome]

It's a very strange read

A mix of code, strategy and experience

I like it though. It did make me think about where to put my energy

[humble goblet]

Version 10 of Debian Administrator's Handbook is up
https://debian-handbook.info/get/

[glad patio]

oooh nice! ty for sharing

[humble goblet]

although I think that if you try to get the paperback, it's still version 8, but the ebook and online version is 10

[glad patio]

Anyone got anything good on wireless sensor network routing protocols? more so table-driven like distance vectoring

You will save my life if so

[tidal plume]

@glad patio It's not a topic I've much experience in but there's tonnes of books on Amazon and loads of freely accessible research papers on the topic (many in pdf)

https://www.amazon.com/s?k=sensor+networks&ref=nb_sb_noss_2

https://duckduckgo.com/?q=wireless+sensor+network+routing+protocols&t=canonical&ia=web

[humble goblet]

Many books/articles in here, most of them paid but there are some free too:
https://link.springer.com/

[willow quest]

A mix of code, strategy and experience
@placid dome What do you mean by code?

[errant sundial]

@willow quest Programs, code like source code

[glad patio]

@glad patio It's not a topic I've much experience in but there's tonnes of books on Amazon and loads of freely accessible research papers on the topic (many in pdf)

https://www.amazon.com/s?k=sensor+networks&ref=nb_sb_noss_2

https://duckduckgo.com/?q=wireless+sensor+network+routing+protocols&t=canonical&ia=web
@tidal plume thank you (: I've got a few academic papers but this is useful ^^

[solemn jewel]

Anyone read Godel Escher Bach? is it worth it?

[paper roost]

New book time!

[errant sundial]

Elephant mug too.

[paper roost]

That's an artists drawing of me 🙂

[glad patio]

Let me know what you think of it @paper roost !

[chrome parcel]

Ah! I love physical books. Let us know how it is ;)

[radiant raven]

Can anyone recommend The Hacker Playbook 3?

[azure oracle]

I like the RTFM book, though it's not a reading book, its references, like a cheat sheet book

[radiant raven]

Red Team Field Manual?

Just making sure that's not Read The Fking Manual lol

[errant sundial]

It's gonna be the red team field manual

It was a pun so

[humble goblet]

@radiant raven gentlemen say "fine" 😛

[radiant raven]

What?

Oh

Nvm

[paper roost]

@glad patio Its an amazing book! Only about 1/3 of the way through. Has a lot of creative ways to exploit certain things. Defo worth it, think it was around 20 quid. Wealth of knowledge in it

[radiant raven]

@paper roost what kinds of concepts does it teach

[paper roost]

Then give an overview of what it is, how it could be exploited then how it's been exploited on bug programs

[radiant raven]

That's super helpful. I honestly wish I was able to learn better from books

I do better with videos and exercises

Or instructor led lessons

[paper roost]

Im terrible with books, Im trying to learn from them as I know there's a wealth of knowledge in them

[radiant raven]

Yeah definitely

I'd eventually like to take up bug hunting

[paper roost]

Im terrible at reading normal books, half way through Snowdens book and half way through Dantes Inferno

[radiant raven]

If even to just do some small bounty ones

[paper roost]

I've found an exploit on a bug program but I dont know how to take it further. Hoping the book can help

[radiant raven]

Very cool! That's exciting still

[paper roost]

Yeah its an odd 1, by adding a random named cookie, I'm able to add SQL in it and the page changes. Though I can't get it to output what I choose.

[radiant raven]

What year is that one from? What version is it more specifically

[paper roost]

Copyright 2019

[radiant raven]

Sweet

[ocean grove]

Is that Real World Bug Hunting?

I've read it

[radiant raven]

It's on Safari Books if anyone has a subscription to it from work or school

I just added it to my Pentesting playlist :P

Along with Black Hat Python and others

[chrome parcel]

audiobook tries to read code

[gentle dune]

It is a good book currently reading it

[radiant raven]

I'd honestly love to get into bug hunting, if only for like...the small dollar value ones. Though I've heard that its an overcrowded field and most of the time the lower dollar value ones are taken already

[west fjord]

Bug bounty hunting is also great as a learning experience, regardless of the likelihood of missing out on bounties.

[gentle dune]

@radiant raven that is what I am trying to do right now and have been studying for. I am trying to just use bug bounties as a side job and make some income. Plus @west fjord is right a great learning experience and looks good to employers if you mention it.

[radiant raven]

@west fjord Idk how the systems all work. Like, can only one person have it active at a time? And what if that person is a complete noob and just wants to use it to maybe learn how to bug hunt.

Like what I'd be doing lol

but #general

[west fjord]

Check out the book someone mentioned in here previously, called Real-World Bug Hunting. Covers a lot of ground.

[radiant raven]

Even how to start with one of these platforms?

as a noob

I added it to my Safari playlist but work has been busy; havent had a time to check it out

[west fjord]

Chapter 1 covers the basics, although bugcrowd and hackerone both have ample resources to explain how to start.

Although TryHackMe is the best way to start, as it has many walkthrough rooms that are valuable in explaining the target technology as well as paths and methods of exploitation.

[radiant raven]

Indeed!

[paper raven]

Just ordered bug bounty hunting for my collection. I have so many things I need to read but I’m looking forward for this one - it’s going at the top of my queue 🙂

[gentle dune]

Also I recommend watching InsiderPHD on youtube she is really good at explaining stuff for bug bounties and she just started about a year ago

[chrome parcel]

I can definitely second InsidePHD. STÖK as well

[gentle dune]

STOK is a legend just like nahamsec and TomNOMNOM

[chrome parcel]

STOK is the kind of guy that can be friends with anyone

[radiant raven]

But STOK's videos are more about like...a day in the life right?

That's not quite what I'm looking for

Starting InsiderPHDs starter series now

Thanks for that

[gentle dune]

not necessary he has some great videos that he collabs with other hackers about javascript for example with tomnomnom. also you can check out bugcrowd and hackerone for their instructional videos

[chrome parcel]

STOK has some good videos too

[clear tiger]

Im terrible with books
@paper roost same. Halfway through every book bar 3 of them and seem to have the most difficult time finishing them all

[solemn jewel]

Honestly the best thing you can do is to put a book down and move on. Nothing makes you hate reading more than being forced to read an entire book. No one's forcing you, if you don't like it - don't read it! I find maybe 1 fiction book a year I like to read, but even then I've read the first few chapters of so many and they just bore me.

[glad patio]

This ^ plus there's no point reading for the sake of reading

It's just counter-productive, you don't learn anything and the time you spent can be doing something else imho

[slow ruin]

That depends on why you’re reading. I’m an English major—(in reality it’s Writing Communications, which is journalism and creative writing, but it’s close enough)—and like, reading is one of the things you have to do in order to be successful. How can you seek to master the English language if you aren’t exposing yourself to other voices/ideas?

[trim cape]

Any good book to learn about proxy,vpn?

[solemn jewel]

Sounds like you'll need a general networking book? Since I doubt there are many books centered around specifically proxies / VPNs. The book networking book I've come across is Computer Networks: A Top Down Approach. https://www.amazon.co.uk/Computer-Networking-Top-Down-Approach-Global/dp/1292153598/ref=sr_1_4?dchild=1&keywords=computer+networks&qid=1591788983&sr=8-4&tag=duckduckgo-ffab-uk-b-21

[proper saddle]

Hey Everyone , I am new to penetration testing. Can anyone list some resources that will help..?

[chilly osprey]

Hey Everyone , I am new to penetration testing. Can anyone list some resources that will help..?
@proper saddle scroll up and check #resources as well

[proper saddle]

@chilly osprey Thanks so much..

[fallen sinew]

Hey all, I'm new to TryHackMe and this discord... Figured I would post about a quality book I am reading.
It's called Dark Mirror . It's about Snowden and the things he experienced with his time working for the NSA. Quite the interesting read.

[robust salmon]

@fallen sinew have you read Glenn Greenwalds book? It's an interesting read

[fallen sinew]

@robust salmon I have not, no. I will jot his name down. Which title do you recommend?

[robust salmon]

No Place to Hide: Edward Snowden, the NSA, and the U.S. Surveillance State

[fallen sinew]

I'll check it out, thanks!

[robust salmon]

[mighty onyx]

Hey can anyone recommend be a book for bug bounty

[cedar quail]

Real-World Bug Hunting: A field Guide to Web Hacking. Peter Yaworski

@mighty onyx

[west fjord]

Hands-On Bug Hunting for Penetration Testers, by Joseph Marshall @mighty onyx

[mighty onyx]

Thnx a lot @west fjord @cedar quail

[glad patio]

This book is one of few that carried me through Uni

It's a bit hard to tackle to begin with but stick with it I promise!!

[humble goblet]

https://www.humblebundle.com/books/protect-your-stuff-apress-books

this seems like a nice bundle

does anyone have any feedback for these books and/or the publisher?

[granite knoll]

is the get certified bundle any good?

[humble goblet]

@granite knoll packt books aren't very good in my opinion/experience

[west fjord]

I concur with @humble goblet. They are a hit or miss when it comes to quality.

[granite knoll]

I see..

ty guys

[chrome parcel]

If you get the $19 ACM Student Membership you do get all Orielly and Apress books for free. Just have to be a college student.

[humble goblet]

@chrome parcel oh thanks, good to know! Even the basic tier?

[winged haven]

can you suggest me some good python material, guys?

[humble goblet]

can you suggest me some good python material, guys?
@winged haven automate the boring stuff with python is a great book and there's even a course based on it. It's aimed at beginners. If you're not looking for something like that, many people say great things about learn python 3 the hard way, which I've read but I have some complaints about. I think every programming book should have exercises in every chapter based on what you've learnt, and this book doesn't, for the most part. It's still a good book in any case.

[chrome parcel]

Can anyone recommend some free books for bug bounties?

[tidal plume]

@winged haven @humble goblet You can read Automate The Boring Stuff at the book's official website and the author has posted the first 15 of the 50 course videos on YouTube (link to YT on this page too:

https://automatetheboringstuff.com/

[humble goblet]

Right, I have that bookmarked but forgot to mention it, thanks!

[tidal plume]

I got your back 😉 Also, William Shotts released a pdf version of his Linux Command Line book under Creative commons on that book's website:

http://www.linuxcommand.org/tlcl.php

[humble goblet]

Keep posting mate 😄 @tidal plume

[winged haven]

thanks, guys @humble goblet @tidal plume

[urban yew]

Neo, you really should look for books pertaining to Web Apps. Anyone marketing books around bug bounties are doing it because of the current fad. Get the same, and probably better results from a good web app resource instead.

[quasi orbit]

Hi The Mayor

[chrome parcel]

Thanks mayor, any suggestions?

[humble goblet]

@chrome parcel although this is not a book, portswigger has some great online (and free) labs you can try. the material that explains the concepts is also amazing. it's a good place to start.

[chrome parcel]

A cat and a tomato.

Cool.

[humble goblet]

#general

[chrome parcel]

😦

[chrome parcel]

@humble goblet thanks man. Whether it's a book or not, information is information

[tidal plume]

@humble goblet Yep, portswigger was created as the successor to the much-admired Web Application Hacker's Handbook, which has been an essential read for a long number of years

[humble goblet]

Yep I know

Always loved me a Web resource

I hate the notion of non updatable material

[tidal plume]

Yeah I dunno how many old and out of date textbooks I've got but not all documentation resources are going to be at the level of portswigger

[boreal pumice]

guys where to start lookin for buffer overflow

[shadow frigate]

I saw the Secure Your Stuff Apress Humble Bundle get posted earlier in chat, but it seems like an evaluation wasn't given on it.

Does anyone have an opinion on the books provided? Do any of them stand out more than the others?

https://www.humblebundle.com/books/protect-your-stuff-apress-books?hmb_source=navbar&hmb_medium=product_tile&hmb_campaign=tile_index_7

[tidal plume]

@shadow frigate Some of them definitely look interesting but I haven't had a chance to read them yet. If you want to know that style of the books and their information, Apress have an ongoing project called APressOpen where they have made 25 of their books available for free (and legal) download on their own site and I've seen several of them on Amazon Kindle as well.

From what I can see they are generally rated well or highly. From what I can tell from some of the reviews I've seen, they sway in their technical or managerial content and the value you get from them might vary.

https://www.apress.com/us/apress-open/apressopen-titles

[humble goblet]

I have an idea: since the amount of books/resources we stumble upon daily is overwhelming, we could start creating reading lists (so other people can take that list and read those books in order). If someone has a bunch of books that they consider essential reading (ideally in order), please take a shot.

[nova beacon]

I like the Idea. What do you think about this: https://www.goodreads.com/ ?

[lucid jackal]

Does anyone have good experience with a Java literature that explains topics like generic classes (ArrayLists, HaspMaps etc.), nested classes in detail?

Preferred languages are English and German.

[chrome parcel]

Currently reading “Gray hat python” to understand about exploit development and reverse engineering.

Do i need to skip any chapter or should i complete from beginning to last?

[hearty geyser]

Hey can someone suggest me a book or a nice series on Linux Privesc. I googled and there is so much stuff, I cant make up my mind

[tepid torrent]

tcm just released a linux priv esc course on udemy @hearty geyser

[solemn jewel]

Following on from what @humble goblet said, if people post their fave books here I can make a spreadsheet and we can have a "faves of tryhackme" - the most popular books 🙂

[hearty geyser]

tcm just released a linux priv esc course on udemy
@tepid torrent Awesome

[ocean grove]

Following on from what @humble goblet said, if people post their fave books here I can make a spreadsheet and we can have a "faves of tryhackme" - the most popular books 🙂
@solemn jewel please do! that's an awesome idea

[chrome parcel]

is this just for books in general or programming/infosec books only?

[nova beacon]

I think thats's a compilation of different resources like books, links, courses etc.

[errant sundial]

This channel is focussed on books, but I believe fiction is OK

[nova beacon]

Ok

[errant sundial]

Links/courses ideally go in #resources if they are not books

[nova beacon]

Thanks, nice to know.

[chrome parcel]

easily fav book https://www.amazon.com/dp/B000BO2D3C/ref=dp-kindle-redirect?_encoding=UTF8&btkr=1

[cinder plaza]

^ The alchemist is a good read

[chrome parcel]

yup

[cinder plaza]

Your name makes a lot more sense now

[chrome parcel]

George orwells books are op too

hahaha

if you like to read lots, and like fiction

read renegades

and if you like slightly less crazy fiction, go for delirium

theyre both trilogies, gonna keep you busy for a long time

[solemn jewel]

im reading the alchemist rn actually

[chrome parcel]

tell him that he owes me a couple sheep

@solemn jewel

[winged summit]

hello everyone, im a beginner, i know linux and familiar with hacking terminology

could you please suggest me some good books to gain knowledge on cybersecurity

[humble goblet]

I loved the alchemist when I read it (~16). If I read it for the first time now though, I'd get bored pretty quickly

orwell is great

another few favs of mine: h.g. wells, philip k. dick, arthur c. clarke

[chrome parcel]

why would you get bored?

[ruby osprey]

@winged summit Check "No Starch Press" - Hacking & Computer Security section.
In addition try to books about hijacking instruments, like Nmap, Metasploit and etc.

[winged summit]

@winged summit Check "No Starch Press" - Hacking & Computer Security section.
In addition try to books about hijacking instruments, like Nmap, Metasploit and etc.
@ruby osprey
Oh kk

[humble goblet]

@chrome parcel because I really don't like it, I think it's immensely overrated. but that's me

[chrome parcel]

@humble goblet i think youre not getting the big picture. ive read the books tens of times since i got it in different languages, and i always feel like i learn a new lesson the next time i read it

[humble goblet]

no I really think I got it. it wasn't hard. I think it's possible to get where the author is coming from and still not like the work

some things are a matter of taste

[chrome parcel]

hmm yeah. what are your opinions on why you don't like it?

[robust salmon]

so:

• it'll take dev time away from the platform
• It'll take one of the community members time (probably mine) away to host the thing
• we need to constantly gather questions (and having hosted plenty of AMAs, this is the most difficult part)
• Dark (and myself) are pretty busy because we both work full time jobs
• Skidy & Ashu are in a different timezone than Dark which makes it difficult to find a good time for everyone.

[humble goblet]

@robust salmon are you in a wrong channel?

[robust salmon]

nah, just commenting on @chrome parcel's name

[humble goblet]

@robust salmon lol I'm dumb, I'll see myself out 😄

[robust salmon]

there's a better channel for it, just this is the one I happened to notice his name in lol

[solemn jewel]

honestly what are you gonna ask the admins anyway? you can just ask it in #general

[humble goblet]

@chrome parcel I would rather not, because it's been many years since I read it, and I never said I have any valuable criticism to offer, just that I don't like it anymore

[robust salmon]

tru, it's a lot of time to organize for a little thing too. A podcast would be better

[humble goblet]

boy I didn't know that with the right name you could get staff attention so easily, there's a vuln there

[robust salmon]

lolol

[glad patio]

There is also this for site/infrastructure updates: https://tryhackme.com/changelog

Closest thing to an ama as it stands (:

[chrome parcel]

@robust salmon oh, well if you think a podcast will be better then you can do that. maybe more frequent AMA's?

@humble goblet yeah lol all books get old

[solemn jewel]

@robust salmon oh, well if you think a podcast will be better then you can do that. maybe more frequent AMA's?
@chrome parcel i thinj that would be a bad idea

maybe like

once every 6 month an AMA

as a celebrationary thing

[humble goblet]

@chrome parcel I hope I wasn't the one that made you sad 😂

[chrome parcel]

no lmao

once every 6 month an AMA
@solemn jewel i mean that can work too. the main thing i wanted to ask is how they manage all that backend stuff 👀

[robust salmon]

6 month ama is likely

[chrome parcel]

yeet

[solemn jewel]

Gray Hat Python    1.0
Automate the boring stuff    1.0
Linux command line    1.0
The art of assembley language    1.0
Hands-On Bug Hunting for Penetration Testers,    1.0
Real-World Bug Hunting: A field Guide to Web Hacking.     1.0
No place to hide    1.0
Dark Mirror    1.0
Practical Binary Analysis    1.0
Web Penetration Testing with Kali Linux    1.0
The Web Application Hacker’s Handbook Second Edition    1.0
Mastering Kali Linux for Advanced Penetration Testing    1.0
Kali Linux - An Ethical Hacker's Cookbook”    1.0
Mastering Kali Linux Wireless Pentesting    1.0```

THM's most recommended books so far

the 1.0 is how many times someone has recommended it

I'm considering adding a new category too "Mod / Admin approved" for when Mods / Admins recommend books

[shadow frigate]

Python Crash Course

[errant sundial]

Cryptography Apocalypse is pretty good @solemn jewel

[solemn jewel]

@hoary mortar sorry to tag you, but I know you read. Mind weighing in on your fave books? 🙂

[hoary mortar]

yee I can hop in here in a bit

[west fjord]

Network Security Assessment, by Chris McNab, Third Edition.

Operator Handbook: Red Team + OSINT + Blue Team, by Netmux. If you liked RTFM and BTFM, you will love this.

Red Team Development and Operations: A Practical Guide, by Joe Vest and James Tubberville. Zeroday Edition!

Offensive Countermeasures: The Art of Active Defense, by John Strand, Second Edition.

Attacking Network Protocols: A Hacker's Guide to Capture Analysis and Exploitation, by James Forshaw.

[distant coyote]

hello there i want some cybersecurity books that is suitable for 0x7 and 13 years old

DM me directly or put it here and tag me

thanks

[solemn jewel]

@distant coyote if someone DM's you directly, please tell me what books 🙂 I'm compiling a list of THM's fave books 🙂

[distant coyote]

no problem

[velvet horizon]

Any good book suggestions ?

[solemn jewel]

Gray Hat Python    1.0
Automate the boring stuff    1.0
Linux command line    1.0
The art of assembley language    1.0
Hands-On Bug Hunting for Penetration Testers,    1.0
Real-World Bug Hunting: A field Guide to Web Hacking.     1.0
No place to hide    1.0
Dark Mirror    1.0
Practical Binary Analysis    1.0
Web Penetration Testing with Kali Linux    1.0
The Web Application Hacker’s Handbook Second Edition    1.0
Mastering Kali Linux for Advanced Penetration Testing    1.0
Kali Linux - An Ethical Hacker's Cookbook”    1.0
Mastering Kali Linux Wireless Pentesting    1.0```

@velvet horizon

idk how easy that is to read ;-;

but i'll update it again soon

[velvet horizon]

Thank you for the feedback 😇

[west fjord]

hello there i want some cybersecurity books that is suitable for 0x7 and 13 years old
@distant coyote
Beginning Ethical Hacking with Kali Linux, by Sanjib Sinha.
Linux Basics for Hackers, by OccupyTheWeb.

[thick jasper]

Make PBA: 2.0

And add Practical Malware Analysis

[tidal plume]

This is an abridged list of books I've read/am reading

[west fjord]

Becoming the Hacker: The Playbook for Getting Inside the Mind of the Attacker, by Adrian Pruteanu.

[west fjord]

From Hacking to Report Writing: An Introduction to Security and Penetration Testing, by Robert Svensson.

[thick jasper]

So, no one gonna say "So many books, so little time"?

[north spade]

AH Robin

Just who I wanted to see!

Could you confirm if I'm going mad?...

[thick jasper]

Right timing, I guess.

Could you confirm if I'm going mad?...
@north spade You remember my name, so no?!

[north spade]

Hehe, take a look in #mentors and let me know what you think?

[thick jasper]

Gotcha

[west fjord]

The Hacker Playbook 3: Practical Guide to Penetration Testing, by Peter Kim. Red Team Edition!

Blue Team Handbook: SOC, SIEM, and Threat Hunting Use Cases, by Don Murdoch. 👍

[solemn jewel]

THM's most popular book so far is The Hacker's Playbook 3.0

[chilly osprey]

👀

[solemn jewel]

Full list

If your books are already on the list, please don't be afraid to add them. The idea is to make a "most popular books of THM", rather than "every single book THM has read"

@zenith plank I have a bot that automatically adds books to my own personal library (as a database), if you make me a bot dev I could add this to THM so we can create a command !add to add a book? The commands my bot supports are "add" for adding a book, "numbooks" for counting how many books there are, "check" for checking to see if a book is in the library. Could easily add another command to return X most popular books too. It's in Python and it's a Telegram bot, but the class for books would be easy to port over 🙂

What would be really great was if I was to add categories, so someone can say "best wifi hacking books" and it returns that

[zenith plank]

Yo, sure why not! Looks like a bit of work, what kind of DB would you need?

[solemn jewel]

Honestly I literally use Airtable as a DB, I could probably learn SQLite though

[stoic oracle]

!add test';-- -

[zenith plank]

If I make you the mysql part, you can use that?

Let's move to #discord-bot

[thick jasper]

@solemn jewel Where's the Practical Binary Analysis? It had 2.0 points

[solemn jewel]

@thick jasper I have to add them by hand, and it's annoying with ~60 books so my bad. I'll update the counter. When I make the bot commands, this won't happen 🙂

[maiden sparrow]

What's the difference between THP3 vs THP2? In your opinion guys.

[maiden sparrow]

Any suggestion for a blue team books?

[west fjord]

@maiden sparrow The Hacker Playbook 3 is more up-to-date. It also focusses, somewhat, more on Red Team activities. Either way, both are worth reading. For Blue Team I posted earlier: Blue Team Handbook: SOC, SIEM, and Threat Hunting Use Cases, by Don Murdoch.

[maiden sparrow]

@maiden sparrow The Hacker Playbook 3 is more up-to-date. It also focusses, somewhat, more on Red Team activities. Either way, both are worth reading. For Blue Team I posted earlier: Blue Team Handbook: SOC, SIEM, and Threat Hunting Use Cases, by Don Murdoch.
@west fjord Nice. Thanks man! I prefer learning thru books rather than videos. Adding this to my list.

[west fjord]

@maiden sparrow Another good one: Cybersecurity Blue Team Toolkit, by Nadean H. Tanner.

[icy fable]

@maiden sparrow There is also the Blue Team Field Manual

[prime mortar]

can anyone recommend some material for Radio Frequency. Specifically material related to 802.11! I am very interested of getting into the radio hacking field / SDR! 😄

[mortal wedge]

@prime mortar very specific frequency but great Scott gadgets has some good content it’s intended for the hackrf one but it can be applied to any sdr https://greatscottgadgets.com/sdr/

[distant coyote]

any free e-book based on cybersecurity ?

[errant sundial]

https://pwning.owasp-juice.shop/

[distant coyote]

tyty

[plucky torrent]

Any good books about hash decoding/encrypting? I want to become more independent in locating hashes/decoding them

[limber plaza]

@plucky torrent there is no such thing as decoding a hash, you can only try to crack it

[plucky torrent]

Ngl I don’t remember writing this 😂

My bad

[limber plaza]

Great 🤣

[solemn jewel]

Any good books about hash decoding/encrypting? I want to become more independent in locating hashes/decoding them
@plucky torrent This guy from my uni CTF team has memorised hundreds of hashes and can identify them faster than John. I remember this one time this hash wasn't working with John, and HashID and Hash-identifier weren't getting it either. He stopped drinking tea, looked over and told me what hash it was and it was actually that hash???? I have no idea how he learnt this power but this is a power I must obtain. If you ever learn how to become this powerful, please tell the world

[plucky torrent]

I’d love to

I was just really curious because a guy was stuck on a room made by Cyrillic last night

And I had no idea on how to crack the hash but I was super interested

[solemn jewel]

Like in general you don't know about how to crack hashes?

Gimme a sec I can teach ya some stuff

[plucky torrent]

If it’s encoded with more than one hash I will sit there for an hour and not realise 😂

[solemn jewel]

Wow, that's actually a problem

[plucky torrent]

Exactly 😂😂

[solemn jewel]

Because the way hashes are cracked, you'd have to have the 2nd hash in the wordlist

Unless you didn't have to crack it, like if it was cryptograhpically weak you could break it

[plucky torrent]

I was researching how to identify hashes but I didn’t think it helped tbh

[solemn jewel]

https://tools.kali.org/password-attacks/hash-identifier

is what i use

[plucky torrent]

Mind if I dm you bee?

[solemn jewel]

Sure! Go ahead 🙂

[maiden sparrow]

Hey guys. Anyone here has a link to the vulnerable VMs from the book of Georgia Weidann's Pentesting Book?

Here is the SS of the part of the book. The red underlined link is dead, unfortunately

Also I think the torrent from the link "nostarch" is also dead. Anyone here know any alternatives?

[mortal wedge]

please don’t post this in multiple channels just one will do fine

[maiden sparrow]

Sorry.

[west fjord]

Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations, Second Edition, by Morey J. Haber.

Advanced Penetration Testing: Hacking the World's Most Secure Networks, by Wil Allsopp.

[boreal osprey]

Should I read “TCP/IP Illustrated vol 1” or “Internetworking With TCP/IP Volume One (6th edition)”?. Just got done reading “Where Wizards Stay Up Late” great read.

Just picked up “Count Down To Zero Day” I’m excited to read it.

[west fjord]

@boreal osprey TCP/IP, by Todd Lammle. Subnetting, by the same author.

[boreal osprey]

@west fjord Thank you. I'll give them a read this month! My main goal is to be able to get to the point where I can have enough foundation to start reading the RFCs fluently.

[long girder]

hey guys
should i go for hacker playbook 2 first or start with 3 instead?
this would be my first book to read in this field so any other recommendation will also help

[boreal osprey]

Foundations of Information Security: A Straightforward Introduction by Jason Andress is a good read @long girder

Start with THPB 2 (The Hacker Playbook 2)

[long girder]

okh..and 1 more suggestion on any book for machine learning+cybersecurity

[mortal wedge]

do you want one covering the two or are you asking for a book about machine learning and a book about Cybersecurity

[boreal osprey]

Sorry can't help you there but I would also be interested in a book that covers machine learning and cyber sec in one

[long girder]

do you want one covering the two or are you asking for a book about machine learning and a book about Cybersecurity
@mortal wedge yes the book covering both of them

[mortal wedge]

hmmm not sure if there is one

google provides plenty of results can’t vouch for any of the books though

[boreal osprey]

there are a bunch of articles on the topic too

[long girder]

i found one or two books but a suggestion from who has read some books on the topic would be a help

there are a bunch of articles on the topic too
@boreal osprey ya i have read some

[mortal wedge]

@glad patio made his diss on machine learning and malware analysis not sure if he can shed any light on the subject?

[glad patio]

Yess good ping I will dig out what I read :3

And give brief review in a little while

[long girder]

okh

its difficult for me to choose between these 2 can any one help
THPB2 or penetration testing a Hands-on introduction to Hacking??

[errant sundial]

The Hacker Playbook 3 is more up-to-date. It also focusses, somewhat, more on Red Team activities. Either way, both are worth reading. For Blue Team I posted earlier: Blue Team Handbook: SOC, SIEM, and Threat Hunting Use Cases, by Don Murdoch.

• TimTaylor @long girder

[long girder]

now i am confused😅

[errant sundial]

Hackers playbook 3 is recommended over 2 by TimTaylor here, more up to date

[long girder]

okh ..thanks for advice

[icy fable]

@long girder penetration testing a hands on introduction is a good book for a beginner but it's outdated, grab THP3 and wait for the second version of penetration testing, it's still being written.

[long girder]

penetration testing a hands on introduction is a good book for a beginner but it's outdated, grab THP3 and wait for the second version of penetration testing, it's still being written.
@icy fable yup

[crimson meadow]

Is the web applications hacker handbook worth pucking up?

[tepid torrent]

Is the web applications hacker handbook worth pucking up?
@crimson meadow not really, the author of the books has their 'web security academy' online which teaches all the same stuff - as well as providing free labs to compliment your learning - https://portswigger.net/web-security

[shadow frigate]

Thoughts on using a Kindle over physical books for your book collection? Being out in the field and hiding a tablet in a clipboard seems a lot easier to sneak in than a bunch of cheat sheets.

[solemn jewel]

Thoughts on using a Kindle over physical books for your book collection? Being out in the field and hiding a tablet in a clipboard seems a lot easier to sneak in than a bunch of cheat sheets.
@shadow frigate Use whatever makes you happiest! For practical reasons you have a good point, but I read both books & physical books 🙂 Sometimes the value of a book isn't in the words on the page, but everything else -- something that Kindle is hard to replicate

[shadow frigate]

Yeah I was thinking hard about it because I don't like the way reading on a Kindle feels and notes+highlights+stickies are nice

[solemn jewel]

If you have a Kindle and want to be inconspicuous, you can just use the Kindle app tbh 🙂 (on your phone)

[shadow frigate]

That's a pretty good idea. I don't like reading off a phone. I kinda do the squint the entire time.

In the next few weeks, the Python course that my college offers will wrap up. I'm working on doing extracurricular stuff on JetBrains to fill in what I haven't learned from the class. Are there any specific "violent Python" readings/resources I should look at?

[solemn jewel]

In the next few weeks, the Python course that my college offers will wrap up. I'm working on doing extracurricular stuff on JetBrains to fill in what I haven't learned from the class. Are there any specific "violent Python" readings/resources I should look at?
@shadow frigate Violent Python and Black Hat Python. Although there are some rooms on THM with Python used, such as Pydev (I forgot the name but it's something like that) and peak hill? I think?

Develpy