#bookclub

1 messages · Page 6 of 1

ancient zenith
#

No.

#

It took me two seconds to find that out via google

cedar plank
#

java programming...

humble goblet
#

Sorry I forgot the content warning 😄

mortal wedge
#

@normal ether its pretty easy to get rid of tracking just yeet all the things that look like nonsense out the window.

#

its ez pz

blazing stone
#

is there any books about tools included in kali linux ?

ancient zenith
#

Probably not but there is Google. @blazing stone

blazing stone
#

hmmh, thanks

humble goblet
idle storm
#

Started reading Sandworm

#

Its good if you want a book on APTs meshed with a bit of politics

humble goblet
#

https://flaviocopes.com/page/linux-commands-handbook/
subscribe here (and verify your e-mail) to get the following e-books for free:

    The Linux Commands Handbook. 135 pages. Fall 2020. PDF, ePub, Mobi
    The Deno Beginner’s Handbook. 46 pages. Spring 2020. PDF, ePub, Mobi
    The JavaScript Beginner’s Handbook. 76 pages. Early 2020. PDF, ePub, Mobi
    The C Beginner’s Handbook. 77 pages. Early 2020. PDF, ePub, Mobi
    The Next.js Handbook. 102 pages. Fall 2019. PDF, ePub, Mobi
    The Svelte Handbook. 41 pages. Fall 2019. PDF, ePub, Mobi
    The HTML Handbook 87 pages. Summer 2019. PDF, ePub, Mobi
    The CSS Handbook 173 pages. Spring 2019. PDF, ePub, Mobi
    JavaScript from ES5 to ESNext. 75 pages. Early 2019. PDF, ePub, Mobi
    The React Handbook. 220 pages. Early 2019. PDF, ePub, Mobi
    The Node.js Handbook. 189 pages. Fall 2018. PDF, ePub, Mobi
    The Express.js Handbook. 61 pages. Fall 2018. PDF, ePub, Mobi
    The Vue.js Handbook 122 pages. Summer 2018. PDF, ePub, Mobi
The Linux Commands Handbook
normal ether
#

Mastery – Robert Greene
Deep Work – Cal Newport
The Subtile Art of Not Giving a F**ck – Mark Manson
The Power of Habit – Charles Dugigg
Atomic Habits – James Clear
The Paradox of Choice – Barry Schwartz

solemn jewel
#

@normal ether i cleared your warning 😄

normal ether
#

👍

chrome parcel
#

i have these books
The Hackers Playbook 2
The Hackers Playbook 3
Gray Hat Hacking
Black Hat Python
Practical Reverse Engineering x64
Cybersecurity for dummies

#

which one should i read first

prisma coral
#

@chrome parcel would you recommend getting the The Hackers Playbook 2, if you've already got the 3rd version?

normal ether
#

@chrome parcel gray hat hacking

west fjord
#

Start with Cybersecurity for Dummies.

cedar plank
#

I can't find that book that was "python for hackers" or something ? Tim, did you do that?

boreal osprey
#

@prisma coral THP2 teches you things that THP3 dosen't as you read THP3 you'll see the author references THP2 alot.

#

I would recommend getting THP2 also

cedar plank
#

this is going to drive me crazy, I thought it was No Starch Press and called Python for Hackers

west fjord
#

Real World Python: A Hacker's Guide to Solving Problems with Code.

cedar plank
#

ok maybe I totally made up that name, maybe that was it

#

yeah it is

#

did you do that one Tim?

west fjord
#

I read part of it, I believe.

humble goblet
#

There is violent python and also black hat python. I've read neither but I've heard good things for both

#

Also these were python2 but someone did the lord's work and ported all the code to python3 on github

#

Are these the ones you're looking for @cedar plank?

chrome parcel
short carbon
#

Is Gray Hat The ethical hackers handbook a good read? It looks really interesting but not sure

sleek escarp
#

hi guys

#

i know this is the channel for hacker or something like that but what if i have some question about the operating system

chrome parcel
sleek escarp
#

ok

mortal wedge
#

want

mortal wedge
chrome parcel
#

test

cobalt quarry
#

anyone know anything about this company ot tis book?

#

this*

cedar plank
#

no, I'd take a hard pass just previewing it, no author, $100

north spade
#

@cobalt quarry good chance Offsec will have that taken down anyway

stoic oracle
#

from the public pages amazon shares it doesn't look like anything about offsec's oscp to me

cobalt quarry
#

Ok @cedar plank @stoic oracle @north spade thx for the responses 🙂

minor blade
#

@cobalt quarry That OSCP dosen't stands for Offsec Certified Pentester 😅.. it's a book for something else

cobalt quarry
#

I feel like and idiot now

#

Thx man

flint bough
#

any references for Threat hunting management

mortal wedge
#

can you be a bit more verbose on what you want ie. Threat Hunting in general, How to setup a SOC, Project Management?

wooden crystal
#

(having trouble with the webapplica tion hacker handbook)So Can anyone refer me Book on web
Like I can get a basic grasp of how the things work

west fjord
#

Do a Google search on Portswigger Academy @wooden crystal

wooden crystal
#

👍

opaque vortex
#

@cobalt quarry That book has nothing to do with Offensive Security. Its some sort of compliance standard around risk and business operations.

broken idol
#

hey does anyone have any recommendations for tech/stem books for a youngling? Have a nephew thats interested in what i do, hes 8 and im looking to maybe get him a few books for christmas. TBD on kits and stuff, just starting with books for now. If there was a kid friendly version of like The Art of Intrusion then that would be awesome

thanks in advance!

solemn jewel
# 
1. the code book
2. CODE (might be a bit to much)
3. Life 3.0 (depends though, might have an existential crisis)
5. things to make and do in the 4th dimension
6. weapons of math destruction
7. the simpsions and their matheical secrets
8. teach your dog quantum physics
9. the cloud book
10. humble pi
11. prisoners of geography
12. a short history of nearyl everything
13. how to (randall munroe, xkcd author)```
#

just from the top of my head

#

most of them are quite high level but delve deep enough into topics (with great explanations) that a youngun can understand (source: i read some of these as a child 😛 )

humble goblet
broken idol
#

Thanks @humble goblet! That looks pretty interesting too

pure solstice
#

hey book club

mental crane
#

Guys, maybe It's a little bit off topic but I think It still concerns this world: any good book on neural interfaces?

hearty geyser
#

Brain-Computer Interfacing for Assistive Robotics

Electroencephalograms, Recurrent Quantum Neural Networks, and User-Centric Graphical Interfaces

Neural Interface: Frontiers and Applications

tidal plume
errant sundial
#

@tidal plume I love and hate you at the same time for that

#

Hacking, The art of exploitation is like $1

#

I went for blackhat go though

#

@mortal wedge Did you pick up blackhat go in the end?

mortal wedge
#

I probably have it somewhere

tidal plume
regal pond
#

IMO it's worth buying even if you already have the books through previous bundles - remember to adjust the sliders for charity 🙂

humble goblet
#

FIIIIIIIIIIINALLY

#

I've been waiting for a bundle like this for months

humble goblet
mortal wedge
#

ohhh

#

the top tier has a few nice books

#

guess were getting it

#

yeet

#

lmao

#

fun fact

#

the malware analysis book gets picked up by AV

#

hahaha

errant sundial
#

What's the bet it contains the EICAR test string?

west fjord
#

Yeah, nothing like getting your Malware Analysis book quarantined as malware.

icy lark
#

Do you guys recommend HAK5 books?

icy lark
#

Hmm you got the point

young flume
#

so what's the over under on this humble bundle heh...

#

is it somewhat good or.. meh?

young flume
#

I'll defo consider it.. The malware analysis book looks promising

errant sundial
#

I mean it's like a dollar right?

#

Excellent price for that book

humble goblet
#

I got them all 🤷‍♀️

humble goblet
#

thanks, you're in the minority 😛

kindred reef
#

It’s super old. I saw it at a book store and didn’t buy it because of that. IS it more like concepts that are relevant forever rather than tools and such that need to be updated often in order to be useful?

regal pond
#

art of exploitation is under rated. same tier usefulness as RTFM and BTFM

lucid rampart
#

I have bought art of exploitation as paperback and still bought the bundle.

#

Also finally bought an ebook reader so i'll be doing a lot of reading in the next few months

fading vault
#

Are the hacker playbooks good?

mortal wedge
#

Yes

uncut crater
#

Is Real-World Bug Hunting: A Field Guide to Web Hacking any good? I want to get into submitting bug bounties on hackerone...Any other resources that would be good for that?

humble goblet
uncut crater
vague dust
#

We can talk about self-help books here too?

ripe trail
#

Does anyone knows any book like black hat python, but for python3?

humble goblet
#

not the exact answer to your question but the next best thing

ripe trail
regal pond
#

There are some pretty significant deviations between py2 and py3 on how raw strings are handled - I've never had much luck getting p3 raw string shellcode to work correctly

#

good luck

north spade
#

^^^
It's a pain to get working

#

Exploit Dev: The one place I still say use Python2

chrome parcel
#

what are some good beginner books?

regal pond
#

on what topic?

west fjord
#

I really like Network Security Assessment, Third Edition, by Chris McNab. @chrome parcel

gentle dune
#

Has anyone read The Pentester's Blueprint?

#

or _Hands on Hacking: Become an Expert at Next Gen Penetration Testing and Purple Teaming? I am thinking of getting one of those books for the holidays but I am not sure which one.

west fjord
#

Two very different books. Blueprint is more about what it takes to become a Pentester, and it is rather lite on everything else. It's only 140 pages. Hands on Hacking is more about tools and techniques. @gentle dune

regal pond
#

For learning about scoping and non-technical pentest stuff, strongly recommend red team field manual and blue team field manual. If you don't have those and are interested in the 'breaking stuff' aspect of security, I think they are required reading

gentle dune
west fjord
gentle dune
thick temple
#

Hey whats your review on Ghost in the wires Book

#

By ~KDM

gentle dune
thick temple
#

Have something Technical ?@gentle dune

chrome parcel
thick temple
gentle dune
thick temple
#

@gentle dune Actually No but i love reading when i am bored so i love it to make ny time productive .uknow pengudab

gentle dune
#

@thick temple I started reading it and its a great book, but I stopped cause it was more of a story and not teaching stuff

gentle dune
regal pond
# chrome parcel Beginner security

Humble Bundle currently has a good bundle called 'Hacking 101'. Lots of practical material there a lot of the beginner level books will be useful. A Sec+ study guide might also give a useful overview. On a 'free content' level, I'd say look up some blogposts about the CIA triad

thick temple
#

Yeah Gonna try it . thAnkyou @gentle dune

fading vault
#

What are the main differences between these 3 books

#

They seem to be the most popular here

gentle dune
# fading vault

I have hacker playbook 3 and its good just a lot of information and tools. Hacking is good also (so I hear) but you can get it part of the Humblebundle deal for $1 and Hands on Hacking is the book I am looking at right now just to learn more about hacking methodology and get better

regal pond
#

IMO art of exploitation is a better beginner book

fading vault
#

Ghost in the wires is an amazing auto biography, definitely recommend it!

agile kraken
#

How would you guys rate The Art of Deception?

cedar plank
#

did anyone ever get the Morgan&Claypool books from Humble Bundle? I'm wondering if these are good quality but can't find anything. I actually need to brush up on all these subjects so... not sure: https://www.humblebundle.com/books/applied-math-statistics-toolkit-morgan-claypool-books?hmb_source=humble_home&hmb_medium=product_tile&hmb_campaign=mosaic_section_2_layout_index_5_layout_type_threes_tile_index_1_c_appliedmathstatisticstoolkitmorganclaypool_bookbundle

Humble Bundle
Humble Book Bundle: Applied Math & Statistics Toolkit by Morgan & C...

We’ve teamed up with Morgan & Claypool for our newest bundle. Get books like Essentials of Game Theory and more. Plus, pay what you want & support charity!

west fjord
#

I usually find M&C books too academic for my taste, although those can be good for 'academic' research.

sour hazel
#

does anyone have any good recomendations as a fairly new beginner on some kindle books ?

gentle dune
sour hazel
#

thanks @gentle dune i will give it a go 🙂

regal pond
cedar plank
#

I think I figured out that I'll just buy what I need when I need it from Amazon

humble goblet
#

(the book is in the bundle)

sour hazel
#

are those in pdf ?

humble goblet
#

you can download them in pdf and other formats, yes

sour hazel
#

oh sweet, i shall grab those then as i am wanting some books for my kindle

humble goblet
#

it has kindle format as well 😉 go for it

sour hazel
#

oh nice ... so with the price it says pay what you want but obviously the lower prices contain less books ??

humble goblet
#

yup, the higher you go, the more books you get

sour hazel
#

im guessing its worth paying for them all

humble goblet
#

definitely worth it in the sense that they're great books, but it's up to you of course

sour hazel
#

awesome 🙂 i dont mind paying £20 for them at all

errant sundial
#

@sour hazel I think it's like £13?

#

Yeah £13.66

sour hazel
#

yeah i got it

errant sundial
#

Each tier comes with the previous tiers for humble

sour hazel
#

got them 😄

humble goblet
#

enjoy

cedar plank
#

even though I have Oreilly online still tempted by that bundle although I have most already

humble goblet
cedar plank
humble goblet
#

probably not 😄 ah well

cedar plank
#

I paid for Safari online for a few years when it first came out but it was really cheap back then

#

but they have the entire No Starch catalog so its nice

regal pond
#

I buy the bundle even if i have most of the books already if i like the charity

chrome parcel
#

Do you guys read entire book in pdf formot

rotund locust
#

I'm contemplating on buying the book Sandworm. I think the 3 star and below reviews on Amazon affected me, but there are also bad reviews on books that I truly enjoy. Hah! Decisions.

rotund locust
#

Yeah. You're right. They said the author is biased.
I'm not from US or Russia, I just heard the NotPetya episode on Darknet Diaries so it got me curious about the book.

errant sundial
#

If it's a PDF, I'm normally reading it for reference, like the quantum crypto book I picked up

chrome parcel
errant sundial
#

An android ereader app

chrome parcel
errant sundial
#

I try to avoid it

#

If it's a PDF, I'm normally reading it for reference, like the quantum crypto book I picked up as I said

chrome parcel
#

OK

errant sundial
#

@chrome parcel Please don't send unsolicited friend requests

chrome parcel
mortal wedge
#

I read most of my books in pdf because its easier for me as Im on a whole range of different devices

regal pond
#

^^^ PDF is my preferred format for reading these days. Weighs less than paper, easy to annotate with notes

solemn jewel
#

i read physical textbooks and i buy them myself from the bookstores because i don't like having money or physical space

regal pond
#

I got tired of carrying 20-40lbs of paper around

gentle dune
#

i usually buy my books for the Kindle since it is cheaper and trying to save the environment

humble goblet
cedar plank
#

any book recommendations for making python code more... pythonic? More elegant looking, how to make best design choices, etc

west fjord
#

Practical Python Design Patterns: Pythonic Solutions to Common Problems, by Wessel Badenhorst. 😄 I thought you made up that word: pythonic, but it is used in book subtitles. 😄

humble goblet
#

I'm not sure it fits that description but it's the one that came immediately to mind

cedar plank
#

thanks, I'll look at both

solemn jewel
#

^^ thats one of my fave books

#

one of my all time most popular blog posts is inspired by a small section in that book

west fjord
#

Fluent Python has an Early Release for the Second Edition by the way, from O'Reilly.

icy lark
#

Are there any books that can teach me how to be a scdipt kiddie?

#

I love scripting but I dont know how to do it

icy lark
humble goblet
icy lark
#

I dont know but somehow a reverse shell php code is kinda hard to understand

#

I want to have an ability to understand such thing

humble goblet
icy lark
#

Oh I understand now

#

Thanks for your help

#

I think I cant fully understand what was written in the book "Hack Like a pornstar" at a current time

humble goblet
icy lark
#

So what books may be good for beginners like me?

#

In your opinion

humble goblet
#

if you're looking for an introduction to pentesting, you can't go wrong with this https://nostarch.com/pentesting

Penetration Testing

Penetration testers simulate cyber attacks to find security weaknesses in networks, operating systems, and applications. Information security experts worldwide use penetration techniques to evaluate enterprise defenses. In Penetration Testing, security expert, researcher, and trainer Georgia Weidman introduces you to the core skills and techniqu...

#

it's a little dated but still a solid intro and most of the stuff are still relevant anyway.

#

it's currently in a bundle with a bunch of other great books so you can get it pretty cheap. scroll up and you'll find a link.

icy lark
#

Thanks

#

Appreciate it

icy lark
#

Ill give it a look too, thanks

humble goblet
#

this looks great, although it looks a bit more advanced and comprehensive. thanks for pointing it out 🙂

#

yeah she is

#

well, it doesn't have to be a standalone guide, you can still benefit greatly from the material and test the things you learn on THM for example

#

it's also great to get the basic methodology down

cedar plank
#

Georgia said she partnered with Pentesting acadamy and the labs are there now for her first book (Penetration testing, No Starch press), you might have to go to the website to find the labs

#

her 2nd edition will be the same whenever that comes out

cedar plank
#

if you tweeted her, she'd reply, I thought she mentioned it back in June or earlier

frank basin
#

:3

gentle dune
marble orbit
#

is it recommended to get the whole hacker playbook series?

gentle dune
strange isle
#

Any good audiobooks?

#

For cybersecurity? Pentesting? Hacking ? ?

strange isle
#

Porcast is Darkweb diares

#

Brilliant

#

I finished listening to The Art of Invisibility by Kevin Mitnick, narrated by Ray Porter on my Audible app. Try Audible and get it free: https://www.audible.co.uk/pd?asin=B01N5XY8U3&source_code=AUKORWS071615904E

Audible.co.uk
The Art of Invisibility

Check out this great listen on Audible.com. Kevin Mitnick, the world's most famous hacker, teaches you easy cloaking and countermeasures for citizens and consumers in the age of Big Brother and Big Data. Like it or not, your every move is being watched and analyzed. Consumers' identities are bein...

icy lark
#

Hmm I have a question

#

I have an intention on buying this bundle

#

I just wonder if I have permanent access to those books

limber whale
#

You do

icy lark
#

Nice thing to hear

#

Thanks

limber whale
#

Anytime〜

icy lark
#

Im gonna buy that and 100% of that money will go to charity blobheart

#

And some for nostarch

#

A little (my english sucks)

limber whale
#

Yeah, I bought them and loaded then on to my Kindle to have something to read when I'm not actively at the computer studying 〜

#

Your English is fine〜

icy lark
#

Thanks

#

Hehe. I wish I could get an actual book instead of an ebook

#

But its fine

limber whale
#

I know that feeling. Definitely waiting for March when I can get a hardcopy of the Black Hat Python 2nd Ed.

cedar plank
#

I have access to it now via Oreilly... just saying

haughty wagon
fading vault
#

thank you, that looks interesting!

tiny rain
#

Looks great!

icy lark
#

Do you recommend this book bundle for beginner?

cedar plank
icy lark
#

Thanks

dreamy elm
icy lark
dreamy elm
#

if you're not in the us

icy lark
#

We dont have amazon here

#

I'm in Vietnam

fading vault
#

$79 lmao

dreamy elm
#

Yo guys, does anyone know about this book or about Packt Editions?

mortal wedge
#

I’ve heard about packt and have a few of their books just haven’t really sat down to read them. From my understanding they contain some good information but they can be dry and boring

dreamy elm
dreamy elm
#

Well it’s a no for Packt then, thankss!

dreamy elm
#

Yep I'll look into that, I haven't yet since I have several other books to be done with before starting TS, I especially wanted to know about Packt and the quality of their books hence your answer was really beneficial

astral galleon
#

Seems to be more oriented towards devops, no?

#

as a sysadmin/netadmin that doesn't have a whole lot of experience in devops, would these be a good starting point?

regal pond
#

DevOps is a hugely complicated topic. There are a lot of moving pieces to even a simple deployment; the good devops books in that bundle, just judging from the title, will be puppet, terraform, kubernetes, and jenkins

astral galleon
#

thanks!

humble goblet
#

how didn't I know there's an o'reilly book about kali? and there's another in there that is security oriented bash. definitely worth a look

tawdry fulcrum
humble goblet
#

Check the bundle, they're in there

tawdry fulcrum
#

Nice

west fjord
#

Learning Kali Linux: Security Testing, Penetration Testing & Ethical Hacking; by Ric Messier.

clever flax
#

Better late then never :)
I want to say thanks to @west fjord

I really enjoy this book
I hope he get the mod soon
Really thanks to you

#

Just finished these books and was a surprising a very good lecture

So be open to any of his recommendation

Cause I can't wait to the next ones

chilly osprey
#

He already got mod

west fjord
barren marsh
#

I'd highly recommend reading Meditations by Marcus Aurelius, helped me while serving in military, but many aspects of it are applicable to day to day life,book focuses on adversity and how to truly grow your character, deal with loss and failures in life.

paper roost
barren marsh
paper roost
#

Oooo mind if I DM?

barren marsh
#

go for it

cedar quest
#

Meditations is great

woven glen
#

You have to read Meditations and then another book that is explaning it

barren marsh
fading vault
#

Need ideas for books on christmas :P

#

General pentesting

errant sundial
#

Hacking the art of exploitation
Shellcoder's handbook

regal orbit
#

If you like lower level/hardware Bunnie Huang's "Hacking the Xbox" is a masterpiece

zenith pike
#

Hei guys. Should I grab the Humble Bundle Hacking 101 book bundle?
Any ideas if the books are any good?

cedar plank
#

they are excellent books

severe solstice
#

I think they are great books. I recommend them.

void yoke
#

i want some suggestions on great hacking books

cedar plank
mortal knoll
#

jokes aside

short carbon
#

I wouldn't recommend that book as Tim has said before that's on with borderline black hat

plucky torrent
#

Removed

mortal knoll
#

@short carbon what does that have do do with blackhat?

short carbon
#

Honestly I don't know i've never read it but I saw someone wanted to get it and Tim said it's on borderline with black hat

#

I'll see if I can find it

mortal knoll
#

its red teaming, yes. but you can (in theory) use everything for black hatting

short carbon
mortal knoll
#

what ever, kk

west fjord
mortal knoll
mortal wedge
#

I’ve looked at the scripts and stuff from the github repo for that book nothing really amazing I’ve only ever used one script for an applocker check script

regal orbit
#

Operators Handbook is a good one as a desk reference book

#

ISBN: 979-8605493952

scenic cloak
#

Operators Handbook is great, just dont the the physical copy of it

celest igloo
#

hello all

devout temple
#

@scenic cloak why?

scenic cloak
#

Cant really do that with a physical copy

cedar plank
solemn jewel
#

Favourite statistics books? Looking for maths heavy stuff 🙂

regal pond
#

What level of stats? Intro stuff, undergrad major area of study, or post grad course level?

#

There are a couple of 'Stats and R' books humble has offered in the past that weren't terrible. One of them ended up being a textbook for a stats for CS course I had taken

solemn jewel
#

Undergrad! 😄

#

Although R isn't my favourite language 😂

regal pond
#

R is no ones favorite language.... but it is useful

#

If you aren't using RStudio when doing R, you are making your life a lot harder :X

solemn jewel
#

I do use R studio but still is hard

regal pond
#

Sorting through my e-library now, I can throw a couple titles your way in a few

#

"Introduction to Statistics Using R" by Akinkunmi isn't bad, but it's a pretty heavy read for undergrad. If you aren't used to reading discrete or calculus proofs, you may struggle. YMMV

#

"Probability and Statistics for STEM" by Barron, Del Greco is more accessible, but also possibly less useful long term

#

picking between the two for intro, Barron is probably better

#

"Practical Statistics for Data Scientists" is an Oreilly book, i picked a few thing out of there when I was looking at ML concepts

solemn jewel
regal pond
#

that's what i can find offhand - i know the Dummies series has a stats book that was pretty good when I was struggling with ANOVA

silk helm
#

anyone suggest me any book which can teach programming concepts from scratch like how coding works algorithms etc

#

so after learning high level language would be easy

teal umbra
#

@silk helm from which high level language you want to take start?? If you want to learn c++, object oriented programming in c++ by robert lafore, is a good option.

silk helm
#

C is good for beginning

north spade
#

They're very similar in many respects. Either would be a good choice, although I wouldn't recommend either as a first language.

silk helm
#

then which should be in first

north spade
#

I started with Python then moved down. That would be my recommendation. Something high level lets you get a feel for it. Makes you see how computers operate, and how you can work with them.

silk helm
#

look seniours my purpose of asking is that if even i'm gonna learn C/C++ python bash perl but if i don't know what's going on behind those language codes maybe i get stuck in sometimes so i wanna learn assembly and algorithms for that suggest me any book

north spade
#

Programmatical thought is transferable, it's the same in any language. If you have that then you're already a long way forward.

silk helm
#

i want best knowledge in shell-coding and creating explois

north spade
#

Start with the basics. Exploit dev is not a good place to begin.

silk helm
north spade
#

I would recommend that, yes

teal umbra
#

C and C++ are similar , its just that C++ is more wholesome and it supports concepts of object oriented programming. C how to program by deitel and deitel, it book is often taught in academics in the beginning.

silk helm
#

so im gonna learn C and python bash after that low-level programming

north spade
#

C and C++ are very similar for most things. C is better for kernel stuff, but I personally prefer C++ for coding as I prefer OOP

#

Oh, C is about as low as you get these days

#

It is definitely not a high level language.

silk helm
north spade
#

You used to get somewhat lower, but C is the lowest language most people will ever code in

silk helm
#

so i should have strong grip on python first right but aswell if i read some basic algorithm books

north spade
#

Yep

silk helm
#

ok thanks

#

learning python is really easy

solemn jewel
#

It's just lower level than the current high level languages

regal pond
#

You can do OOP in C. It's just trickier because building public and private interfaces had to be done through exposing different .h and .c files with includes

silk helm
silk helm
#

Any best book for shell scripting

silk helm
#

Ok thanks

#

Ok

mortal wedge
#

I got sandworm

distant coyote
#

I got the browser hacker's handbook 👀

willow quest
#

Any Hardware hackers here? Which one do you recommend for learning electronics as a beginner?

📎 unknown.png
chrome parcel
#

I got Real-World Bug Hunting by Peter Yaworski
So far so good!

#

Wait a second i think i have you on twitter! @modern elk

mortal wedge
#

@willow quest I would highly recommend against books I found for myself I could never really learn anything from them and they were either dry and just theory or way over explained. The only way I was able to actually wrap my brain around electronics was by taking an actual digital electronics course with multiple projects both on and off the computer. This series of YouTube videos is similar to what I took minus the projects but you can look and find various projects that line up with the videos https://youtube.com/playlist?list=PLBlnK6fEyqRjMH3mWf6kwqiTbT798eAOm

YouTube
Digital Electronics

In this subject, we will learn digital electronics from scratch. Learn about number systems, logic gates, combinational & sequential circuits and, other impo...

sullen geyser
#

Can anyone suggest a good book on coding in C?

errant sundial
#

C by Kernigan and Richie?

#

Like.... The C book.

sullen geyser
#

Appreciate it, checking it out now. ✌️

willow quest
rain iris
#

They got nice books for good prices

sick hull
young flume
#

I've been thinking of getting Chris Kubecka's "Through the Rabbit Hole: An OSINT Journey" and maybe "Hack the Planet with OSINT" anyone here read those and think they are worth it? I'm kind of curious before I buy since they are pricey for what they are.

#

But I kind of want to give myself a neat OSINT book 😄

young flume
#

sure do

sullen geyser
#

I still need to finish Web Hacker's Handbook 2

mortal wedge
cedar plank
#

I knew I shoul've bought that blankie

young flume
#

but the story is incredible

mortal wedge
#

Its not really biased against them it doesnt speak of them highly though

regal orbit
sick hull
#

I didn't even spot that!

#

I'd be interested to hear if it's useful

young flume
polar saddle
#

any recommendations for a sql book

#

complete beginner

regal pond
#

what kind of sql?

#

if you are looking for DBMS theory, that can be 'different enough' depending on SQL engine

polar saddle
regal pond
#

how much relational algebra do you have?

polar saddle
regal pond
#

i prefer mysql/mariadb due to familiarity, but postgresql sees a LOT of use in opensource based projects; the other big alternatives are oracle and mssql - both paid

polar saddle
regal pond
#

i have never worked for a "normal" company

polar saddle
#

yikes

#

I guess I'll start with mysql

regal pond
#

i work for a very large opensource shop, and previously i worked infosec for a BPO

#

i've seen all 4 relational DBs in production, it really depends on products and applications needed in the environment

#

if you intend to go for opensource, i'd recommend postgres over mysql

polar saddle
regal pond
#

right now, it seems to be taking hte lead in terms of market share

#

they have their place, just as document based DBs do

polar saddle
#

but I need to learn them if I want to go pro

#

so yea

#

any good books for mysql?

regal pond
#

honestly, you are never going to get good any relational DB without building a horrifyingly complex project

polar saddle
#

well see I need an actual book

regal pond
#

i see - CE credits?

polar saddle
#

honestly I just like having books

regal pond
#

let me see if i can dig up the old text book i had

#

it wasn't bad, but even at a college level a DB class is about 30% relational algebra, 30% translating RA into SQL, and 40% projects

polar saddle
#

but I need to learn some type of SQL db

regal pond
#

honestly, you'll get more mileage out of learning any SQL if you have some kind of a data to manage, even if it's purely manufactured

polar saddle
#

I see

#

omg

regal pond
#

I'd recommend picking a common use-case (inventory, human resources, etc), fabricating a bunch of data and ingesting that into the DB engine

polar saddle
#

this one is pretty expensive

#

looks good tho

regal pond
#

I wouldn't necessarily just buy the hardcover - paperback is fine, and i bet you can a used copy of whatever DB textbook your local uni uses

polar saddle
#

especially the eloquent js one

regal pond
#

or talk to a jr college or community college to see what textbook they use - they'll all be basically the same stuff

polar saddle
#

fell off immediatly

regal pond
#

JS is my least favorite programming language

polar saddle
#

but I felt it chose me

#

and then I fell in React's wrath

regal pond
#

JS chooses no one but the devil

polar saddle
summer robin
#

Anyone know of any new or relatively new infosec novels that is a good read? 🙂

#

Last one i read was fatal system error, it was meh.. ok

zinc orbit
#

I wonder if I've read any infosec novel since Cryptonomicon. and that was from 1999. Unless you count Charlie Stross' Halting state from 2007 and Rule 34 from 2011.

mortal wedge
opaque vortex
#

@summer robin The Daemon by Daniel Suarez was an enjoyable read.

summer robin
#

Aw it was temporary sold out, have to settle with sandworm for the moment 😛

flint cloak
#

Is there an actual bookclub or is this mainly recommendations?

west fjord
flint cloak
#

Damn, well if anyone wants to take up the initiative of making one I'll definitely join.

north spade
#

Y'know, that could actually be quite interesting

#

Is that something you'd be interested in looking at @west fjord? I know this is usually your stomping ground 😆

errant sundial
#

Well there's two main categories

#

It wouldn't be so good with reference books

#

But books like Sandworm etc sounds fun

west fjord
north spade
#

Oh, as in, pick a book each month for people to read 🤷‍♂️

#

Wouldn't be yet anyway though, to be fair

mortal wedge
#

Sandworm is full of political science and sketchy crap

#

And I’m only 4 chapters in

west fjord
west fjord
#

Yes, that's why I'm going to be selective in my recommendations, as to stere clear from political science, and geared towards ethical hacking and learning.

#

We try to keep it educational on the Discord.

west fjord
#

Book of the Month Club
Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali, by OccupyTheWeb.
This month's book is about learning Linux. It covers the same topic as the first of TryHackMe's Modules on the thm site: https://tryhackme.com/module/linux-fundamentals
Feel free to discuss this book with others and ask questions. The goal is to study and learn together! 🥳

TryHackMe
TryHackMe | Linux Fundamentals

Linux is one of the major operating systems and is heavily used in organisations all around the world. Learning how to use Linux is a core competency and will help you in your hacking journey not to just use Linux-based security tools, but how to use and exploit the operating system. This module will focus on getting you comfortable using Linux.

mortal wedge
#

ooo I think I have this book somewhere

west fjord
solemn jewel
#

@west fjord mind if I copy this over to subreddit? 🙂

tawny yacht
tawny yacht
#

It's been a few years since I read it, but it does a great job of getting you familiar with the basics of Kali Linux if you've never worked with that OS or Linux before. Interesting sidenote: I bought the book in the gift store of the International Spy Museum in Washington, DC, USA. If you ever have a chance to visit that, the gift shop has some very interesting book choices!

#

Are you asking in general?

cedar plank
#

the spy museum store is pretty awesome

#

its a museum that has a small gift shop, but its a fun gift shop

solemn jewel
#

is that the one only americans can go to

tawny yacht
# cedar plank its a museum that has a small gift shop, but its a fun gift shop

Yes, part of the reason it is a great museum gift shop is because what it sells ranges from the stereotypical "James Bond" spy stuff to actual legitimate "spy" content. The book selection includes content written by actual intelligence community members (I know this is an international audience in here, so when I write "great" I mean from an academic, wanting to understand more about what actually happens.)

tawny yacht
cedar plank
#

if I happen to be in DC, I'll usually pop in there just to look at stuff

prisma coral
#

Funny indeed, I love it :p

#

I heard the author talk recently in the security weekly podcast

#

Don't seem to find it, but here's some other security weekly stuff on him which might be worthwhile to watch before buying the book:
https://securityweekly.com/shows/se-village-2020-and-innocent-lives-foundation-christopher-hadnagy-psw-618/
https://wiki.securityweekly.com/Episode618

Security Weekly
Security Weekly
SE Village 2020 and Innocent Lives Foundation - Christopher Hadnagy...

Christopher Hadnagy is the Chief Human Hacker of Social-Engineer, LLC. Chris will be giving an overview of inaugural SEVillage Orlando 2020. Brief description of the training workshops provided. Mission and information on non-profit Innocent Lives Foundation. Full Show Notes: https://wiki.securityweekly.com/Episode618 Visit https://www.sec...

#

^

#

Heheh, I didn't experience him that way; I think your consciousness is safe from fiddling

#

Or I'm so badly under his influence that I can't even tell..

rotund locust
#

It's on my amazon shopping list. I discovered Christopher Hadnagy through Darknet Diaries podcast. It's Episode 69: Human Hacker if you want to listen.

flat matrix
fierce creek
#

Looks interesting!! Now I'm wondering if I should buy the Kindle version.

young flume
#

seems simple, but I'm curious

#

need to go through a bunch of other stuff first though

split dew
#

any good books on post exploitation?

#

very interested in avoiding AVs and how that works in a real life pentest

north spade
split dew
#

oo

#

I'm definitely looking forward to that

#

I've just read Metasploit: A penetration tester's guide

#

But the main AV evasion is with msfencode, and not how to avoid it when you're on the network

west fjord
split dew
#

oo thank you sir, looks very interesting

#

I really have very little experience with post exploitation apart from with meterpreter

#

are there any books which really stand out for this?

west fjord
split dew
#

Alright thanks, I guess the field evolves so fast that it's practically impossible to write a full book that isn't outdated very fast?

north spade
#

Yep. You can only really teach the broad overview for AV evasion

split dew
#

Alright thanks for clearing that up

#

Can I ask if there are any books you know that are better for more general post exploitation

#

Figure I've leeched quite a lot this evening

west fjord
split dew
#

Yeah, thank you for that

#

It looks incredibly extensive

#

Can't think how much time it would've taken to have put it all together

west fjord
split dew
#

Yup, I've seen that before at least - it's by the author of LINPEAS if I remember correctly?

west fjord
split dew
#

A great name for an even greater guy

south kayak
#

Anyone read any version of 'Open Source Intelligence Techniques' by Michael Bazzell (also has the OSINT podcast)? He seems to really know his stuff, I'm curious how the book is.

west fjord
south kayak
#

good to know, I knew a little bit about his LEO background. Im super green in regards to OSINT so I'm looking for more of methodology so this seems to be right up my alley.

west fjord
south kayak
#

yep, Im generally wary of books that are reviewed as the "bible of XYZ" but this one universally seems to get this accolade lol. funny enough I just listened to a show he talked about his reasoning on not releasing e-books which mainly has to do with piracy. Its a shame seeing course creators in infosec constantly get ripped off

cedar plank
#

are there any books that would be recommended for OSCP (other than Operator's handbook)

south kayak
#

Hacker Playbook 3 by Peter Kim comes to mind
Although its dated, George Weidman's Penetration Testing still has solid methodology and some modules may hold up on dated Windows machines you may encounter

flint cloak
#

I'm pretty new to cybersecurity and it was painful trying to use Weidman's book. I'd not recommend it for any novice's, way to many issues with various programs being outdated. She's releasing an updated version in the future though. Still TBD on the release according to her twitter.

fading jetty
#

thanx everyone for help

fading jetty
chrome parcel
#

!rank

muted ore
#

hi

cedar plank
limpid forum
scenic rock
prisma coral
#

I'm currently only at 25%, but scrolling through the rest, it focuses mostly on a real assessment while the OSCP exam requires very few of those discovery, exploitation and pivoting tools and techniques they talk about in THP3.

#

Compared to the web application hackers handbook THP3 does talk about different protocols and services you'll need to exploit to succeed in the PWK labs & OSCP exam so that's nice

#

although you'll be attacking lots of websites in the PWK labs, I think both THP3 & the web application hackers handbook go way too far either in breath and in depth, overshooting by a lot for what you'll actually need to succeed in the PWK labs & OSCP exam.

humble fractal
south kayak
solemn jewel
heavy bear
#

Can you share?

heavy bear
#

Can You Share?

errant sundial
#

That user is no longer in the discord.@heavy bear

solemn jewel
#

anyway

#

google social engineering book

#

it was this one

indigo dragon
mortal wedge
#

How did you go all the way back to when this channel started to bring back a conversation lmao

north spade
#

Also I have a really weird Windows bug if you want it 😁

mortal wedge
#

@north spade dm me bb

shell oxide
quasi gorge
#

Can anyone recommend a good networking book?

solemn jewel
#

computer networking:: a top down approachh is the best i've read 🙂

shell oxide
#

CCNA routing & switching book is where I started and it has served me well years after completing the cert

regal pond
#

CCNA 200-301 vol1 & vol2 will cover the first 2-4 years in industry

cedar plank
#

computer networking a top down approach is recommended often so I'd second what Bee says

reef vortex
#

Any book for bash scripting??

west fjord
#

bash Cookbook: Solutions and Examples for Bash Users, Second Edition, by Carl Albing & JP Vossen. @reef vortex

#

Cybersecurity Ops with bash: Attack, Defend, and Analyze from the Command Line by Paul Troncone & Carl Albing.

cedar plank
#

ooo

reef vortex
soft dock
soft dock
#

Art of exploitation anyone?

neon owl
#

Anyone know what is best book on TCP/IP? Please DM if you have an answer, as i'm getting off computer.

thin pond
#

Hi, would love to hear ur suggestions about any book , paid course or podcast about mobsec. Every suggestion is appreciated 😊

mortal wedge
#

Anything published by no starch press is amazing

#

that answers like all those questions

west fjord
thin pond
grave tusk
#

Any Book suggestions about Networking for beginners?

vocal spade
indigo dragon
grave tusk
#

Ty

dusk minnow
#

Has anyone tried Beginning x64 Assembly Programming by Jo van Hoey? I found Art of Assembly Language by Randall Hyde but that seems to use his HLA language.

soft dock
#

So, I second that question

#

I mean, x86 is DEEP. And although it is hugely interesting, it's like a rabbit hole...

#

Like a whole knowledge domain on its own

#

Hacking the art of exploitation is cool. Deprecated, but cool

dusk minnow
#

It sure is and I don't want to know how to use this obscure machine instruction that only the compiler would use once in a blue moon. The thing is that HLA seems to abstract away by using high-level language constructs for a whole lotta things. I could be wrong though.

#

Yeah, I think I have that book somewhere.

crimson fable
#

Hello guys! Do you guys have any great books that are highly recommended for a complete novice who wanted to get into hacking?

west fjord
#

Checked the pinned messages in this channel @crimson fable Especially Book of the Month 🥳

crimson fable
#

Oh wow @west fjord thank you for letting me know!

#

🙂

worn nimbus
#

Would you recommend reading Web application hacker's handbook in 2021? or is it better to just go to portswigger?

boreal quail
worn nimbus
#

Alright. I'll do the same then. Thank you

tepid torrent
#

the academy is just the updated version of the book with included labs so don’t even bother with reading the book imo

west fjord
#

The Portswigger Academy website is great. The book does have nice graphics though with an overview of how web test functionality works together, specifically regarding methodology. I'm referring to Chapter 21: A Web Application Hacker's Methodology

dusk minnow
#

I have ~19GB worth of e-books to sort by category. This is gonna be hell. I should've done it from the start.

worn nimbus
worn nimbus
#

That's why I was confused in the first place lol

west fjord
worn nimbus
#

Alright thanks

crimson fable
#

Ayy guys! Good day!
I'm shopping for books on Amazon. Is the The Web Application Hacker's Handbook 2nd Edition still relevant to this day? Should I get it?

tidal plume
crimson fable
tidal plume
crimson fable
#

Thank you @tidal plume
lol my thank you goes perfectly with your name.

#

Yes, I'm going to get that book. And also saved that web page from PortSwigger.

dusk minnow
#

It's the newest edition

#

Came out like a month ago

#

Actually has a ton of changes

crimson fable
#

Hey @dusk minnow !! Haa! Thanks for showing me this! I thought the 7th was the newest. I'll get this one instead. Good thing I haven't press the purchase button!

dusk minnow
#

OSINT moves fast so get that one

crimson fable
#

Oh you read his other books I see 🙂

dusk minnow
#

I haven't

#

But I remember reading about it a couple weeks ago

crimson fable
#

Cooll. Was it good?

dusk minnow
#

No, I haven't read it. I meant, some guy mentioned it either here or on another server and they were discussing it.

#

I think it got described as the OSINT bible.

crimson fable
#

New one has 666 pages. What a number lol

dusk minnow
#

Guy has 20(?) years of FBI experience on some cyber task force so I'm guessing it's good

crimson fable
#

Yea for some reason they're calling it the osint bible

#

I look forward in getting it. Are you going to get it?

dusk minnow
#

Maybe some time in the future. I'm focusing on SOC things (networking, Splunk, etc) and reverse engineering right now. I'm currently working on re-learning x86 assembly.

crimson fable
#

Good for you that you know what you should be focusing on. I'm still learning here and there. Still new to this! 🙂

#

Good luck to you @dusk minnow !!

dusk minnow
#

Yeah, I eventually want to move into malware analysis. I made a general list of skills, certs and languages I want to learn to get there.

#

Thanks! You too. Let me know what you thought about the book when you read it.

crimson fable
#

Hopefully soon I'll know where I want to move into after spending some time learning all this. 🙂
Sure!! Give me some time! 666 pages! Haha. 😄

twin pagoda
orchid reef
crimson fable
crimson fable
orchid reef
crimson fable
dusk minnow
#

Practical Reverse Engineering is damn good so far. I've had it for ages but just now started reading it.

tall thorn
#

Can anyone recommend any good Social Engineering books?

indigo dragon
agile kraken
indigo dragon
agile kraken
#

it still bases on the same rules and Kevin Mitnick is a master in this art

indigo dragon
#

right now I'm reading The Art of Invisibility from Kevin and I have a feeling that his books are for someone with literally zero experiences in the fields he is describing. but they are well written.

agile kraken
#

I liked his biography, but yeah they were written for people with less technical knowledge, but all he rules still apply, especially in social engineering

#

yes, it was really good

#

I'm so jealous 😄

#

I promised myself I'll go and listen to his talk after covid if he arrives in Poland

#

He is a great speaker

#

I just searched it up and it looks interesting

#

yeah, he seems so nice in interviews

prisma escarp
rotund locust
chrome parcel
#

hi, just randomly want to hear some book suggestions from you. Preferably beginner friendly since I'm completely new to this. thanks for reading this and have a great evening!

west fjord
chrome parcel
indigo dragon
west fjord
flint belfry
#

Do you have any book or resources on exploit development in general@or with python

soft dock
#

A little outdated but it's foundational

flint belfry
#

Thank you

#

I’ll test it out

proper axle
#

Hey hey, anyone know a good and recently updated place/book to study malware analysis?

proper axle
#

I checked that one out, it seems to be done up for windows XP and the reviews say a lot of the content was good at the time but is out of date now.

#

I don't know if the content is still completely applicable or not.

#

Yeah it does I think. I want to get familiar with how malware interacts with systems mainly, so how the operating system handles specific things is up my alley.

west fjord
#

Book of the Month Club
Networking Fundamentals, by Crystal Panek.
This month's book is about learning Networking Fundamentals. It covers the same topic as the second of TryHackMe's Modules on the thm site: https://tryhackme.com/module/intro-to-networking
Feel free to discuss this book with others and ask questions. The goal is to study and learn together! 🥳

west fjord
solemn jewel
#

Tim decides :))

sinful lotus
#

This one 🤩

tender flower
#

There is some good stuff on here! I finished Sandworm a few weeks ago, and I really enjoyed it. I've seen some people on this discord say that it has some questionable poli sci stuff (I don't know much about poli sci, but in retrospect, I do see some of what they mean). I enjoyed the blend of technical stuff (learning about the origin of mimikatz and such) and storyline, however. Anybody else have thoughts on it?

I have been reading Art of Exploitation on and off, but I think I learn better from videos than books. I've been following Live Overflow's binary exploit series on YouTube, and now I understand the AoE book better.

Also, maybe a weird suggestion, but I do think reading Sherlock Holmes stories as a kid is what got me interested in cyber as I got older. Maybe if y'all wanted to have a relaxing, non-technical read, I might suggest it.

scenic rock
#

I'm halfway through Sandworm now and I quite enjoy the blend of history/technical parts too. Though I find the writing style a bit lacking personally. I find it difficult paying attention on this one

chrome parcel
#

I did enjoy it for the reasons cited above, but I'm curious about the Pol. Sc. criticism. Does anyone have an idea what they entail?

west fjord
chrome parcel
#

good idea

lapis dome
#

"Practical Reverse Engineering" or "Reversing: Secrets of Reverse Engineering" - any recommendation which one is better suited if I want to dig a bit deeper into x64 (mostly ELF) RE?

lapis dome
#

I own both (thanks, Humble Bundle :) ). Would like to know with which I should start 😀

chrome parcel
#

The Hardware Hacker by Andrew Huang is a nice book to read 🙂

indigo dragon
west fjord
indigo dragon
#

thank you so much.

modest mantle
rotund locust
scenic rock
#

Does anyone have any recommendations for books on user interface design / user experience?

west fjord
scenic rock
#

Having quickly looked at it, I think it's slightly overkill for what I need it for. But anyways, thanks Tim. I'll keep this on my list too

gentle dune
#

Hey everyone! Quick question, has anyone read the book: Social Engineering: The Science of Human Hacking?

#

If so, how is it?

autumn spoke
#

can please someone tell me about a book that I can reference for binary exploitation?

errant sundial
#

Shellcoders handbook

autumn spoke
#

thank you @errant sundial

south kayak
tidal plume
tidal plume
#

Just for kicks, on the weekend I picked up a couple of books from No Starch;

Cyberjutsu by Ben McCarty, a former NSA developer and US Army Cyber Warfare specialist, about cybersec tactics and techniques with a lot of hot air about ninjas. Currently in Early Access so usually the code 'PREORDER' gives you a discount. https://nostarch.com/cyberjutsu

Effective C, by Robert C Seacord is about writing professional, modern C code in a secure manner. I haven't written any C or C++ code in many years so looking forward to diving in to this and having fun. https://nostarch.com/Effective_C

Cyberjutsu

Based on techniques adapted from authentic Japanese ninja scrolls,Cyberjutsu teaches ancient approaches to modern security problems.

Effective C: An Introduction to Professional C Programming

Effective C: An Introduction to Professional C Programming is an in-depth look at the C programming language.

gentle dune
versed coyote
#

I'm a beginner, have started recently any book suggestions !!

fierce creek
versed coyote
indigo dragon
fierce creek
solemn jewel
versed coyote
#

Okay thanks for the suggestions I will try them out :)

indigo dragon
versed coyote
worldly fulcrum
solemn jewel
#

its the monthly tryhackme bookclub

fresh spoke
#

Listening to "A burglars guide to the city" by Geoff Manaugh. Good listen so far, talks about changing your perspective on looking at buildings.

flat niche
chrome parcel
#

Heyyy! Did somebody read Defensive Security Handbook: Best Practices for Securing Infrastructure by Amanda Berlin and Lee Brotherston? Is it good? Or is it more for people on advanced positions?

west fjord
chrome parcel
#

So, not for me 😄

west fjord
#

You might enjoy Network Security Assessment: Know Your Network, Third Edition by Chris McNab, it provides technical assessment to issues and solutions.

chrome parcel
oblique nimbus
#

I just finished up "The Ideal Team Player" by Patrick Lencioni and thoroughly enjoyed it. I feel that it is honestly a must read

supple flax
south kayak
#

the bible has finally arrived 🙏

unknown.png
austere topaz
south kayak
#

sure thing 😄
given the nature of the book im probably not gonna read front to back and just refer to some of the tools and techniques as needed, but I'll def give some thoughts on the general framework and methodology as a whole

#

but Im only about 50 pages in and I can very highly recommend the book, if you have the slightest curiosity in OSINT listen to his podcast, some of his episodes are basically like audio-book chapters the way he'll cover a specific technique or topic

chrome parcel
#

Hiii, anyone read this book ????

indigo dragon
worldly fulcrum
#

Reading time ❤️blobheart

IMG_20210227_145102.jpg
chrome parcel
west fjord
#

The Ghost in the Host. 😄

thin agate
harsh wharf
#

Hi all, can somebody suggest any resource about building a cft box from scratch? (beginner-medium)

west fjord
harsh wharf
wraith nova
#

watch john hammond video of room creation

#

also i read some blog written by Dark

#

and also there is content on it on vulnhub

harsh wharf
limber gate
#

Learn-Python-Hard-Way-Introduction/dp/0134692888

chrome parcel
#

thanks

limber gate
#

np

hazy grail
#

hello guys

#

i have problem intalling virtual box any help pls

errant sundial
lapis dome
modest mantle
south kayak
brave solar
# south kayak the bible has finally arrived 🙏

Sorry to bug you, but to what book were you referring to as "the bible" a while ago? You sounded rather positive about it and I'd love to know what the fuss is about, but I'm a screenreader user and can't seem to decipher the title from the picture you posted 😦 thanks much 🙂

south kayak
brave solar
#

thanks for clarifying 🙂 I'll give it a look 🙂 and yeah, even just captioning with the book title would already be an awesome help 🙂

modest mantle
brave solar
#

At the risk of going very slightly off-topic, is anyone actually using Georgia Weidman's book in 2020/2021? The material seems solid, and through some github spelunking I think I've been able to find ...most of the older versions required to follow along with the labs excluding a couple older versions of particular applications. I know a second version's being worked on, but off the top of my head I don't really know of a book that covers a similar amount of topics with a similar amount of depth, closest I can think of perhaps being the hacker playbook 3 in combination with the pentester's blueprint. Am I missing a hidden gem? And is Weidman's book recommended to go through at this point, or is waiting for an update the better thing to do? I realize that is a subjective question, I'm mostly curious about the yays or nays, not so much crowdsourcing my path forward 🙂

cedar plank
silk helm
#

Any good book about ruby and metasploit

brave solar
#

uhm ...to do what exactly? Mastering Metasploit has a section on Ruby iirc, but if you still need to come to grips with the language that might not be the best intro?

south kayak
#

To add onto this, Sam Bowne has a cool interactive Violent Python 3 course that plays out like a series of THM rooms - not sure if he's still standing up the servers from CactusCon for the challenges but the lessons are still there
https://samsclass.info/124/VP2020.htm

brave solar
#

if the port he is sending stuff to is indeed 10201 like my tools tell me then that gives no response when poking it with nc so may no longer be up, regrettably. lessons sseem good though, including precious 2020 zoom issues 🙂

earnest lava
#

any good recommendation book for learning linux ?

earnest lava
#

nvm the pinned messages got it

chrome parcel
#

Hello everyone, since I'm pretty bored with pentest these days, I wanna discover new fields and especially cryptography so if someone has a good book about it let me know, thanks !

fierce creek
chrome parcel
#

Oh I will have a look about it, thanks a lot !

west fjord
#

Book of the Month Club
Kali Linux Web Penetration Testing Cookbook, Second Edition, by Gilberto Najera-Gutierrez.
This month's book is about learning Web Hacking Fundamentals. It covers the same topic as the third of TryHackMe's Modules on the thm site: https://tryhackme.com/module/web-hacking-1
Feel free to discuss this book with others and ask questions. The goal is to study and learn together! 🥳

TryHackMe
TryHackMe | Web Hacking Fundamentals

In this module, we'll be exploring the basic components of the modern web including both the basic protocols used, as well as various server components that make up the world wide web. You'll be diving into how to use BurpSuite, a tool which is widely regarded to be at the heart of web hacking. Additionally, you'll learn how to perform basic enu...

west fjord
chrome parcel
desert python
#

For the bookclub...Is there anywhere we discuss the books for the month, or is it just a general recommendation? Sorry I looked at the pinned comments but couldn’t find anything...

short carbon
paper locust
#

he listens to recommendations iirc

desert python
#

But no like real time or guided discussion, right? And thank you!

north spade
tidal plume
chrome parcel
#

whaaat how have i not noticed this channel 😮

#

i love books!

#

anyone else read The Daily Stoic? picked it up yesterday

solemn jewel
#

Yes I've read it! 🙂

indigo dragon
#

is there a book like Linux Basics for Hackers but for Windows?

chrome parcel
#

wait what? Linux basics for windows ?blobhuh

#

Do you mean WSL for example ?

short carbon
#

They're asking for a book that is like Linux Basics for Hackers but instead a windows basics for hackers

chrome parcel
#

Oooh yeah that makes sense sorry 😆

tidal plume
indigo dragon
#

thank you. I have already a PowerShell book on my list of books I would like to read in the future. Right now I'm looking for a book which is more general (just like Linux Basics for Hackers).

paper locust
#

found this one "Windows Hacking: crack all cool stuff of windows"

#

looks like it may have some basics covered

indigo dragon
#

thank you. based on the table of contents this book is probably not what I'm looking for.

chrome parcel
west fjord
indigo dragon
runic bluff
#

I just bought the book The Pentester BluePrint did anyone read it and is it useful for a beginner?

cedar plank
#

I think people have talked about that book positively

runic bluff
#

okay that's nice

#

Thanks

raven cosmos
#

just finished up spam nation. awesome book tried listening to the audiobook while i worked out at the gym, ended up having to leave and grab coffee instead because it steals all your attention

novel locust
#

Has anyone read any of these?

humble goblet
novel locust
#

thanks !

humble goblet
novel locust
#

Yeah I got that bundle too hahahah

#

And they are much much better imo

humble goblet
#

if I buy a book on the no starch platform, do I get all the updated versions too?

#

I'm obviously talking about ebook, not print

novel locust
#

I think you don't, but I bought the humble bundle, not a single book

#

@humble goblet

humble goblet
#

I'm asking because I want to grab a book on there that's currently early access

#

I have a ton of books from HB but I don't expect to get newer editions from there

novel locust
#

no idea mate I'm sorry

humble goblet
#

nw (I wasn't asking you personally 😛 )

west fjord
humble goblet
#

probably not, just thought I'd ask

west fjord
#

Usually not, an edition is considered a new book. But you should get all releases of an edition, atleast that is the case with O'Reilly books.

humble goblet
#

thanks a lot

#

I think I was searching for a no starch book on iot a while back

#

I was very happy to find out about this today

west fjord
#

That looks interesting. 🙂

humble goblet
#

I have a few others but no starch has never let me down

west fjord
#

Pre-orders with early access materials will receive a PDF containing those completed chapters as soon as it becomes available. When the completed text becomes available it will automatically be uploaded into your customer account at nostarch.com. You will receive an email notification with links to download the texts, or you can access them directly in your user profile

#

Had to look it up 😄

humble goblet
#

ayy speak of the devil

oblique nimbus
#

No starch are the good ones right?

indigo dragon
#

No Starch Press is the best !

novel locust
#

I really need to stop buying 10 books everytime I read one

humble goblet
#

collecting books and reading books are 2 separate hobbies

west fjord
#

Two lovely hobbies. ♥️

tidal plume
tidal plume
# humble goblet if I buy a book on the no starch platform, do I get all the updated versions too...

If you buy a preorder ebook you'll get the updates but you don't get new editions, like you won't get the second edition of Georgia Weidman's book that's currently being edited (but I reckon you're well beyond it anyway). Usually whatever book you're looking for will be in a bundle within 6-8 months. Effective C came out last November. I bought it last month and it's in a bundle this week!

If you're buying an early access book (pdf or paper) the code PREORDER usually gets you a discount and you get all the updates up to release

humble goblet
tidal plume
#

There's a 30% discount on No Starch books in this Women in Tech selection:

https://nostarch.com/blog/celebrate-women-tech-nsp

Celebrate Women in Tech with NSP

For Women’s History Month, No Starch Press is spotlighting the contributions and individual achievements that female authors have made in the world of tech and on our bookshelves. Each week we'll shine your attention on just a few of these remarkable women in tech – along with a 30% discount on all books by our female authors. Use promo code WOM...

humble goblet
#

Nice one. I own a few of those already, but sadly the iot book is not on there

#

I would love to save that extra 5% 😛

tidal plume
#

I decided to rename my book buying habit to my library expansion habit cos a TBR pile is a little too subtle term to describe the volume of books I'm acquiring through Humble Bundle and other book deals. I will never read them all

humble goblet
#

yeah but from what you're saying, you'll be able to practically wish for a book and already have it, so at that point who's laughing?

tidal plume
humble goblet
#

I'm about to spend on a book 2x the amount I spend on 15 with some of these bundles

#

I don't get every single one, only those that I specifically want/need of course

tidal plume
# humble goblet yeah but from what you're saying, you'll be able to practically wish for a book ...

I have purchased 2 books directly from No Starch. Effective C and Cyberjutsu (cos it's the coolest name for a book on cyberwarfare). All the rest are Humble Bundles. Usually there's plenty of crossover in those books (I have most of their Cybersec, Python and other programming books). If they were print books they'd need their own environmentally controlled room. That's much easier on hard drives 🙂

humble goblet
#

why did you have to remind me about that book? I really want it

tidal plume
#

Oh yeah and all the Linux/BSD books too pretty much. And a bunch of Wiley, Sybex, O'Reilly and Packt bundles among others.

#

I'm guessing cyberjutsu will be in a hacking bundle around May/June maybe

errant sundial
#

I read through some of the humble ones on my phone when I'm bored. I can't work through the more technical ones that way, but it's like a written defcon talk for some of them

humble goblet
#

ebooks are also far more practical especially in topics like programming. I learnt C from a book (print) and on a 4:3 screen, and python with an e-book and 16:9. having done the latter I couldn't go back to the former, it was so tiring.

tidal plume
#

I know what you mean. Most technical books are meant for the screen. I'm still getting a physical boxset of Donald Knuth's Art of Computer Programming and Godel, Escher, Bach.

errant sundial
#

I don't think I'd do ebooks for reading for fun.

tidal plume
# errant sundial I don't think I'd do ebooks for reading for fun.

I bought a 7 inch tablet years ago and it changed my life. I've spent so much time reading cybersec, AI, science, art, philosophy, sci fi and so much other stuff. Hundreds of books at my fingertips any time I have a few minutes for whatever topic I want... I still have tonnes of physical books and have bought the physical ones in my local bookshop after buying the ebook

humble goblet
tidal plume
#

Asimov's Foundation/Robot series are phenomenal reading

humble goblet
#

I've never heard of that series, I'll check it out

humble goblet
tidal plume
#

Been trying to get round to Ursula K LeGuin, Ann Leckie and others. Douglas Adams is very high up there

#

Cixin Liu's Three-Body problem trilogy is excellent

tidal plume
humble goblet
#

definitely add h.g. wells to that list if you've never read him

tidal plume
#

Apart from those, Haruki Murakami's 1Q84 is pretty much sci fi, Margaret Atwood's stuff is very good though she doesn't like referring to it as sci fi

humble goblet
#

I'll refer back to your comments when I have time to pick up something new

tidal plume
humble goblet
#

I've read a few others by him although I don't remember them all. Definitely the time machine and the invisible man though. Something that's consistent across all of his books (in my opinion) is that he describes everything like he's living it

#

which adds a huge layer of enjoyment for me

humble goblet
tidal plume
humble goblet
#

nice 😄

tidal plume
tidal plume
# humble goblet nice 😄

He's included LeGuin and Margaret Atwood, Bram Stoker and others in his lectures over the last few years so I tbink I can push him to include it.

humble goblet
#

rain check on that. 😛 but since you've read a few and you're saying that he's your favourite, I'll have to check that series out at some point

tidal plume
#

Yeah I hope you enjoy it. I'm rereading them again on the side along with my studies

opaque vortex
#

Been wanting to pick the latest "Open Source Intelligence Techniques" book which was released on Jan 1st, 2021. Today I looked on Amazon CANADA site and noticed its down from $50ish Canadian to $19. Still $38US on amazon USA site. Not sure if you can get it shipped to states for that price but thought I'd pass it on - https://www.amazon.ca/dp/B08RRDTFF9

south kayak
#

vouch for the book, really useful to have and Mr.Bazzell writes a mean bash script too

paper roost
#

Just got around to finally finishing this book. Can honestly say I've learnt so many handy hints from it.
If ur serious about bug hunting give it a read! (yes it took me that long to finish it)

buoyant sail
novel locust
balmy pine
#

hackers playbook 2 or hackers playbook 3 which is better

balmy pine
#

btw im reading penetration testing handson guide

#

about that book seems interactive

paper roost
#

This is gonna be a long read... Around 650 pages...

worn nimbus
#

What are your thoughts on Hacker's playbook 2? is it worth reading in 2021?

indigo dragon
worn nimbus
#

Ahh alright. thanks alot for replying

brave solar
indigo dragon
humble goblet
# paper roost

gotta love o reilly covers. also, is that a family photo underneath?

paper roost
humble goblet
cedar plank
#

they usually provide an explanation on why the cover

fresh spoke
#

Just finished "Sandworm" which follows the group behind Russia's hacks against Ukraine and other targets. A fun read with a lot of neat history.

modern valve
#

I was just going to mention that, @fresh spoke . I just started it yesterday

fresh spoke
#

Its really good. He does a good job bringing multiple story lines together and making it all feel relevant.

modern valve
#

I recently finished another good one, Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon"

fresh spoke
#

Yup! Are you by chance working through the books on Darknet Diaries website?

modern valve
#

nope

#

don't know of that

fresh spoke
#

It's a podcast where they discuss hackers, hacker culture, and specific events and how they went down. It's a great listen in my opinion, but I also love podcasts.

modern valve
#

interesting. Good to know. I never follow any

fresh spoke
#

Not a bad one to start with. Countdown is on my list. I think I'll load it up tonight.

modern valve
#

it jumps around a bit, chronologically, but I get the feeling sandworm is the same way

fresh spoke
#

It does, but if you listen to it in long stretches its easy to keep up. Cheers mate, good meeting you. Enjoy the book @modern valve

modern valve
#

thanks, same to you!

worn nimbus
worn nimbus
fresh spoke
#

@worn nimbus I have considered re-listening to it.

worn nimbus
#

You should. Even if they're the same stories, it's still fun to listen

willow quest
#

What is a good book to learn Ruby on Rails? Assuming one has programming background (java, js, python) but doesn't know Ruby at all.

paper roost
#

A lot of people would recommend Darknet diaries in here. I don't really like podcasts, only 1 I like is Darknet Diaries. It's amazing

cedar plank
paper roost
cedar plank
#

oh! nevermind I read it wrong... I'll go away

#

I thought you were saying you didn't like darknet diaries but they were the only 1 you liked 🙂

#

I also am not much of a podcast person myself

paper roost
#

Ahhh! Yeah I wrote that pretty bad. Hate typing on a phone. Same! But they're great to stick on when ur multi-tasking.

novel locust
#

Do you guys take notes when reading books about hacking? I've been trying to change my methodology for quite a long time and I don't find one I get comfortable with.

#

If I sit and read only, I forget 90% of what I've read when I finish a book

willow quest
tender flower
# novel locust Do you guys take notes when reading books about hacking? I've been trying to cha...

I didn't usually in college, although there was one prof who used a test bank, so you kind of had to go through the book and take notes to see how the questions would be worded. Also, that was Networking and Database. I guess for most things, you have to figure out the best way to learn (visual, auditory, or hands-on). For me, I'm hands-on, so I'm not going to remember much until I'm on a keyboard doing it myself.

novel locust
#

Thank you both!

#

In case anyone's interested : https://www.humblebundle.com/books/learn-you-more-code-no-starch-press-books?hmb_source=humble_home&hmb_medium=product_tile&hmb_campaign=mosaic_section_2_layout_index_2_layout_type_twos_tile_index_2_c_learnyoumorecodenostarchpress_bookbundle

Humble Bundle
Humble Book Bundle: Learn You More Code by No Starch Press

Ready to elevate your programming skills? No Starch Press is bringing us ebooks like PowerShell for SysAdmins. Plus, pay what you want & support charity!

regal pond
novel locust
west fjord
# novel locust I read in eBook :/

Make a text document and put it side-by-side with the eBook. Take notes per chapter, or summarize, in case the book doesn't include chapter summarizations at the end of each chapter. Good books for learning often have indicators what the important take aways are, including markers like Pro Tip. Try to not copy and paste but summarize in your own words, which will be an additional form of memorization and enhance understanding of the topic at hand. 🙂

regal pond
# novel locust I read in eBook :/

Many ebook readers also allow you to annotate with comments - take advantage of that if you can find a compatible reader that has that functionality

novel locust
novel locust
#

I appreciate a lot your help

modern valve
#

Kindle allows you to highlight sections, and then export those to csv (I think?)

tidal plume
novel locust
tidal plume
# novel locust No starch press is amazing

Yeah absolutely! I love their books! Humble Bundle is a great resource for their books on all topics but otherwise I'll just buy the book directly from them. I prefer pdf or epub if I can't have a physical book 🙂

buoyant sail
novel locust
buoyant sail
#

If you have an ipad you can open splitscren

#

splitscreen

#

One side readig one side note taking

#

( if you prefer digital notes over paper )

chrome parcel
#

?

#

Mods ? PepeMamamia

novel locust
#

It's my favourite book

plucky torrent
#

@tacit compass Can we please keep controversial/ political topics away from the Discord 🙂
r

novel locust
#

just got this bad boy 😎

fresh spoke
errant obsidian
sick hull
#

@novel locust I'd be interested to hear how you get on with that. I've been on the fence about getting it for a while. Ended up goinf for the Operators Handbook as it was recommended by Droogy

#

Theres also the BTFM and now the Purple one aswell

regal pond
#

Esqy, RTFM is the best discussion I've found yet for scoping an aggressive engagement. It's more about the meta-work of aggressive security testing than the technical details

chrome parcel
novel locust
#

It is so well structured that it's even easier to find things there than in google

tidal plume
#

The final edition of Cyberjutsu just dropped. I picked up the digital edition on Early Access some time ago. Fun read from former NSA developer, US Army Cyber Warfare Specialist, Quantum Security Researcher, and in his own words, not a ninja, Ben McCarty

cyberjutsu.png
#

You can still pre-order this with 25% off with the coupon code, PREORDER from https://nostarch.com/cyberjutsu

Cyberjutsu

Based on techniques adapted from authentic Japanese ninja scrolls, Cyberjutsu teaches ancient approaches to modern security problems.

modern valve
#

Hackable: How to Do Application Security Right

paper roost
humble goblet
worldly fulcrum
worldly fulcrum
novel locust
#

If that doesn't appear, I'd say just read it from beginning to end and do the exercices/take notes

worldly fulcrum
#

Oh

#

Thnx🙏👍

chrome parcel
#

Hello everyone,

As I am pretty bored with Distrohopping these months, I wanna create my own Linux distribution from scratch, if anyone got any type of resources to help me achieve it I will be very glad about it,

Thanks !

ember jewel
#

Linux from Scratch

chrome parcel
ember jewel
#

It's a distro

chrome parcel
#

Ah ? After more searching I did find a book too, soooo

#

I will look onto this two anyway

plucky tangle
#

Hey everyone,
Can you guys recommend any good books for cryptographic puzzles?

west fjord
#

The GCHQ Puzzle Book (and volume II by the same title) @plucky tangle

plucky tangle
#

Thanks!

errant sundial
acoustic geode
#

Hey all is Georgia Weidman's 'Penetration testing – A hands on introduction to hacking' worth having a look at? I'm a beginner in sec but I've been using linux for ages, I'm ok-ish at mathy crypto and I''m familiar with some typical pentesting tools. The reason I'm asking is that I got an offer to buy a physical copy really cheap

tidal plume
acoustic geode
humble goblet
worn nimbus
peak pendant