bookclub

[paper locust]

I haven't read it myself, but I did see a talk she did last year and said that a lot was still relevant

[zealous bloom]

@paper locust thanks

[hidden bough]

Gave +1 Rep to @paper locust

[buoyant sail]

As Juun said, O'reilly doesnt have much books on security only. If your interested in cloud security or making application X secure there are plenty of books available. But that is all your own taste and in which field you want to get better 😄

A lot of books also have a section about security so that also might me worth it to check out

[buoyant sail]

Searching for some non tech books

Like fun books to read while laying in bed

[steep turtle]

sandworm is great if you didnt read it already

[buoyant sail]

Already read it

Something a bit the same like the alchemist, not a motivation guru book but it contains a lesson or 2

[indigo dragon]

@buoyant sail ^

[buoyant sail]

Those are still books related to hacking

But thanks tho

I like hacking and everything about it but the 30 min before I go to sleep I would prefer a nice story instead 🤣

[vocal needle]

How about Terry Pratchett's Discworld novels?

[buoyant sail]

Seems interesting 😮

Is there an order to read those?

[vocal needle]

Sort of, it is not necessary to enjoy them to start from the beginning but have a look here: https://www.terrypratchettbooks.com/book-series/discworld/

My favorites were "Going Postal" & "Making Money" + the books from the series about the city watch

[buoyant sail]

Okey great! Will start tonight with the first one 😄

Thanks for the recommendation 😄

[errant sundial]

Excellent taste

[zinc orbit]

I guess it's even better to read them out of release order. Some of the first ones aren't really that good.

[cosmic bone]

I enjoy the Murderbot Diaries by Martha Wells before bed, as well as the Core Control series by Andrew Seiple. Murderbot is really light and a good time (written in first person) while Core Control is a bit heavier (LitRPG so there's a lot more to track if you're into tech trees).

[tidal plume]

It does have a lot of relevant info and there is a second edition in the works but No Starch has another book just recently released called 'Ethical Hacking' by Daniel Graham that might be worth a look at... https://nostarch.com/ethical-hacking

[tidal plume]

'This Is How They Tell Me The World Ends' by Nicole Perlroth

[fallen yew]

https://www.humblebundle.com/books/unix-linux-books?hmb_source=&hmb_medium=product_tile&hmb_campaign=mosaic_section_1_layout_index_1_layout_type_threes_tile_index_1_c_unixandlinux_bookbundle

[delicate light]

If i buy a nostarch press physical book not from the online store do i still get the ebooks ?

[chrome parcel]

Where do you want to buy it from ?

If you have to choose between physical & ebook I think you won't

[delicate light]

From a local vendor. If i order from nostarch online store i have to pay 25 bucks only for shipping so if possible i want to avoid that

Ah found it! It says: Free ebook editions with every print book purchased from nostarch.com

@chrome parcel Thanks for taking your time to help me

[hidden bough]

Gave +1 Rep to @calm bolt

[chrome parcel]

Glad you found what you were looking for

Any time

[tidal plume]

This Humble Bundle from No Starch released this week. I've noticed a growing interest in implementing ML/DL for various tasks in cybersecurity domains from network monitoring to malware analysis and forensics. Some of you might like to explore it 🙂

https://www.humblebundle.com/books/machine-learning-bookshelf-no-starch-press-books

(of course there's worthwhile books on C, Python, R and SQL, which you might like to be familiar with)

[buoyant sail]

For ML/DL you can better start with the math first

[tidal plume]

From the description of the first book in the collection:
'Deep Learning: A Visual Approach is for anyone who wants to understand this fascinating field in depth, but without any of the advanced math and programming usually required to grasp its internals.'

You can learn the maths as you go...

[regal pond]

That's a terrible idea.

Without knowing any linear algebra, the math is going to be incomprehensible.

[buoyant sail]

^^

[tidal plume]

It's not a terrible idea. We're at a stage where not everyone needs to understand the intricacies of the maths of DL to implement a proven and widely used algorithm. Besides, not everyone wants to get as deep into a topic that they know everything about it and some just want a gentle introduction to get started. The book itself encourages you to go looking when you want to delve deeper

And, if you want to go further there are books and websites and plenty of other resources to learn the maths, like the excellent Deep Learning book by Ian Goodfellow et al. which you can download chapter by chapter from the book's official website, gratis... https://www.deeplearningbook.org/

[regal pond]

The mathematical introduction is fine... If the reader is already pretty fluent in math. Scrolling through the pages on that deeplearningbook link, it is absurd to say that the math doesn't need to be understood for the reader to understand the algorithms and methods presented.

[buoyant sail]

There is a reason why college spends a BIG part of the first year on math only (Dutch University to study AI)..

[tidal plume]

I do believe you're jumping the gun with your assertions, since I only implied that the book was an introduction to Deep Learning. It's written by a Senior Research Scientist whose expertise is in graphical tools and applications, and who uses these technologies to apply them to appropriate tasks. He works for Weta Digital, the same people who did the graphical work for Lord of the Rings etc...

Besides, implying that someone needs to know the underlying structure of an application or tool is like saying someone learning Python needs to go and learn Electronics, Assembly language and C before they can write a Python script... Just no!

[novel locust]

Any recommendations on a book about password security?

[buoyant sail]

Google

A book only about password security would be insane xD

Unless you mean like password management SSO and stuff like that ;p

[drowsy gust]

Cryptography is more along the lines of topic you might want to seek out.

[tribal nebula]

https://www.youtube.com/watch?v=eLLtQgAdHKA&t=97s

[young flume]

[novel locust]

I know, but I am specifically searching for info on password security, thanks anyway! ❤️

[hidden bough]

Gave +1 Rep to @drowsy gust

[regal pond]

That's a pretty vague topic. Is there a more specific thing about passwords you are looking for?

[novel locust]

How are they stored, how can they be cracked, why length is important... I want to do some research on the topic

[regal pond]

So that's pretty basic stuff - there will be a ton of resources you can google for the math of password strength (hint: combinatorics). Password storage is handled differently by each major OS type, and there are additional components to modify how accounts are kept secure. Setting up FreeIPA on a homelab network can help you learn that.

[unkempt osprey]

any good books on social engineering?

[chrome parcel]

I've read only one book on SE but I think it's still the best in its category, even the best-known if I don't make any mistake

" Social Engineering : The Art of Human Hacking " by Christopher Hadnagy

You can buy it easily on Amazon

Oh I forgot the 2018 version of it, " Social Engineering, Second Edition: The Science of Human Hacking " by the same author, I've also read it

[south kayak]

skimming through this right now, i like the format of the book, kind of a collection of essays
https://twitter.com/divinetechygirl/status/1438169979996852226

C:\hristina (@divinetechygirl)

97 Things Every Information Security Professional Should Know (e-Book) is available today (print book will be available in a couple of weeks, pre-order today). @OReillyMedia

O'Reilly: https://t.co/ijL3LTTKWF
Amazon: https://t.co/9h2O3Tyvtt
Google Play: https://t.co/XHb6dowYYJ

Twitter · Sep 15, 2021, 3:56 PM

also don't forget for those of y'all with .edu e-mail addresses, you can read and access all of O'Reillys stuff for free online, even this book

[formal estuary]

https://www.bloomsbury.com/us/this-is-how-they-tell-me-the-world-ends-9781635576061/

Just finished this one ^^^ good read. Not technical at all but covers a lot of events in hacking history

[tidal plume]

Yeah it's a great readabout some of the realities we face at the moment

[west fjord]

Looks interesting: Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities by Vickie Li. 📖

One more: Jump-start Your SOC Analyst Career: A Roadmap to Cybersecurity Success by Tyler Wall and Jarrett Rodrick 📖

[nova seal]

It'd be great if someone here who read it can give a short review

[tidal plume]

There's a write-up about this book and the author on the No Starch site:
https://nostarch.com/blog/vickie_li_bughunter

[errant sundial]

https://twitter.com/DfirDiva/status/1439764296876052484 this looks super interesting

DFIR Diva (@DfirDiva)

Just got this in the mail. Not only is each layer described, there are hands-on labs or walkthroughs for each layer (forensic imaging, network forensics, email analysis and more). I still need to finish Rootkits and Bootkits 😳

Likes

254

Twitter · Sep 20, 2021, 1:32 AM

[chrome parcel]

Any recommendations on Audiobooks?

[neat cove]

Is there a book like mr robot? Something with acurate-ish cyber security thats entertaining to read, pmuch like the show

[flint swallow]

Daemon by Daniel Suarez, The Nexus Trilogy by Ramez Naam? Interface by Neal Stephenson might not be 100% what you're looking for but it's really good

[neat cove]

@flint swallow who did u reply to ? me or 404jin?

[flint swallow]

you, but if you can find them as audio books, sure why not

[neat cove]

thanks dude

[tidal plume]

Stealing the Network: The Complete Series Collector's Edition

A little bit old at this stage but these are fictional stories based on real technology and hacks

https://www.amazon.com/Stealing-Network-Complete-Collectors-Chapter/dp/159749299X/ref=sr_1_1

[neat cove]

Ill check it out , ty

[dreamy belfry]

Any recommendations for a red team book? Im a seasoned beginner looking to see what red team is all about. I’m not sure what direction I want to go in so I’m trying to learn about as many aspects as possible till I find my niche. I just finished SE by Hadnagy.

[tidal plume]

These are the general ones recommended for Red Teaming though carrying on with understanding penetration testing and other ethical hacking techniques is an essential foundation

Red Team Development and Operations: A practical guide
https://www.amazon.com/Red-Team-Development-Operations-practical/dp/B083XVG633/ref=sr_1_7

Operator Handbook: Red Team + OSINT + Blue Team Reference
https://www.amazon.com/Operator-Handbook-Team-OSINT-Reference/dp/B085RR67H5/ref=pd_bxgy_img_1/141-5421472-0211641

PTFM: Purple Team Field Manual
https://www.amazon.com/PTFM-Purple-Team-Field-Manual/dp/B08LJV1QCD/ref=pd_bxgy_img_2/141-5421472-0211641

[dreamy belfry]

Thank you! Do you recommend any certain book that would be better to start with or does it not matter?

[hidden bough]

Gave +1 Rep to @tidal plume

[west fjord]

It might be beneficial to first learn what pentesting is about, after that transition to learning about red teaming (and how it differs from pentesting). It provides a better progression of learning in my view. 🙂

[dreamy belfry]

I feel like I know what Pentesting is about. But maybe I don’t because I don’t think I could tell you how red teaming is different from pentesting. I think that’s maybe partly why I wanted a good red team book.

[regal pond]

red teaming is largely a marketing buzzword. In the context of an active engagement, it is an adversarial simulation. Compared to the blue team pentest, which is usually done with more knowledge of the environment and systems.

[west fjord]

The first book mentioned above is perfect Red Team Development and Operations: A practical guide 🙂

[dreamy belfry]

Thank you all!

[novel locust]

Is there any cheaper alternative to the official Security+ book?

[tidal plume]

There's lots of alternative books available but I can't comment on the quality or content so you'll have to do your own research on that. When approaching an exam, it might be worthwhile to try other resources as well, like online courses, practice exams etc...

This one is less than $10 for the Kindle edition and the ratings are quite good.
https://www.amazon.com/CompTIA-Security-Get-Certified-Ahead-ebook/dp/B09237T9ZB/ref=sr_1_1

[tidal plume]

There's plenty of books to start with when learning pentesting/ethical hacking. I've listed a few of the ones I used below but others will have good suggestions too. The most important thing when learning ethical hacking/pentesting is to practice what you learn in a safe environment like THM.

Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman
The Hacker Playbook 3 by Peter Kim (The whole series is good but the most recent is best)
Advanced Penetration Testing by Wil Allsopp
RTFM : Red Team Field Manual by Ben Clark

[novel locust]

Yeah I've done some research and that one is a pretty reasonable option, thanks for your time! ❤️

[hidden bough]

Gave +1 Rep to @tidal plume

[mortal wedge]

https://twitter.com/ochsenmeier/status/1441703270125297664?s=21

marc ochsenmeier (@ochsenmeier)

Just arrived. Looking forward to reading...

Twitter · Sep 25, 2021, 9:56 AM

[west fjord]

Good book. Part of it: Oligomorphic code. Try to say that 3 times in a row. 😄

[timber wyvern]

@errant sundial

[earnest pike]

This book is high on my wishlist: https://www.amazon.com/Security-Metrics-Replacing-Uncertainty-Doubt/dp/0321349989

[west fjord]

New interesting book:
Threat Hunting in the Cloud: Defending AWS, Azure, and Other Cloud Platforms Against Attacks by C. Peiris, B. Pillai, A. Kudrati ☁️

[raw compass]

I'm a beginner with the basic knowledge I guess and a bit of the theory stuff but zero practical knowledge

Any books or videos or a source where I can get materials to help ?

Also tips on how to start and always finish

[buoyant sail]

Oehh thanks!

[hidden bough]

Gave +1 Rep to @west fjord

[buoyant sail]

Well what are your areas of interest?

[green orbit]

Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman could be a good start.

[green orbit]

Set a schedule, and stick to it everyday.

[raw compass]

Pentesting and network security

But majorly pentesting

[raw compass]

Thanks a lot

[hidden bough]

Gave +1 Rep to @green orbit

[raw compass]

Thanks
Another thing, is it recent ?

[chrome parcel]

last edition I know of was 2015

[raw compass]

I'll look at it

Thanks

[chrome parcel]

This autumn, the second edition is supposed to come.

[regal pond]

The tech in it is a little dated, but it's still a very good book. Conceptually, it's timeless.

[green orbit]

Another one I liked when I started learning was "Linux Basics for Hackers" by Nostarch Press. If you are not familiar with Linux it should definitely help.

Anything from that editorial is good quality.

[chrome parcel]

Sure, it is, absolutely :)) Just new edition will have actualized tools, exercises, etc. , so may be worth waiting few months. The same Erickson's Hacking due being very low level, is not really outdated.

[dire quarry]

The Pentester Blueprint by Philip L. Wylie and Kim Crawley.

[timber wyvern]

any good red teaming books? like with tutorials and theory? thanks

windows focused

[buoyant sail]

Why would you refer to books for this if your searching for hands-on?

Use platforms like THM, burp suite academy, HTB to learn these things

And support that knowledge with theoretical knowledge out of books

Build your own SQL database and try to peform sql injections on it

and secure it

[chrome parcel]

Windows Internals by Russinovich (part 1, do not preorder part 2 - nobody knows when it will come), and this: https://zer1t0.gitlab.io/posts/attacking_ad/ + use thm, htb, etc.

[timber wyvern]

thank u!!!

[chrome parcel]

yw :))

[vocal jungle]

Hi! Can anyone recommend me some interesting textbooks? specific network / tor network

[tidal plume]

Thanks! Interesting to say the least. Wondering if it'll make a Humble Bundle in the coming months but might make a nice Xmas read. Sample chapter is good

https://www.wiley.com/en-ie/Threat+Hunting+in+the+Cloud%3A+Defending+AWS%2C+Azure+and+Other+Cloud+Platforms+Against+Cyberattacks-p-9781119804109

[hidden bough]

Gave +1 Rep to @west fjord

[lapis meteor]

https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470/ref=asc_df_1118026470?tag=bingshoppinga-20&linkCode=df0&hvadid=80470560944216&hvnetw=o&hvqmt=e&hvbmt=be&hvdev=c&hvlocint=&hvlocphy=&hvtargid=pla-4584070138099505&psc=1

it's over 800 pages amazing book

one of the writers also made burp

[tidal plume]

Yeah it's a great book. It has been superseded by Portswigger Academy because the author wanted to make a resource that could keep up with progress in the field

https://portswigger.net/web-security

[buoyant sail]

@elfin mountain Pretty sure this is scam ?

[elfin mountain]

yep

[raw compass]

Thanks alot

[hidden bough]

Gave +1 Rep to @buoyant sail

[buoyant mortar]

Hello guys,
any Book recommendation on Linux?
if so DM me

[green orbit]

To learn the basics?

[buoyant mortar]

Yeah, like… „Allrounder“ Book🤣 sounds kinda weird haha

[green orbit]

https://nostarch.com/linuxbasicsforhackers + Installing a Linux OS, either as a VM in order to practice, or as your daily driver.

[buoyant mortar]

Sweet thank you!👌🏻☺️

[short basin]

Any good PowerShell books ?

[west fjord]

PowerShell Cookbook Fourth Edition by Lee Holmes. 🙂

[short basin]

Thanks

[trail dagger]

I purchased PowerShell for Sysadmins by Adam Bertram. It looks good, but I haven't been able to tap into it yet. Been busy with other things.

[errant sundial]

Their blog is excellent, Adam the Automator IIRC

[tidal plume]

The Linux Command Line book is free to download from the official website

https://www.linuxcommand.org/tlcl.php

The official Kali Linux book (basically an adapted Debian book) is free to download from the Kali Training website

https://kali.training

[buoyant mortar]

Oh wow thanks a lot 😁🤙🏻

[hidden bough]

Gave +1 Rep to @tidal plume

[solemn jewel]

One of my colleagues is a co-author, highly rec this book 😄 https://www.apress.com/gb/book/9781484272169

[chrome parcel]

Can anyone suggest me some books on Ethical hacking and related technical stuff.
Am just 17 so try to suggest smtg I can understand.
Regards.

[chrome parcel]

Any book recommendations related to Metasploit, besides "Metasploit: The Penetration Tester's Guide"?

[west fjord]

Let me check for you. 🙂

Mastering Metasploit Fourth Edition by Nipun Jaswal 🙂

[chrome parcel]

Thanks @west fjord

[hidden bough]

Gave +1 Rep to @west fjord

[novel locust]

Hey guys, I don't know if anyone in here reads in kindle format, but is there anyway to take good notes on a kindle book? I don't necessarily mean with the device, but even when reading kindle books on my PC, the software seems pretty bad when it comes to taking notes.

[humble goblet]

There's also Metasploit unleashed by offsec (free). Not a book, but you may be interested in it

[chrome parcel]

Thanks @humble goblet

[hidden bough]

Gave +1 Rep to @humble goblet

[buoyant sail]

I have a kindle for "nice to read" books, I use my ipad to take notes on books where it is necessary and just splitscreen or highlight and after finishing the book writing notes about it with the highlights

[novel locust]

But you can't take notes on kindle books directly with your iPad right??

I've been trying to convert them to pdf, which I used to do, but it doesn't seem possible anymore

[buoyant sail]

Not with kindle no but you can mark them and splitscreen notion or whatever note taking app you use

[novel locust]

yup that's what I'm currently doing but it's not really optimal to me

Thanks anyway!

[humble goblet]

Just use a marker and take notes directly on your screen. Not ideal but obviously the most hassle-free option

[amber girder]

Just use a marker and take notes directly on your screen. Not ideal but obviously the most hassle-free option

[unique epoch]

why are coping and pasting it?

[tiny sky]

Hi, Everyone

Who can get database from website?

[chilly osprey]

Depends on the context.

[tiny sky]

I see.

I developed website, Can you get database from it?

[chilly osprey]

I would prefer not to.

[tiny sky]

why? Bro

It's not legal website.

😆

[chilly osprey]

You need to check out #rules as well as #start-here to get basic understanding of this discord.

[chilly osprey]

?

[tiny sky]

Oh, sorry.

i will check again.

[cinder plaza]

Hmmm 🤔

[tiny sky]

Thanks for your help.

[chilly osprey]

CM ROLE? 👀

[cinder plaza]

DM

[tiny sky]

wow....

thanks.

How can I secure my website?

[novel locust]

sounds good to me

[trail dagger]

Nice. I've actually used some tidbits from Adam the Automator.... don't recall what exactly, but in my random PowerShell adventures at work, I'll be searching the net, and he often comes up. Just confirmed it is in fact him who wrote the book. Btw, sorry, late reply.

[north escarp]

Looks like a drastic language barrier

[errant sundial]

Physical book time.
It's pretty interesting so far, didn't get very far yet.
It's all new to me, so I'm learning quickly

[main mauve]

Oh shiny

[novel locust]

Does anyone know where can I buy this book in a pdf format? The Web Application Hacker′s Handbook: Finding and Exploiting Security Flaws

I only find piracy 😦

[errant sundial]

Honestly you're going to be best off getting it in a humble bundle if they do another Wiley one

I picked it up previously, it's much cheaper and you get a bunch of books with it
It also supports charity. All around good for the community and your learning.

https://www.humblebundle.com/books/infrastructure-and-ops-oreilly-books Side note, this has some Kali and Bash books

[novel locust]

Yeah, I frequently check the web for new bundles, but they don't change that often. Thanks!

[hidden bough]

Gave +1 Rep to @errant sundial

[tidal plume]

It is an excellent book and a great read and yeah, as above, Humble Bundle is an excellent resource for offers on engaging tech books from some great publishers.

The authors of the Web Application Hacker's Handbook, because of the rapid pace of change in subject matter, have gone to the trouble of creating the PortSwigger Web Security Academy, instead of printing new editions every few years. And it's free to use 🙂

https://portswigger.net/web-security/web-application-hackers-handbook

[novel locust]

That is awesome man I will definetly give it a go, thank you ❤️

[hidden bough]

Gave +1 Rep to @tidal plume

[tropic hound]

Awsome!

[hollow warren]

looking for a book recommendation. Not looking for a reference book but a biography or non-fiction story re cybersecurity/cybercrime, darkweb, hacking...ect ect.

[fleet warren]

This is how they tell me the world ends by nicole perloth is pretty good, as well as ghost in the wires by kevin mitnick

[hollow warren]

The previews of This is how... looks pretty good...ordering for my trip...thx I dont know why but ghost in the wires never appealed to me...i think its one i will have to try when i exhaust all my other options

[chrome parcel]

" Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers " by A.Greenberg aswell ; talks about Russia governement and their hackers, cyber-war, state-sponsored hackers and so on, must to read ( in my opinion )

[fluid sluice]

did u try the audiobook? What was good about that book? (im thinking of getting it my self 🙂 )

[chrome parcel]

No I didn't sorry, I read it a while ago but you'll learn a lot about Cyberspying & Cyberattacks that had been carried out between enemy countries + their reasons to do so.

The author interviewed a lot of peoples he met on this book, giving you an insight about who they are & how they dealt with these "cyberwars"

Finally this book isn't too technical as everything is pretty well explained even though you're a novice, I really recommend it to learn more about what happened in the "cyber world"

[fluid sluice]

thx for the info 🙂

[hidden bough]

Gave +1 Rep to @calm bolt

[chrome parcel]

Damn I didn't see, sorry for the length :p

anytime

[tidal plume]

Unmasking Maskirovka by Daniel Bagge discussing Russian cybercrime/espionage

https://www.amazon.com/Unmasking-Maskirovka-Russias-Influence-Operations-ebook/dp/B07NPZK3WM/ref=sr_1_1

[sick forge]

Do you guys know any book for bot creation? I want to create a bot which notifies me whenever a topic is uploaded in a specific webpage

[novel locust]

I can't recommend any book on that but I'm sure you can find tons of info about it online

[timber wyvern]

sorry ik this is not the right place for this but any good book on criminalogy :p

[hollow warren]

This looks good, and came across dark territory while surfing this on amazon...might order both...thx

[chrome parcel]

Anytime, hope you'll like it

[fluid sluice]

Looking for good books about bluetooth and its security or hacking/pentesting. The only book i have read so far was
Practical IOT hacking: https://www.amazon.com/Practical-IoT-Hacking-Fotios-Chantzis/dp/1718500904/ref=sr_1_1?dchild=1&keywords=Practical+Iot+Hacking&qid=1635003414&sr=8-1
This book was ok as a starting point but verry little about bluetooth and its security/flaws 🙂

Any suggestions about another book that writes about this stuff 🙂 ?

[patent meadow]

Im looking for a good read for an intermediate,something universal,that you guys would recommend as a must-read.Is there any book that fits those criteria?

[chrome parcel]

Which subject

[tidal plume]

If you've read entry level books on cybersecurity/pentesting etc and you understood them then you should be able to explore any topic in the field. There are tonnes of books on the various aspects of cybersecurity if you look on amazon or on individual publishers' sites, like No Starch or Wiley... If you have a topic of interest we'd be much better placed to help you

https://nostarch.com/catalog/security

https://www.wiley.com/en-us/Cybersecurity

[chrome parcel]

I'd also add

https://hackerbookshelf.com/

Last updated in Sep 2020 but still valuable enough

[astral turtle]

I what h free books for networking !

A*

[still pumice]

https://open.umn.edu/opentextbooks/textbooks/353

[robust quest]

Nice

[chrome parcel]

Just ordered The Hardware Hacker: Adventures in Making and Breaking Hardware by Andrew Bunnie Huang

[fallen gulch]

Now reading this in dead tree format: https://www.wiley.com/en-us/Hands+on+Hacking%3A+Become+an+Expert+at+Next+Gen+Penetration+Testing+and+Purple+Teaming-p-9781119561453 So far so good

[mortal wedge]

[modest jewel]

Anyone gone through this one before?

[regal pond]

I have heard it recommended, it's not in my library though.

[tidal plume]

It's an excellent book but it is written in Python 2, not Python 3. Alternatively I would recommend Black Hat Python

[modest jewel]

@tidal plume I've heard Black Hat Python was in Python 2 as well unless it was changed in revision 2? Edit: I found the Python 3 edition, thanks!

The logic should be fairly similar between 2 and 3 though, I've had a bit of experience with many languages, couldn't be that hard to convert, right?

[west fjord]

Yeah, the Second Edition of Black Hat Python is formidably in Python 3. 🙂

[regal pond]

Some of the stuff from python2 doesn't translate well to 3. In python b'' is enough to get a string of bytes. Py3 requires raw buffers, not just a literal.

[elder plaza]

Can anyone recommend a book I can get on amazon for exploit dev?

That also covers some basic programming in relevant languages?

[cedar plank]

thats a lot to ask in one book... shellcoder's handbook is probably still relevant

[elder plaza]

Thanks!

[hidden bough]

Gave +1 Rep to @cedar plank

[somber river]

I have the physical version, it's pretty interesting. Does get boring at times tbh, but overall it's okay

[wispy grotto]

being a programmer myself i can't understand this message

anyways, a recommendation for a book on hyperledger fabric uses for blockchain, or a book on blockchain tech in deep for a developer

[arctic dune]

@elfin mountain here also that suspicious link

And infosec general

[sage anchor]

Hello, can you recommend any hacking/cyber security magazine in Europe that can be ordered monthly in print form?

[violet oriole]

Does anyone have any recommendations for cyber security and the cloud? Would a dummies be a good start?

[tidal plume]

I found Cyber maagazine (cybermagazine.com) and Cyber Security Europe (www.cseurope.info). Both have print issues and online back issues free to read. You can get Hakin9, eForensics and PenTest but they're a premium mag.

[tidal plume]

The Dummies cybersec book is well written but basic. You'd be better off reading the books for Security+, SSCP and CCSP certs, even if you don't do the exams right away

[buoyant sail]

Is eForensics any good?

The course titles seems interesting

But paying 5k for a lifetime subscription better be off good quality ;P

[tidal plume]

I haven't actually read much of their stuff but you can go onto the website and look through some of their free stuff

[timber wyvern]

any good book regarding dark psychology? pls

[sage anchor]

I cannot find option to order this magazine in print version and price 🙂

[chrome parcel]

looking for a copy of a book called HMH in filetype: pdf.

[west fjord]

amazon.com ?

[elder plaza]

that looks copied straight out of google dorking 💀

[novel locust]

If you are asking for piracy this is not the right place :/

[elfin mountain]

Please don't ask to pirate books and/or other copyrighted materials

[vocal needle]

Has anyone read any of the books in this bundle? Does it seem worth it? It is little money per book, but I have dozens of unread books already. https://www.humblebundle.com/software/cyber-security-for-hackers-and-developers-software?hmb_source=humble_home&hmb_medium=product_tile&hmb_campaign=mosaic_section_6_layout_index_3_layout_type_twos_tile_index_1_c_cybersecurityforhackersanddevelopers_softwarebundle

[novel locust]

These are courses, not books!

[vocal needle]

🤦‍♂️ ok then I posted it in the wrong channel. Anyone got any experience with those courses then?

[chrome parcel]

where is this pirate books and/or other copyrighted materials because I can't see where I explicitly said that, I get that I was implicitly misunderstood due to the use of a technical term.

**I agree with you, authors must receive full credit, thanks for the statement/reminder/reinforcement. **

I wish you a great week man 🤜

[hidden bough]

Gave +1 Rep to @elfin mountain

[elfin mountain]

You were asking to Google dork a pdf of a certain book, certainly seems suspicious ;)

[elfin mountain]

Ok not seeing your point

Aside from not responding inmediately

[chrome parcel]

my point is that I shouldn't have input the filetype: and that way I keep things simpler and avoid people misunderstanding.

[chrome parcel]

with the filetype I was stating that I'm looking for a specific format, anyways this is a pointless chat so let's not give it more value ❤️

[elfin mountain]

Still would've been a bit suspicious but whatever.

[west fjord]

We're making sure that you're not requesting a pirated copy. That is why I suggested amazon.com. Hope you can find it there. 🙂

[chrome parcel]

I understand your role

[tidal plume]

For the coders out there...

https://www.humblebundle.com/books/code-like-pro-manning-publications-books

[green flare]

Hi

[frail niche]

Guys do you have any books for comptia security+?

[spare mural]

Any book recommendation for hacking C++ beginner level ?

Something like this but for C++

[timber wyvern]

or for c# works for me pls! thx

[novel locust]

I have the Mike Meyer's one and I liked it. Haven't taken the exam tho

But the concepts are clear

[tidal plume]

There's a book called Gray Hat C# from No Starch

https://nostarch.com/grayhatcsharp

[timber wyvern]

thnk

[warm zealot]

Hi all, i am 90% powershell guy looking moving into more python and maybe go, but wondering are books worth it? as i see that no startch press is having some good BLKFriday sales. On some books. Or should i just do the lab in we have access to as premium members.

[indigo dragon]

if you are looking for a python/go books related to hacking check out these two:
https://nostarch.com/black-hat-python2E
https://nostarch.com/blackhatgo

[warm zealot]

Thank you these where both the books I was looking at. Was not sure if they are worth it.

[hidden bough]

Gave +1 Rep to @indigo dragon

[raw compass]

Which book do y'all recommend that recent and covers privacy escalation, network and web exploitation

[chrome parcel]

@sick hull

[sick hull]

Shrug. I've never used Pluralsight

[cedar plank]

I don't think this bundle is worth it. Basically you get bits and pieces of Pluralsight courses but not a full course

I have Pluralsight

[vocal needle]

Thanks!

[hidden bough]

Gave +1 Rep to @cedar plank

[graceful harness]

how can I get Sans GCIH books?

[simple star]

you must enroll in the course to receive SANS books

[spare mural]

is this book still relevant in 2021 ?
https://www.amazon.in/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641

[umbral heath]

yes, it is

[flint isle]

there is a new book from No Starch that seems to be the replacement

the tools in this book are all outdated

[spare mural]

can you send the link or say the exact name of the book ?

[flint isle]

Georgia is selling a video course on Pentester Academy with labs hosted in PT cyber range

[spare mural]

thanks for the info

[hidden bough]

Gave +1 Rep to @flint isle

[flint isle]

this is the new ethical hacking book https://nostarch.com/ethical-hacking

and this is georgia's course on PA https://www.pentesteracademy.com/penetrationtesting

[spare mural]

@flint isle thanks

[errant sundial]

@north spade

[north spade]

-ban 904738048351272960 -ddays 4 Spamming bot scripts

[hidden bough]

🔨 Banned 904738048351272960 indefinitely

[north spade]

-ban @rich wharf -ddays 4 Spamming bot scripts

[hidden bough]

🔨 Banned 904738048351272960 indefinitely

[chrome parcel]

You have probably heard about this one, but I'm sharing it anyware as its a real nice book to understand human behaviour and probably level up your social engineering skills ⬆️

https://www.amazon.com/-/en/Yuval-Noah-Harari/dp/0099590085

[chrome parcel]

Has anyone read "Kingpin" ?

[sudden mesa]

https://www.humblebundle.com/books/hacking-by-no-starch-press-books?hmb_source=&hmb_medium=product_tile&hmb_campaign=mosaic_section_1_layout_index_2_layout_type_threes_tile_index_3_c_hackingbynostarchpress_bookbundle

Big no starch press bundle going on humblebundle

[tidal plume]

This book is in the new Humble Bundle released this evening. See link above @spare mural

[stuck crown]

I'm done with Sandworm and have moved on to Countdown to Zero Day by Kim Zetter on Audible. https://www.audible.com/pd/B00P30Z5F2?source_code=ASSOR150021921000R

[steel saddle]

I really enjoyed both of those. My current tech book is This is How They Tell me the World Ends. https://www.amazon.com/This-They-Tell-World-Ends/dp/1635576059

[tidal plume]

Both fun reads. After those, consider Dark Territory by Fred Kaplan, Fatal System Error and Cult of the Dead Cow by Joseph Menn, and yeah as @steel saddle said, This Is How They Tell Me the World Ends by Nicole Perlroth. All fun reads 🙂

[steel saddle]

I'll add those to the list, thanks!

[stuck crown]

My next book was going to be "The Kill Chain: Defending America in the future of high-tech warfare", but I'll check that out

[stuck crown]

Two votes for " .. The world ends" so that might be the next one instead

[tidal plume]

I've added it to my purchase list. Army of None by Paul Scharre is on a similar topic

[stuck crown]

Thanks

[hidden bough]

Gave +1 Rep to @tidal plume

[tidal plume]

I read it at the start of the year on Kindle and picked up a physical copy in the summer. Great conversation starter in the coffee shop

[stuck crown]

Thanks for the recommendations

[stuck crown]

I do something similar, buy things on Audible and then physical to keep in my office

[steel saddle]

👍

[tidal plume]

If you're getting ...World Ends, might also find Glen Greenwald's book, No Place to Hide and Edward Snowden's Permanent Record fill in some of the background but World Ends really opens your eyes to the things even Snowden wasn't aware of and pretty much continues from there. Nicole Perlroth was basically brought in on the Snowden pieces for the NYTimes with zero cybersec experience and completely opens the barrel

[stuck crown]

"opens the barrel", i don't think I've heard that phrase. Is this similar to opening a barrel of monkeys?

[steel saddle]

I've got the Greenwald book, it did have alot of good info in it

[tidal plume]

Somewhat 🙂

[tidal plume]

Yeah it's very informative, you have to take all these books with a punch of salt though

https://www.youtube.com/watch?v=47o482D_1Vs

[chrome parcel]

From what i remember, Greenwalds book is alright, i read it long time ago tho do not know if those other books are worth it, partially cause some stuff i already know and partially cause ignorance is bliss :D

[tidal plume]

Sometimes it's better not to know, sometimes what you don't know might kill you and sometimes these things sound so far beyond believable that you have to back away slowly... It's also a good idea to fact check the things journalists say in reference to complex topics like cybersecurity and other complex fields, because bias can be difficult to spot

[chrome parcel]

Yes, i agree mostly, that is why in cybersecurity i tend to try to learn more practical stuff first i think, as i am not very knowledgable in this area, that is why i am here, and that is why i am mostly in denial of some things still like surveillance of all sorts.

[stuck crown]

The thing I like to glean from these books is realizing how some of the random stuff we're launching in metasploit or whatever has a real-world starting point or impact it's made

it's weird seeing them pop up in an "Easy" ctf and making that connection

[tidal plume]

Fair, you're not supposed to know about surveillance and it's supposed to sound like conspiracy nut territory cos it's in the bizarro world of 'that should never happen...'

But it's also an area of serious academic and military research and you can find academic papers from legitimate sources on the topic. It is also a real concern for enterprises and other organisations and something I do occasionally discuss with some of my academic and business friends in the field

It does sound too weird, I don't generally discuss it openly because of the level of literacy you would need to really get stuck into it, especially if you're just starting out in the field and the real and sometimes purposeful situation of being led down so many rabbit holes... Wanna be the Fox Mulder of your social group? 🕵️

But when the authors of these books appear in places like Google and at security conferences, they tend to be a bit more reputable

[chrome parcel]

Oh, ok

Might delete than some of my messages here, especially if they derail

Sorry english is not my native i am a bit confused

Oh, i think i got it now

[tidal plume]

https://www.youtube.com/watch?v=XKjB1lrLct4

https://www.youtube.com/watch?v=QvZuAwLIsEo

https://www.youtube.com/watch?v=-1jAOJHvll0

[errant sundial]

btw there's now #911757840887197756

[tidal plume]

No no, don't delete, they're relevant questions

[errant sundial]

Just plugging the thread I made

[tidal plume]

Ooh thanks @errant sundial

[hidden bough]

Gave +1 Rep to @errant sundial

[chrome parcel]

Heck, too late, for context - i basically said knowing some stuff makes me feel like a conspiracy nut

[tidal plume]

I think I've put enough meat into the context of this topic for the rest of the year, though some of it might be on the verge of spam so I'm gonna stop 🙂 Have a good evening

[chrome parcel]

You too and thanks again!

[hidden bough]

Gave +1 Rep to @tidal plume

[errant sundial]

They'd be very welcome over in my thread though

[stuck crown]

I went off to unwind and play some overwatch, didn't mean to abandon ya'll 😄

[chrome parcel]

I remembered a book in a similar vein, but about Russia, maybe some of you have read it already, it is called "The Red Web" it is made by russians somewhat for russians, i hope i am allowed to post something like that, lets find out!

The Red Web: The Kremlin's Wars on the Internet https://www.amazon.com/dp/1610399579/ref=cm_sw_r_apan_glt_fabc_KYVG4GWMNPCS7XAQ8B2Y

[stuck crown]

This was on my list too

[chrome parcel]

You mean you posted it already or you wanted to read it? If former, i can delete

[stuck crown]

Later

I want to read it at some point. Saw it and was curious about that perspective

[chrome parcel]

Nice to see, it was alright for that as i remember

[stuck crown]

My reading list grows ever longer

[novel locust]

https://www.humblebundle.com/books/hacking-by-no-starch-press-books

[buoyant sail]

This bundle is actually extremely worth it

A lot of great books in it

"How to hack like a ghost" has some interesting topics in it, that goes beyond most "hackers" books.

[stuck crown]

anyone want to do a bookclub type activity and go through this booklist together?

[buoyant sail]

I would not recommend reading all those books as they cover 10 different specific areas

[cedar plank]

Ethical hacking looks fun

[stuck crown]

to clarify, I mean to pick one book and go through it

(as an iterative process)

[brazen barn]

I got them since I’m a sucker for humble bundle

[stuck crown]

So what are we going to be learning first?

[chrome parcel]

I read black hat python

That was a good book

[warm zealot]

Thank you

[hidden bough]

Gave +1 Rep to @leaden perch

[chrome parcel]

Social engineering book recs are welcome, as well as beginner/pre stuff

Can i ask here for recs? I do not know

[stuck crown]

I don't really have any for that but I did like that one by Mitnick

[chrome parcel]

How to be invinsible? I have it, have not read that yet

[stuck crown]

I can't recall which one i read exactly, but it wasn't really an instruction manual or anything. Mostly just story time. I think I read Art of Deception and Ghost in the Wires

[chrome parcel]

Oh, thanks, i am mostly interested in practical how to stuff now, but will read that some other time

[hidden bough]

Gave +1 Rep to @stuck crown

[stuck crown]

I'm guessing you'd want to take a few psychology/sociology courses for that then 😄

[chrome parcel]

I know some psychology, more like cognitive stuff like cbt, dbt or act, not much sociology, what terms should i google or maybe what courses should i try to find?

[stuck crown]

not my area of expertise, it was just a guess so I'll defer to smarter people than me. I'd start by looking up social engineering methods and prevention on google

[chrome parcel]

The abbreaviatures are therapies, that is probably not what you mean by psychology

[chrome parcel]

Oh, thank you very much, i will do that

[hidden bough]

Gave +1 Rep to @stuck crown

[surreal scarab]

I guess , we'll need psychology classes most of the time. 🧠

[stuck crown]

I'm looking forward to what the pro's provide but I found this which seemed neat: https://www.imperva.com/learn/application-security/social-engineering-attack/... anyway imma head back to the complete beginner path where I belong 😄

[chrome parcel]

Good luck!

[surreal scarab]

I always recommend, social engineering the art of human hacking

It's one of the finest

[chrome parcel]

Sure, i have it somewhere, need to read it tho :D

Thanks!

[tidal plume]

I read a book last year called 'Unmasking Maskirovka', about this topic. It's fascinating stuff

https://www.amazon.com/Unmasking-Maskirovka-Russias-Influence-Operations-ebook/dp/B07NPZK3WM/ref=sr_1_1

[chrome parcel]

I highly suggest reading "ghost in the wires"

[stuck crown]

for free on kindle unlimited, that's cool

[buoyant sail]

Listening is also a nice way of going trough it

[unique trellis]

I've been on an Audible binge and find it so much more enjoyable than reading

Perfect for the drive to and from work

[buoyant sail]

Same here

Jup in the car or when I am walking around it is great

Most of the time when I need to go to the city I just walk around with an audio book on xD

[unique trellis]

And doing chores around the house. Anything that doesn't require real concentration.

[fathom tide]

Hey nice, I didn't know there was a book club, how does this work? I'm into a lot of things but mainly essays and SciFi

[cedar plank]

generally people pst tech book findings

[stuck crown]

The book is included in my audible subscription so listening to that
https://www.audible.com/pd/Dark-Territory-Audiobook/B01BZB1IFI?action_code=ASSGB149080119000H&share_location=pdp&shareTest=TestShare

[tidal plume]

Just picked up that awesome Hacking Humble Bundle from No Starch. There's another book that's not due for publishing yet, The Art of Cyberwarfare by Jon DiMaggio but I've got my Early Access PDF on the No Starch website with most of the chapters already in place

https://nostarch.com/art-cyberwarfare

[chrome parcel]

This is my networking assessment, does that count as a book? It's mostly screenshots.

[stuck crown]

I mean, if I get to read it, then sure why not?

[solemn jewel]

Anyone reading anything cool?

[chrome parcel]

I enjoyed his book "ghost in the wires"

[novel locust]

I'm currently reading The clean coder from Robert C Martin, but it's not about cybersec

It is really worth giving it a shot though

[open oasis]

any recommendations for books on C programming?

[regal pond]

K&R

[open oasis]

https://www.amazon.co.uk/C-Programming-Language-2nd/dp/0131103628 this one?

[novel locust]

yep

[buoyant sail]

Your also going to start with the hell ? xd

[errant sundial]

Cyberjutsu
Thread Modelling by Adam Shostack

[tidal plume]

Cyberjutsu is a good read, part of the current Humble Bundle
Threat Modeling is a great book too, has been in the Wiley cybersec bundle a couple times

[errant sundial]

That's where I got em from!

[tidal plume]

The Art of Cyberwarfare by Jon DiMaggio, early access edition from the No Starch site

https://nostarch.com/art-cyberwarfare

[novel locust]

Has anybody read The Annotated Turing: A Guided Tour Through Alan Turing's Historic Paper on Computability and the Turing Machine ?

[timid shoal]

There is a great bundle of Hacking books from No Starch on Humble Bundle. 18 books for only $30. Some are old but still good and some are new. Including the new How to Hack Like a Ghost!. BONUS, part of your purchase price goes to the charities No Starch Press Foundation and Let’s Encrypt.
https://www.humblebundle.com/books/hacking-by-no-starch-press-books?hmb_source=&hmb_medium=product_tile&hmb_campaign=mosaic_section_1_layout_index_1_layout_type_threes_tile_index_2_c_hackingbynostarchpress_bookbundle

[chrome parcel]

Is "how to hack like a ghost" good?

[vale heath]

I was skimming through it at a bookstore today, pretty engaging. Reviews mention some interesting attack vectors but I can’t really speak on that

[fallow jay]

Damn! Not available in my region 😕

[stuck crown]

time for a vpn!

[fallow jay]

I’m pondering over the idea

[chrome parcel]

I might pick up that bundle

[cedar plank]

there are a lot of good books in that bundle

[solemn jewel]

i actually have

i prefered https://www.amazon.co.uk/gp/product/B08BT6W6H7/ref=dbs_a_def_rwt_bibl_vppi_i1

[steep turtle]

https://leanpub.com/avatar2

free^

[vapid inlet]

Wait a sec, this wasnt in the Humble Bundle.

[vapid inlet]

Yup. this was a great purchase. I have some new editions as well

[buoyant sail]

Yes

[novel locust]

oh that's cool, thanks

[hidden bough]

Gave +1 Rep to @solemn jewel

[feral tusk]

Thanks, ill make sure to check it out

[hidden bough]

Gave +1 Rep to @buoyant sail

[tidal plume]

Yeah, hence why I said I picked it up from the No Starch website

[vapid inlet]

Ah ok, I did the same.

[thin pier]

Hi everyone, is it ok to share paid books on here?

[lusty moth]

rule 11 in #rules states 'do not pirate books' if that's what you're asking.

[thin pier]

Thank you for the information ^^

[hidden bough]

Gave +1 Rep to @lusty moth

[clever flax]

Any top about infosec book ´s in 2021?

[spice flame]

Any book that changed the way you see the things? Not cybersec necessary.
The mine, probably :Reversing, secrets of reverse engineering.

And Quijote de la mancha, lol

[regal pond]

Letters from the Earth is one of my favorite books

[spice flame]

What is the book about?

[regal pond]

It's by Mark Twain; it's about the ways that people see the world and interact with it and each other

[spice flame]

I've never read Mark Twain, it is a good to start with?

[regal pond]

I enjoy Twain a lot. He's one of the required authors for US american literature classes

[novel locust]

It's 1eur on kindle, I'll give it a try

[novel locust]

Mine is probably A new Earth : Eckhart Tolle

[stuck crown]

I finished countdown to zero day and dark territory. dark territory was a good look at the US path to cyber. Zero hour was useful but maybe because I heard do much of it before I wasn't as invested. Gotta pick up one of the other books now that i have some free time. It'd be nice to find something in Spanish

[chrome parcel]

I want to read Countdown to Zero Day it looks so good. The one book about a real world hacking case that I read was Kingpin by Kevin Poulsen. It's about this one hacker who fell into and followed crime by being the biggest carder online once upon a time

[stuck crown]

I'll look into it

[stuck crown]

Have you read Ghost in the Wires and if so how do you think it compares?

I might go with: Cult of the Dead Cow
How the Original Hacking Supergroup Might Just Save the World

I could use a bit of a break from the doom and gloom of stuxnet in Iran and Russian involvement in Georgia/Ukraine. This might be a nice change of pace

[tidal plume]

Cult of the Dead Cow is a fun read and there's an interesting talk with them and the author from Defcon 2019
https://www.youtube.com/watch?v=tr4PEQ-g7r8

[tidal plume]

I'm right in the middle of a piece on that for college atm

[stuck crown]

It's fertile ground for study

But it's the holidays so it's time for a little chill stuff for me

[tidal plume]

Yeah it's fun and challenging and I have deadlines wooshing by, to paraphrase Douglas Adams

[stuck crown]

I am a bit curious about this, but maybe another time
Listen to In Defense Of The NSA [ML B-Side] by Malicious Life on Audible. https://www.audible.com/pd/B09KC52NSM?source_code=ASSOR150021921000O

I'm trying to soak in as many perspectives as possible. It's important to be able to view problems from different frames

Not exactly a book, but i guess I'm a rebel

[tidal plume]

Yeah it's important to try to weed out unfair or inaccurate biases in your knowledge but it's also appropriate to have an opinion, whether you express it or not, and in reasoning about difficult topics like this, it's okay to have multiple opinions no matter how complex

[chrome parcel]

No I haven't

kingpin is the only one I've read

I do have in my bookshelf this one by clifford stoll

I havent read it yet but I think it's about how he hacked into a KGB owned computer network in the 80s

[tidal plume]

I think you'll enjoy it. Check out his TED talk as well

[chrome parcel]

probably would but I don't plan on reading it

[spice flame]

It's looks quite interesting, I will take a look.

[stuck crown]

This is a great book and should be mandatory reading for anyone thinking about cyber security

I think PBS also made a tv movie with him as the main actor

[stuck crown]

https://www.youtube.com/watch?v=PGv5BqNL164&t=3s

[chrome parcel]

Oh no way

[little trench]

That is a fantastic book. Twain is such a witty person. I first read that book and the other collected shorts that accompanied it in early college. I appreciated his world view.

[little trench]

This is an older one I used but it was pretty good - Sams Teach Yourself C in 21 Days. After that I moved to the Head First series for Java. I think the present the material well. I would check out this: https://www.amazon.com/Head-First-C-Brain-Friendly-Guide/dp/1449399916/ref=sr_1_3?crid=33H7F213CPVWI&keywords=head+first+c+programming&qid=1639883434&sprefix=head+first+c+programming%2Caps%2C82&sr=8-3

[open oasis]

It looks pretty advanced looking at the chapters

but I reckon that and the C programming language would be a damn good foundation

[little trench]

I enjoyed watching this video! It brought back some ancient pings from the BBS days. I absolutely remember some of their text files. I put the book on my wishlist. Cheers!

[little trench]

It definitely takes longer than 21 days. More like 21 lessons. The other C book you mentioned by Kernighan and Ritchie is highly rated and the guys are legends. So probably a great choice. I've enjoyed the Head First series for other languages because it does a good job of presentation and coming at it from several angles. A good book, stack exchange, and google and away you'll go!

[tidal plume]

Yep and if you want a more modern interpretation, go for Robert C Seacord's books on C. He's involved in developing modern C standards and Secure Coding practices, as well as with other languages. His latest book, Effective C is from No Starch and regularly appears in Humble Bundles. His other books are usually fairly cheap on Amazon and other sites.

https://nostarch.com/Effective_C

[regal cedar]

https://www.humblebundle.com/books/gifts-for-technically-inclined-oreilly-books?hmb_source=&hmb_medium=product_tile&hmb_campaign=mosaic_section_1_layout_index_1_layout_type_threes_tile_index_1_c_giftsfortechnicallyinclinedoreilly_bookbundle

[stuck crown]

There are many good offerings here! I've been focusing on web application penetration testing so I think I'll pick it up to gain additional insights from the JavaScript, PHP, WordPress, and Mining the Social Web books. Maybe I'll even tinker with Pi again

I've been enjoying this book during my LSD cardio sessions. I dig the human interest aspect
Listen to Cult of the Dead Cow by Joseph Menn on Audible. https://www.audible.com/pd/1549169998?source_code=ASSOR150021921000R

[dry cairn]

Any suggestions on OSINT books resources?

[scenic rock]

I'm about to finish reading American Kingpin by Nick Bilton. It's a really easy, novel-like read about the Silk Road's creator, the site, and the investigation that took it down. Would recommend it to anyone who enjoys darknet diaries but likes reading from time to time :)

[chrome parcel]

Open Source Intelligence by Michael Bazzell is always a great one! https://inteltechniques.com/book1.html

[stuck crown]

I'll add it to the list

[leaden hemlock]

forgot i had this book. i should read it

[viral zephyr]

looking cool

[leaden hemlock]

im very excited to read it

[viral zephyr]

I am too, because it looks great

but Hacking is too general, what does it talk about actually?

btw your site looks like kinda mrrobot ctf

cool colors

[leaden hemlock]

looks like it gives a general overview of a lot of topics.

[viral zephyr]

hmm, I see

[leaden hemlock]

thanks! i tried to make it look mysterious or whatever. haven’t heard of mrrobot ctf, though

[hidden bough]

Gave +1 Rep to @viral zephyr

[viral zephyr]

it's at thm

exists at the path offensive pentesting

[viral zephyr]

You are successful at it. Site looks mysterious and 404 page is really nice cause harumi

[leaden hemlock]

after all those years i haven’t finished it 😭 although it was my first manga

and thanks

[clever flax]

@west fjord Excuse me
Can you suggest to me new books? Your last advice was really great

[steep turtle]

he is on holidays

[clever flax]

😦

Thanks @steep turtle Maybe i need to wait

[hidden bough]

Gave +1 Rep to @steep turtle

[chrome parcel]

Anybody has a good assembly language book recommendation? Right know im reading jeff duntemann assembly language book and I like it but I feel like it's pretty outdated.

[west fjord]

What type of topic are you looking for?

[glad marten]

Is "Rootkits and Bootkits: Reversing Modern Malware and Next Generation Threats" a hard book that requires a lot of OS and kernel knowledge?

I really want to read it because it interests me but there are certain concepts that are still tricky to me

[stuck crown]

Why not just make note of concepts they bring up that you don't understand and use it to fuel additional research?

[glad marten]

I'm already doing that but it's a lot

I think I researched 6 concepts

in the first 5 pages of the book

[stuck crown]

That sounds pretty awesome to me. You're using a book that is actually making you smarter

[stuck crown]

When a book references another book, I look for that referenced item

[open oasis]

@glad marten from what I remember you need a reasonably solid understanding of C to get the most out of it

[glad marten]

That ain't a problem for me

So that's good news I guess

[clever flax]

Maybe more blue team
Or some advence pentest
It could be your favorite ones too lol

[west fjord]

Adversarial Tradecraft in Cybersecurity by Dan Borges.
Jump-start Your SOC Analyst Career by Tyler Wall and Jarrett Rodrick.
Threat Hunting in the Cloud by C. Peiris, B. Pillai, and A. Kudrati.

[clever flax]

Thank you very much @west fjord
Your book recomendations are the best

[hidden bough]

Gave +1 Rep to @west fjord

[hybrid coral]

https://www.amazon.fr/gp/aw/d/1119367689
I ordered this Book for Christmas, I will tell you once I read it if it's good or not @clever flax

[errant sundial]

I got it in a humble bundle.
It's an interesting read but many of the techniques aren't applicable anymore

[clever flax]

I´ll apreciate it @hybrid coral
Already see good reviews for that book
The last year tim recomment to me a few books, i read it and i really enjoy it
Thats why i love his recommendations

[alpine pumice]

Someone in another channel was asking about high-level/general theory books on IAM, any idea? Most of what I found is very applied but some of the CISSP/Sec+ stuff seems portable plus a CCNP Identify Services course and certain chapters from a couple of sec mgmt books. But any standalone works?

[bleak yarrow]

Wanted to share some books I bought today!

[green bloom]

I have a student who wants to learn more about networking/computers and has never learnt it before and is relatively new to tech. He learns best with books . What intro to networking book would you recommend? I suggested a network plus book for him to start with .

Im also looking for a good python for scripting, bash , powershell iis ap.net and front end web dev books for myself to help me with pentesting and improve my web dev skills.

[buoyant sail]

CCNA

The CCNA R&S existed out of 2 books, the CCENT and the actual CCNA

CCENT is no longer but I suppose that the content is still there in the CCNA book

It basically gave you an introduction + hands on on networking

That you learn it on Cisco does not matter, the concept are key when you get the concepts you can configure any networking device just by using auto completion

For you I would recommend to choose 1 language instead of 6 different, in this case web so javascript or nodejs would be a good starting point.

Whenever you have nailed down the basics it would be much easyer to learn almost any other language.

[glad marten]

What are good no starch press books?

[tidal plume]

Depends what you're looking for. Most of them are of high quality and are specific to their purpose. I have most of their cybersec/programming/linux books either from Humble Bundles or buying direct

The recent cybersec bundle before xmas is full of great books. I'm currently using the Art of Cyberwarfare book to support some concepts in my research project

[glad marten]

Interesting!

I got the bundle as well and I'm currently reading cyberjutsu

I'm thinking about what some other good ones are as next read

[tidal plume]

That's a fun book. I want to get around to reading How to Hack Like a Ghost in a few weeks. The Ethical Hacking book is interesting, takes a slightly different approach to the old Georgia Weidman Penetration Testing book. Real World Bug Hunting and Practical Malware Analysis are good reads too

[brittle crystal]

cyberwarfare book, thoughts on it?

[tidal plume]

It's interesting, it covers the history of it quite well and discusses some of the precautionary measures we can take to avert the tactics but it is such a challenging area. It discusses why these techniques and tactics work so well and the possible ways to recognise these attacks. It shouldn't be taken in isolation, as there's far more knowledge out there on the subject but it is a great way to start

[brittle crystal]

thanks, I'll check it out!

[hidden bough]

Gave +1 Rep to @tidal plume

[glad marten]

Finally made a github repo where I'm going to review books in the no starch press humble bundle

I just wrote the TL; DR: time to write the actual summary and review 🦸

[clever flax]

Any review already?

[glad marten]

the TL: DR section and smol review in case you want it https://i.imgur.com/SSVwTRv.png

I'm still working on a detailed summary

[clever flax]

Well i´ll be waiting for your git when you be ready 🙂

[green bloom]

What front end web dev book would you suggest?

[jaunty jewel]

can you suggest a list of good cybersecuritybooks

[woeful rapids]

The mozilla MDN web docs since that is more likely to be updated quickly

[woeful rapids]

Yall don't think that is outdated

[errant sundial]

It is, but content is still relevant

Much of it at least

[leaden hemlock]

i'm gonna read it anyways

¯_(ツ)_/¯

[errant sundial]

Even if it's outdated, it can be an interesting read

[woeful rapids]

what percentage do you think it is still relevant

[errant sundial]

Perhaps 90?

Who knows

[woeful rapids]

How useful is this book for CURRENT web development security https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470/ref=sr_1_4?crid=397ZII68RVKZ6&keywords=web+hacking&qid=1641663251&s=books&sprefix=web+hacking%2Cstripbooks%2C65&sr=1-4&asin=1118026470&revisionId=&format=4&depth=1

[tidal plume]

No Starch and Wiley books are a good place to start but it really depends where you are in your studies and what you want to get out of it. There are lots of other books and resources so it's important to choose the right ones for you and your goals

If you find a book you're particularly interested in, do ask as there's a few of us who have read quite a few of them

https://nostarch.com/catalog/security

https://www.wiley.com/en-us/Cybersecurity

[tidal plume]

It's a good read but it has been superseded by the author's website, portswigger.net and the Portswigger Academy (Free)

[jaunty jewel]

thank you👍

[hidden bough]

Gave +1 Rep to @tidal plume

[west fjord]

In general as best practices or particular to implementation? Implementation specific:
Solving Identity Management in Modern Applications: Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0 by Y. Wilson and A. Hingnikar
Mastering Identity and Access Management with Microsoft Azure, Second Edition by Jochen Nickel

[alpine pumice]

Yeah, I think they wanted overarching high-level theory, like a "DBMS theory" book they said

[chrome parcel]

ohh man I can't explain how FAST I am buying these books!

[stuck crown]

honestly, I seriously need a bookshelf, I just have books laying on the floor and all over my desk

[buoyant sail]

IAM

Such a pain

[solar skiff]

This bundle looks promising.
https://www.humblebundle.com/books/gifts-for-technically-inclined-oreilly-books

[alpine pumice]

yea u r :V

[stuck crown]

I've picked it up and started checking "Mining the Social Web"

[tranquil verge]

Hi All,
Any good books to buy/read for pentest and secure coding?

[glad marten]

New tech related humble bundle book bundle https://www.humblebundle.com/books/become-project-management-expert-taylor-francis-books

[stuck crown]

Yeah I'm considering picking that up after payday

[grizzled smelt]

Hey everyone wasn’t sure where to post I have just finished the 3 parts Linux fundamentals. Honestly my notes are meh at best looking to find a good book with most of the common commands and their functions so I can reference this way and read more. Thanks for any help

[unique trellis]

https://www.amazon.com/Linux-Command-Line-2nd-Introduction/dp/1593279523/ref=pd_lpo_3?pd_rd_i=1593279523&psc=1
I have this. Glanced through it and it's helpful. Ton of info.

[grizzled smelt]

Thank you @unique trellis! I’ve struggled with try to retain all the info. Hopefully reading back through some of this will help. I appreciate it

[hidden bough]

Gave +1 Rep to @unique trellis

[unique trellis]

[hushed pagoda]

good one i needed that also, thanks

[hidden bough]

Gave +1 Rep to @unique trellis

[hushed pagoda]

ez rep

[unique trellis]

[tidal plume]

That book is available on the book's official website for free under a Creative Commons licence from the author here:
https://www.linuxcommand.org/tlcl.php/

[hushed pagoda]

Found it also but didn't knew if it's legit wanted to make sure before posting here 😄 good find

[tidal plume]

Also, the official Kali Linux book is available from the official site, https://kali.training
There's an intro to Linux from the Linux Foundation on edx.org. Also free Linux courses there from IBM and Red Hat

[unique trellis]

That's awesome, thanks!

[hidden bough]

Gave +1 Rep to @tidal plume

[hushed pagoda]

Can't seem to find the book, do i need to create an account or something?

[tidal plume]

Ah it looks like they've changed it, yeah I think you'll have to create an account to do the course. Not sure then if they're still supplying the book

[hushed pagoda]

Yeah no worries, i will take a look around when i have some time, thanks 🙂

[hidden bough]

Gave +1 Rep to @tidal plume

[tidal plume]

The course is still free and used to actually follow the track of the book

[hushed pagoda]

Will create an account tomorrow and take a look around, thanks.

[hidden bough]

Gave +1 Rep to @tidal plume

[dense panther]

is there some book for beginners recomended for free on scribd or packt pub ?

[errant sundial]

Scribd is mostly illegal pirated content

[dense panther]

sue them or something

[errant sundial]

DO NOT ask for pirated books here. That's the point.

[dense panther]

how are they illegal?

[errant sundial]

They are copyrighted content being distributed illegally. It's piracy.

Piracy is illegal.

-mute @dense panther Arguing over piracy of books

[hidden bough]

🔇 Muted CaptainMakaveli#3119 for 1 day

[buoyant sail]

At least his names checks out he's a pirate himself

[grizzled smelt]

Can’t recommend this enough this is a life saver being a beginner.

[cosmic tinsel]

Thanks for asking the question about the book a few days ago.
Might purchase it myself, doing the linux fundamentals aswell for a refresh since i forgotten alot.

[buoyant sail]

Some good books for c#?

[stuck crown]

I'm thinking seeing what the purple team book is like

[spice flame]

Hi hi!, Anybody else has experience with blue team books? What book do you recommend for starting in blue team?.

[west fjord]

Blue Team Handbook: SOC, SIEM, and Threat Hunting Use Cases by Don Murdoch 👍

[glad marten]

https://www.humblebundle.com/books/arduino-circuits-electronics-morgan-claypool-books

1050$ for 16$

[stuck crown]

This used to be useful to me

[spice flame]

It will be my next book to read! Actually I'm reading the hacker playbook 3. Thanks!!

[hidden bough]

Gave +1 Rep to @stuck crown

[snow gate]

https://www.amazon.com/Computer-Organization-Design-RISC-V-Architecture/dp/0128203315/ref=pd_lpo_1?pd_rd_i=0128203315&psc=1&asin=0128203315&revisionId=&format=4&depth=1

[latent oracle]

any book for nmap , ?

[crisp cedar]

For me the nmap documentation was all that I needed.

[sand turret]

guess you could print out the man page.... but just because shadow is going to look... here you go: https://nmap.org/book/

has links to their book on the topic and translations and places you can buy it or at least gives you the title to search for

[latent oracle]

thank you so much

[hidden bough]

Gave +1 Rep to @sand turret

[hot nova]

Any good books any of you recommend for learning all about linux

[nimble coyote]

https://www.dummies.com/book/technology/computers/operating-systems/linux/linux-for-dummies-10th-edition-281758 try this

[signal birch]

Does anyone recommend reading "The stranger" by Albert Camus?

[open oasis]

#quiet-conversation message

[tidal plume]

The Linux Command Line book by William Shotts is available as a free download under a Creative Commons licence from the book's official website or you can buy the physical book from No Starch Press - http://www.linuxcommand.org/tlcl.php/

The latest version of The Linux Bible by Christopher Negus came out in 2020 - https://www.amazon.com/Linux-Bible-Christopher-Negus/dp/1119578884/ref=sr_1_1

[hot nova]

Thanks

[plucky torrent]

I hope you didn't open their link^

[hot nova]

Nope

I didnt

[plucky torrent]

@tidal plume FYI, there was a phishing link, your books are fine 😄

[hot nova]

Funny for it to be in a hacking based discord server

[humble goblet]

we're humans first and security enthusiasts and/or professionals second 😄

[hot nova]

Yea lol

[glad marten]

Is the ghidra book worth reading if you want to get better at RE and binexp?

[chrome parcel]

@glad marten I’ve been meaning to read this one for a while, it was recommended by a friend

[glad marten]

Yeah that's the one I mean

I bought it in a bundle a few months ago

[humble goblet]

nostarch are the best, I got 2 in a row

[tidal plume]

I was wondering 😛 I'd be mortified if one of mine was out of place

[tidal plume]

Thanks to Humble Bundle I have most of their Hacking/Security, Python and Linux books, some several times over and I've picked up some editions straight from the No Starch site

[hidden bough]

Gave +1 Rep to @humble goblet

[humble goblet]

lol @ the bot repping me 😄 I have still aways to go but I'm getting there 😄

[tidal plume]

😆 acquiring and consuming books are two, somewhat different pursuits but each does pursue the other

[humble goblet]

yeah I've said it in the past as well. I've read probably less than a tenth of what I have. 😕

[tidal plume]

I'm the same but I have migrated beyond my reading pile and to-be-read pile and have looked to cultivate an antilibrary... https://nesslabs.com/antilibrary

[humble goblet]

https://www.humblebundle.com/books/cybersecurity-2022-wiley-books new bundle

[tidal plume]

As we usually expect around this time of year, the Wiley Cybersecurity Humble Bundle has launched and this 27 item bundle has a lot of new entries, priced at €15.90

https://www.humblebundle.com/books/cybersecurity-2022-wiley-books

[humble goblet]

https://www.amazon.com/Hacking-Multifactor-Authentication-Roger-Grimes/dp/1119650798
any feedback on this?

[tidal plume]

It has good recommendations and it's part of the Humble Bundle above

[humble goblet]

I got the one last year and this book is probably the main reason I'm getting this one, that's why I asked for specific feedback

I also gotta keep working on that antilibrary but still 😛

[tidal plume]

Well I haven't even got that one yet but it would open some doors for me 😉

[tidal plume]

Antilibrary is a positive thing

[errant sundial]

I can very highly recommend a number of these books, having read or used many for my classes.
Highlights would be Cryptography Apocalypse and Malware Analysts Cookbook

There's a few that were in the last version that aren't in this version, there was a cool security engineering one that helped teach me a lot of theory

[tidal plume]

Yep agreed, Malware Analyst's Cookbook and The Art of Memory Forensics, the Wireshark book and Cryptography Engineering helped me in my postgrad and the Tribe of Hackers original and Red Team books give a useful perspective on the job/career/community/enjoyment aspects. Looking forward to getting into more of them

Of course the other Schneier and Mitnick books are useful for perspective, education and entertainment value too

There's 12 of these I haven't gotten from previous bundles

[humble goblet]

current bundle or previous?

[errant sundial]

Security engineering was in a previous one, let me grab author and title real quick

[humble goblet]

I went through last year's books and I can't seem to find it

[errant sundial]

Security Engineering by Ross Anderson

This might have been a year or two ago

[humble goblet]

yeah it's not in my library. thanks for the feedback though!

[cobalt compass]

I just started reading this today

I expected it to just be a ghidra focused book, but They really go through the entire workflow of Reverse Engineering, and its fairly easy read too.

It might be difficult if your not used to reading some assembly though.

[glad marten]

Interesting

[glad marten]

You reckon the entire bundle is worth a buy for those 16€?

(whoops left ping on)

[spiral kiln]

Absolutely, Malware Analyst's Cookbook alone is worth €16

[stuck crown]

I bought that bundle instantly, even though I had some books already

zero hesitation

[reef tulip]

Thanks a lot for that link, stumbled upon this channel by pure chance and bought that bundle immediately.
Now only have to find the time to do the actual reading 😆

[hidden bough]

Gave +1 Rep to @tidal plume

[wet musk]

indeed that's the biggest problem. I have a huge stack of book to read, I'd love to have more time to read, audio book help, but still I need more time

[glad marten]

Same here!

[reef tulip]

I used to listen to audio books while driving into work, but I have been working remotely for the better part of the past 2 years, so I "lost" that time to actual work and meetings, too. 😒

[wet musk]

yes, I also listen audio books on my commute, gym and when I go to do my groceries shopping.

[chrome parcel]

Hey, I do not know who needs to know it, but I found out today that WIndows Internals Part 2 is available finally to get, since October 2021.

[west fjord]

Good choice. 👍

[chrome parcel]

Thanks. This book was in preorder since forever, they pushed the date and pushed, and when it finally came, I did not notice :D I learned tones on part 1.

[hidden bough]

Gave +1 Rep to @west fjord

[stuck crown]

"If they are a 10 and you are a 2, maybe you should stop and think for a moment."
https://www.goodreads.com/book/show/58496110-honey-trapped

[wet musk]

There are 10 types of people in this world, those who undestand binary and those who don't 😉

[unborn hamlet]

Is this channel about any genre of book or only cybersec ?

[humble goblet]

primarily cyber but once in a while we recommend other stuff as well

[unborn hamlet]

Sounds nice, thanks!

Does anyone knows any book similar to The song of Achilles?

[dusty nymph]

circe by the same author, piranesi by susanna clarke

[unborn hamlet]

Thank you!

[chrome parcel]

https://www.humblebundle.com/books/cybersecurity-2022-wiley-books?hmb_source=&hmb_medium=product_tile&hmb_campaign=mosaic_section_1_layout_index_1_layout_type_threes_tile_index_1_c_cybersecuritywiley2022_bookbundle

If anyone is interested

[stuck crown]

which book are you going to read first

[chrome parcel]

Hacking multifactor authentication, the book sounds really interesting and multifactor is pretty much the standard nowadays

[signal birch]

thinking of buying 'It ends with us'

thoughts?

oh is this a bookclub for hacking related stuff

or anything

[humble goblet]

https://www.humblebundle.com/books/programming-bookshelf-mercury-books

thoughts on these?

[stuck crown]

I dunno, but mine now

[stuck crown]

I'm finally done with this

[tidal plume]

Yeah it's a book I thoroughly enjoyed. There are a few good books like it out there now that discuss some of the specific, small- and grand-scale history of the field but few are as fun as seeing the world through the eyes of the magicians as they weave their spells

[stuck crown]

On the hunt for more books I decided to go for the well received "This is How They Tell Me the World Ends"

[sharp jackal]

I read that one last year and enjoyed it - if you've read Cuckoo's Egg, Sandworm, and Countdown to Zero Day then it's like a history to now. My next one is Amy Zegart's Spies, Lies, and Algorithms: The History and Future of American Intelligence https://press.princeton.edu/books/hardcover/9780691147130/spies-lies-and-algorithms

[tidal plume]

Yep I've read it twice last year, for fun and to prompt my college research. The Art of Cyberwarfare by Jon DiMaggio is a great follow up, though the full edition isn't out yet, you get an early access edition to keep you going

[tidal plume]

On the list

[sharp jackal]

Ohh that sounds like a good one - out in April, so I can whittle down my reading list and then add it in 👍

[glad marten]

I don't think I'm gonna buy it

granted, I've been programming since I was 14

data science is a bit mediocre imo as it's literally just slapping .csv's into matlibplot, excel programming can be googled and the others are mediocre imo

[humble goblet]

ayyy here's the o'reilly version
https://www.humblebundle.com/books/data-engineering-oreilly-books

[humble goblet]

https://nostarch.com/practical-social-engineering
no starch really never stops giving. there are already great books on this topic but I'm really excited for this one

[icy lark]

Do you guys have any recommendations related to social engineering?

Oh I guess imma buy the upper one

[humble goblet]

https://www.wiley.com/en-us/The+Art+of+Deception%3A+Controlling+the+Human+Element+of+Security-p-9780764538391
https://www.wiley.com/en-us/Social+Engineering%3A+The+Science+of+Human+Hacking%2C+2nd+Edition-p-9781119433750

[icy lark]

Oh thanks

[humble goblet]

https://www.humblebundle.com/books/cybersecurity-2022-wiley-books this bundle contains both 😄

[icy lark]

oh that's pretty cool

Thanks concat

[fallen kiln]

I love humble bundle, thanks for the information, I went ahead and got all of the books!

[hidden bough]

Gave +1 Rep to @humble goblet

[glad marten]

am I the only one who feels deeply scared by that open eye on the cover of practical malware analysis

what thy sees can not be unseen

[west fjord]

You should be scared. 😉

[bronze saddle]

the single eye open 😳

[topaz basin]

yea it creeped me out too

[stuck crown]

it's because they paid extra for these to get used

[humble goblet]

guys stop giving me nightmares 😄

[glad marten]

😭 😭

[chrome parcel]

I cannot get past this book similar to how I can't get past initially starting stuff. I ALWAYS want to do something else.

But I do have the book and it's really good even though I only read like 3 chapters.

I'm like oh nice malware analysis, okay chapter 3 lets continue. Hmm Windows is interesting I want to learn more windows. Oh I love my android phone I want to learn Android now. Basically it goes like that 😄

[south fulcrum]

One eye open when Im sleeping

https://tenor.com/view/test-oeowis-gif-23949615

[tidal plume]

Yes that's why when you combine it with Wiley's books, Malware Analyst's Cookbook and The Art of Memory Forensics you're really getting stuck into high level stuff

https://www.amazon.com/Malware-Analysts-Cookbook-DVD-Techniques/dp/0470613033/ref=sr_1_1?crid=21KB4RXYL8794

https://www.amazon.com/Art-Memory-Forensics-Detecting-Malware/dp/1118825098/ref=sr_1_1

Got an email yesterday confirming the final edition of Jon DiMaggio's The Art of Cyberwarfare is now available on the No Starch site so you can purchase the epub/pdf or physical editions there
https://nostarch.com/art-cyberwarfare

Theey have an interview with the man himself here too:
https://nostarch.com/blog/threat-analyst-jon-dimaggio

[pliant haven]

hey guys I am looking for some free books online for python, java but also for redtem pentest any idea were to look for something like that

thx alot

[vocal needle]

For python: https://inventwithpython.com/

[humble goblet]

huge upvote

[stuck crown]

I got this book on sale

[stuck crown]

I bought this one too so that my daughter can take a break from tryhackme and work on her splatoon minecraft idea https://turtleappstore.com/book/

[elder plaza]

This is such an awesome title😂

[glad marten]

Why do people read books about things they can google?

e.g. programming and how to use linux

don't get me wrong; I read books about compsci theory and stuff

[chrome parcel]

Some people like to read books on subjects they like, some people like to google?

[nimble coyote]

for me, reading books is more like a hobby, if i want to learn something, I'll google and research, way faster imo

[humble goblet]

I think mainly for 2 reasons. 1st: the structure. if a book aims to give you a working knowledge of penetration testing, usually you can see an overview of all the things you need to know to get there right in the introduction. then when you're done with the book, you know you have that working knowledge (if you've worked through the material as the author intended, and also if the book is good etc.)

and 2nd, sometimes you get pictures of cats. see here for a good example https://www.oreilly.com/library/view/linux-cookbook-2nd/9781492087151/

of course you should also use google if you have more specific questions or topics that you want to read on further

but for me, the structured material has been invaluable instead of starting with google and getting into tutorial hell

[stuck crown]

don't get me wrong; I read books about compsci theory and stuff
Have your tried asking yourself? 😆

[glad marten]

Yeah but there's a difference between books about theory and books about practice

e.g. programming language syntax can be googled

learning about windows driver stacks can be googled as well, but it's incredibly low-level to the point where the docs are bad and you have a hard time getting all resources together

[humble goblet]

yeah, they have different aims and possibly have different target audiences 😄

this in no way invalidates the advantages a book has over google

[humble goblet]

you end up answering your own questions

[glad marten]

yeah well but that's the obvious answer

if it were so simple, no one would buy those types of books

hence I'm asking

[humble goblet]

sometimes it also comes down to preference which is also simple

I'm very much a book person; I can recommend you some good ones, but if google does the job better than the book for you, I won't try to "convince" you

[regal pond]

A large part of being competent technically comes from having a large number of idioms to draw from when you're doing your work. Reading a book on proper usage of a product is more depth and breadth on it than following the quickstart or hello world toy examples.
Google answers also fall short, as sometimes they are just wrong or outdated

[stuck crown]

https://youtu.be/qSgbKu8ZYPM

[stuck horizon]

I have a free audible credit, anybody recommend a cybersec audiobook?

[stuck crown]

Have you read the things we've already mentioned?

[stuck horizon]

No

Judging by the covers a lot of them look like they'll have code, pictures, etc.

[stuck crown]

I've mentioned several audible books myself
https://c.tenor.com/PlpFaachqsIAAAAM/you-cant-judge-a-book-by-the-cover-kevin-gates.gif

[stuck horizon]

I know I'm trying to find the ones you mentioned

[stuck crown]

This is the one I'm currently on. Listen to Spies, Lies, and Algorithms by Amy B. Zegart on Audible. https://www.audible.com/pd/B09RCDB6LM?source_code=ASSOR150021921000R

[stuck crown]

Go to the search bar in discord and type "audible"

[stuck horizon]

I guess audio is good for history books

How was it?

[strange isle]

One of the best books

[regal pond]

That's a huge topic. What are you looking for?

[tidal plume]

You can try the website https://www.learncpp.com/

It's a free resource that might help you. Books on C/C++ can be bought from many sources

[misty jewel]

C++ Gotchas: Avoiding Common Problems in Coding and Design (Addison-Wesley Professional Computing Series) is a very good book if you already know C++, it's a little dated but you can read any chapter and learn something about C++, I read it cover to cover. My favourite C++ book I have read that is only about C++ I feel like I improved my C++ ability a lot just be knowing about these common pit falls.

[chrome parcel]

Hello, Any book name about encryption for beginners using c++?

Thanks

[chrome parcel]

Thanks

[hidden bough]

Gave +1 Rep to @empty raven

[charred hollow]

Please suggest me a book about hacking from beginner level

[humble goblet]

https://nostarch.com/pentesting is one of the best beginner oriented books; it's old, but a lot of the material is still applicable, and it's a good book to introduce you to the mindset. There's also https://www.oreilly.com/library/view/learning-kali-linux/9781492028680/ which is a bit newer, also beginner oriented

[tidal plume]

https://nostarch.com/ethical-hacking

https://nostarch.com/linuxbasicsforhackers

[regal pond]

Rumor has it the Weidman Pentest book just got a 2nd edition - code updates have been up on her github for a few months

[tidal plume]

2 months ago her linkedin says she was looking for a job so she could complete the 2nd edition. We're all waiting just for kicks but the Ethical Hacking book above came out only a few months ago and was in a Humble Bundle recently, and it's very good

[humble goblet]

I knew I was forgetting something. The funny part is that I own the thing, lol

[stuck crown]

List of technical books that I want to read one day

https://link.springer.com/book/10.1007/978-1-4302-4252-9
https://mhebooklibrary.com/doi/book/10.1036/9780071591195
https://www.amazon.com/Programming-Language-2nd-Brian-Kernighan/dp/0131103628
https://www.ciscopress.com/store/ccna-cybersecurity-operations-companion-guide-9780135166246
https://www.degruyter.com/document/doi/10.1515/9781501506673/html
https://www.oreilly.com/library/view/c-in-a/9781491924174/
https://www.oreilly.com/library/view/introduction-to-computer/9781466572133/
https://www.oreilly.com/library/view/learning-javascript-3rd/9781491914892/
https://www.oreilly.com/library/view/learning-python-5th/9781449355722/
https://www.oreilly.com/library/view/understanding-and-using/9781449344535/
https://www.packtpub.com/product/c-7-and-net-core-modern-cross-platform-development-second-edition/9781787129559
https://www.packtpub.com/product/effective-python-penetration-testing/9781785280696
https://www.packtpub.com/product/mastering-c-programming/9781786461629
https://www.wiley.com/en-us/Cyber+Forensics:+From+Data+to+Digital+Evidence-p-9781118273661
https://www.wiley.com/en-us/Practical+Reverse+Engineering:+x86,+x64,+ARM,+Windows+Kernel,+Reversing+Tools,+and+Obfuscation-p-9781118787311

[alpine pumice]

Serendipity / unknown unknowns. I can look up what I know I need to know, but long-form comprehensive content can introduce me to things I didn't know I needed to know, and books tend to be, like, long. To me it's like "why go to college when you can look everything up." Sure, you can, but in college/books you can find different angles/perspectives of examining something but within a consistent framework, in-depth discussion revealing vital nuances, etc. And sometimes the person with the best advice has chosen to put it in a book, and sometimes it doesn't lend itself well to distilling into bullet points; it needs the full picture for the bullet points to really make sense

They can also provide guided journeys toward understanding of a complex concept, or just an enjoyable journey of a leisurely kind, lol

[alpine pumice]

That's what we call reference material -- in that case, is maybe just handy to be able to thumb through a book without losing focus on the computer by navigating to a document, or allows for easy brushing-up

Relevant to this is the book "Fool's Gold: Why the Internet Is No Substitute for a Library" by Herring. I think I still have a copy and if so I'll reread and summarize it sometime, but there's a review here: https://www.researchgate.net/publication/282011789_Review_of_Fool's_Gold_by_Mark_Herring

Indeed, more often
than not the average Google search misleads the user, since so much of the Internet lies
outside the bounds of even the most robust of search engines and the vast majority of the
available literature on a given topic never appears on the Web at all. Then there is the
matter of quality control. Of course, the Web has none, becoming inadvertently the
source of misinformation as often as the source of reliable data.
...
The problem in one sense lies not with the Web, Herring argues, but with the way
we use it. We tend to snatch and catch pieces of information, revel in the thirty-second
sound bite trivia, and choose the shortest path to information. That kind of simplistic
Web reliance has meant lower literacy rates and a disparagement of reading itself in a
good many quarters. The Web inadvertently has produced a generation of readers who
cannot read as well as their parents or their grandparents, all of which bodes ill for the
future.

The message as I recall is more along the lines of "Why the internet is no substitute for a well-tended archive of information and a trained expert in research and metadata who can help you navigate it when you're really digging for the deep stuff" which isn't to disparage the internet in what it can do for quick or even relatively in-depth research, but 1) All the information isn't here yet and 2) When it is, that's nowhere near the end of using it effectively

(when he talks about "a library" think "going to the reference desk and getting personalized assistance with a niche-of-a-niche research topic" not "going down to the local branch and borrowing some leisure reading")

[halcyon wave]

Hey, any books like this one "Tribe of Hackers. Cybersecurity Advice from the Best Hackers in the World " -2019- ?

[chrome parcel]

yes, there are few other books in the same "Tribe of Hackers" series.. some of them are about red team, blue team too.

[halcyon wave]

Any title?

[chrome parcel]

Tribe of Hackers Security Leaders: Tribal Knowledge from the Best in Cybersecurity Leadership

Tribe of Hackers Blue Team: Tribal Knowledge from the Best in Defensive Cybersecurity

3. Tribe of Hackers Red Team: Tribal Knowledge from the Best in Offensive Cybersecurity

[halcyon wave]

Tyyyyy ❤️

[wet musk]

I'd take an O'Reilly book over Goggle any day.

[kind sedge]

any books for coding for begginers

[stuck crown]

#bookclub message

[silver glen]

cyber security inspired or just coding?

[kind sedge]

Coding

[tidal plume]

https://www.humblebundle.com/books/joy-coding-no-starch-press-books

[alpine pumice]

Sorry, replied wrong one 😦

[errant sundial]

@alpine pumice This is a massive wall of images, can you do something about that?

[alpine pumice]

Yes

[errant sundial]

Perhaps titles only? Perhaps an imgur album of covers?

[errant sundial]

Excellent, thanks!

That second title is satire btw

[regal pond]

So is the bottom right kitten book

[alpine pumice]

[night rampart]

I've been listening to this via Audible. Early days of hacking but a fascinating story involving CIA, FBI, NSA, tracking down an international hacker from Europe. Defiantly worth a listen/read and just shows how the world has progressed. 🪱 https://www.audible.co.uk/pd/The-Cuckoos-Egg-Audiobook/1977300472

[visual storm]

Talking with an experienced Pentester the other day and he mentioned that I should avoid metasploit and try to do things manually. Do you guys/gals have any book suggestions that are more manually focused? Is that a thing?

[charred obsidian]

can anyone tell me a book for starting pentesting

[tidal plume]

You should watch his TED talk
https://www.youtube.com/watch?v=Gj8IA6xOpSk

[tidal plume]

The current book on Ethical Hacking from No Starch Press is a good one. We posted about it above, here... #bookclub message

[night rampart]

I would start here: https://nostarch.com/linuxbasicsforhackers

[stuck crown]

I finished up that book by Any Zegart. Not a very technical book and you may have heard a bit of it before it you've gone through some of the titles I've gone through, but it was neat to hear a political scientist's perspective.

I need my audible credit to kick in until then I am going to focus on the practical malware analysis and just listen to podcasts

[vocal needle]

Thanks! That was great!

[hidden bough]

Gave +1 Rep to @tidal plume

[near void]

Thanks for sharing

[hidden bough]

Gave +1 Rep to @night rampart

[river thicket]

whats a good website for all around IT books. I had this one site saved in my school notes but i cannot find it. smh

[wet musk]

https://www.humblebundle.com/ and https://www.oreilly.com/ I love those

[river thicket]

humblebundle... thats the one i was looking for. much appreciated!!

[wet musk]

anytime 🙂

[loud lava]

Has anyone read both Social Engineering: The Science of Human Hacking 2nd Edition and Social Engineering: The Art of Human Hacking 1st Edition by Christopher Hadnagy? And if so, is it worth reading both?

[wet musk]

I have both on my TBR pile. I can’t wait to have some time to get to them

[loud lava]

I've read the 2nd edition. I can really recommend that one. I'm just curious if the two will overlap to much before diving into the 1st edition

[stuck crown]

I got a new book! I plan to finish up PMA first, but I wanted to have this on deck

[tidal plume]

An interesting looking read from MIT Press...

Social Engineering - How Crowdmasters, Phreaks, Hackers, and Trolls Created a New Form of Manipulative Communication - MIT Press

https://mitpress.mit.edu/books/social-engineering

[high iris]

This is on my list, just finished Sandworm https://www.audible.co.uk/pd/0593146786?source_code=ASSOR150021921000V on audible and it's more focused on the attacks in Ukraine (it's very weird listening to the history of something that is playing out right now)

[visual storm]

@high iris I was listening to this book last night and it is absolutely fascinating with current events. I almost would love to read a follow up in a few years given the connection between cyber attacks and the recent offensive.

[high iris]

I'm sure someone will write about this in the near future (probably extensively)
What has been startling is the lack of large scale cyber attacks like NotPetya, I wonder if the USAs warning have made Russia et al consider the ramifications of another wide spread attack so they are holding off untill they can guarantee minimal collateral damage.

[stuck crown]

you don't use the nuke option if you don't feel you have to

[high iris]

Just feels like it there should have been more. HematicWiper did some damage but nothing like turning the power off

[stuck crown]

especially considering the reversibility ah wait I was thinking of PartyTicket, not sure if HermeticWiper is the same deal

[high iris]

I haven't seen anything about HematicWiper being reversible.

But I'm not in the industry 🤣😅

[stuck crown]

This is what I was thinking of https://www.techtarget.com/searchsecurity/news/252514091/CrowdStrike-cracks-PartyTicket-ransomware-targeting-Ukraine

[chrome parcel]

Hey, does anybody know some good book on database design? Something what goes pretty low, to arranging storage level, but also touches philosophical questions such as 'why we need physical design?' It can be dry as hell, it does not bother me. If possible, something recently published, reflecting current trends, but if there is some older book written by some database guru, I will take it too of course.

[wintry swallow]

Hi, Do you recommend any good book/blog/whatever about "Pentesting Industrial Control Systems"?

[errant sundial]

CISA have some excellent content on it, including a number of free courses

[alpine sail]

https://www.humblebundle.com/books/get-certified-wiley-books?charity=synshop

[undone portal]

thanks @alpine sail I just bought the 6 book bundle

[hidden bough]

Gave +1 Rep to @alpine sail

[alpine sail]

Nice!! I love their deals

[stuck crown]

I'm a big fan of humble bundle books, but this might be one I pass on

[old garnet]

Regex by Trial and Error, Is it a good book for regex?

[novel locust]

I think it's not a book but a meme :/

Check the editorial

[alpine pumice]

hoehhehuehuheuheuh

[tidal plume]

This one is the best

This one is really relevant

This one is full of career advice

[chrome parcel]

do anybody knows books that arent out dated

[tidal plume]

Yes, we post about loads of them here. Frequently we'll post about individual books on all kinds of areas of cybersecurity and other computing things, and about deals in places like Humble Bundle. There are loads of good and modern books from No Starch, Wiley, O'Riley and other publishers. Just ask about a topic you're interested in and we'll point you to a worthwhile read

[chrome parcel]

well thx for answering

and i looking into books about pentesting and CTF kinda stuff

[chrome parcel]

sooo do you have anything to recommend for me

[tidal plume]

Yes, since I don't know what topics you're interested in, I would suggest going to my favourite publisher, No Starch Press, seeing what you might be interested in and asking about it, or buying it.

I would also suggest you scroll back up in this thread and read about all the books we've been discussing recently.

Then I'd advise you to go take what you learn and practice it

https://nostarch.com/

[chrome parcel]

this the year about when the book was published or when it was uploaded on the website

[tidal plume]

Yeah that's the publish date

[chrome parcel]

do u have any good kindle books to read aswell because i dont really like reading on my pc or phone

[tidal plume]

Most of the books we talk about here have Kindle editions or other ebook formats. I read on my tablet regularly

[regal pond]

@chrome parcel All tech books are outdated by the time they get to publication. When reading industry literature, you should be looking for conceptual ideas you can take and implement - some of the literature is better than others at helping you cross that bridge, but ALL of it lags behind the state of the art by several months at best.

[clear juniper]

which book do you recommend to me as a newbie at network security and related stuff?

[novel locust]

Any book recommendations for learning technical blockchain development?

[tidal plume]

Since I don't know what stage you're at on your journey, I would suggest reading 'How Cybersecurity Really Works' by Sam Grubb. You can buy it from No Starch Press
https://nostarch.com/cybersecurityreallyworks

[elder plaza]

I don’t think you’ll find much, it’s somewhat niche and still quite new, youtube / udemy are probably your best shots.

[novel locust]

Yeah I've purchased a couple of courses but I'd like to go more in depth. Thanks though!

[hidden bough]

Gave +1 Rep to @elder plaza

[devout sail]

Just finished Cliff Stoll's The Cuckoo's Egg! 🔥

Anyone recommend anything else thats similar to it?

[high iris]

Bit of light reading

[high iris]

Sandworm is similar.
Currently reading "this is how they tell me the world ends"

[limpid niche]

I'm looking to get into memory forensics
I wanted to know a couple of things

1. What would be the prerequisites for learning it?
2. Is the book Art of Memory Forensics still relevant or should I refer someplace else?

[devout sail]

@misty moatworm I finished last year. As well as StuxNet

How are you linking "this is how they tell me the world ends"?

[high iris]

It's about similar things. Not so much Russia but more of the global vuln market

[devout sail]

oh nice

I had heard about a book that talks about the malware black market in detail

I forgot the name tho..

it might be the one you're already reading but not sure

[upbeat vector]

I really liked that book its the first one I chose to read in a long time

[obtuse plover]

Dark Territory

[devout sail]

uuuuh is that a book or a comment? lol

[tidal plume]

explore the context and find out...

[devout sail]

fair enough

its Fred Kaplan's right?

[tidal plume]

Yes, a great read

[junior relic]

🙄

[stuck crown]

its a good book

[alpine pumice]

O'Reilly - Andreas M. Antonopoulos - Mastering Bitcoin: Programming the Open Blockchain
Khaled Salah Mohamed - New Frontiers in Cryptography: Quantum, Blockchain, Lightweight, Chaotic and DNA
Wei Xu, Jian Gong - Cryptoeconomics: Igniting a New Era of Blockchain
Imran Bashir - Mastering Blockchain
Andreas Bolfing - Cryptographic Primitives in Blockchain Technology: A Mathematical Introduction
Narayan Prusty - Building Blockchain Projects
Neeraj Kumar, Arzoo Miglani - Probabilistic Data Structures for Blockchain-Based Internet of Things Applications
O'Reilly - IBM Blockchain As A Service
Packt Publishing - Kirankalyan Kulkarni - Essentials of Bitcoin and Blockchain
Arjuna Sky Kok - Hands-On Blockchain for Python Developers
Liehuang Zhu, Keke Gai, Meng Li - Blockchain Technology in Internet of Things

[fierce carbon]

hello any book recommendation for pentester ? preferably in french, thanks !!! Have a nice day

[fierce carbon]

In english not problem, but on amazon so

[fossil frigate]

@fierce carbon Salut. A la Fnac il me semble qu'ils ont des trucs pas trop mal

Il y a des livres en anglais qui sont traduits en français 👌🏼

[fierce carbon]

Hey ! Merci ! Tu as des exemples !

?*

[fossil frigate]

Bien sûr ! Tu veux qu'on en parle en dm ?

[north spade]

Reminder to keep the conversation in English in the server please :)
Thanks for taking it to DMs though

[fierce carbon]

yes !

[fossil frigate]

Ok Sorry 👌🏼

[novel locust]

Hey thanks man! Really appreciate this, I will definetly buy a couple of them.

[hidden bough]

Gave +1 Rep to @alpine pumice

[tidal plume]

Yes there's loads of books we recommend for pentesters. Ethical Hacking by Daniel Graham is a good starter book, it's very up to date.
https://nostarch.com/ethical-hacking

A lot of the No Starch Press books are focused on different areas of hacking and pentesting.
https://nostarch.com/catalog/security

There are also books on certs like Security+, Pentest+ etc...

The Hacker Playbook 3 is quite good
https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing/dp/1980901759/ref=sr_1_10

If you have a particular cybersecurity book in mind, do ask about it. Someone here has probably read or used it at some point

[fierce carbon]

Oh thanks, this gonna be really usefull ! Thanks a lot !!!!

[hidden bough]

Gave +1 Rep to @tidal plume

[tidal plume]

We've discussed lots of books already in this channel but do ask if you have quesstions

[fierce carbon]

thanks a lot, I gonna remember your name, for the next time... I gonna buy this books, and training a lot to be a pentester !

[hidden bough]

Gave +1 Rep to @tidal plume

[chrome parcel]

Thank you for this!

+rep @alpine pumice

[hidden bough]

Gave +1 Rep to @alpine pumice

[chrome parcel]

In addition to No Starch books, the GPEN all-in-one book is pretty cool, when we are speaking about pentesting books.

[nova sundial]

Hi, do you have any good recommendations regarding active directory security? (if possible in French but otherwise no problem in English)

[knotty delta]

What if I told y'all we live inside of a book?

[chrome parcel]

I do not have a book, but I can share this: https://zer1t0.gitlab.io/posts/attacking_ad/

[chrome parcel]

Hi guys anyone got the free pdf of the book "Countdown to Zero Day"?

any which books can you recommend in general for hacking

[nova sundial]

ok thanks, but i was thinking more about hardering and not pentest stuff

[hidden bough]

Gave +1 Rep to @cobalt whale

[opaque vortex]

Read Rule #11-
No distribution of illegally obtained materials within the discord. Do not pirate books in bookclub. This also applies to classified (or potentially classified) materials, which should also not be posted in the server.

[chrome parcel]

is every pdf of a book in the internet piracy no idea tbh

wasnt aware but thanks !

[opaque vortex]

Have an awesome day.

[undone portal]

Has anyone used this book for better bash scripting? I'm new to bash scripting and finding it really interesting. https://www.amazon.ca/Practical-Guide-Commands-Editors-Programming/dp/0134774604/ref=tmm_pap_swatch_0?_encoding=UTF8&qid=1648594114&sr=8-6

[chrome parcel]

This is a great book. It describes different shells and all. It helped me a lot in my linux journey.

[undone portal]

I saw the book recommended on reddit r/bash and was curious. Thanks @chrome parcel !

[hidden bough]

Gave +1 Rep to @cobalt whale

[chrome parcel]

It is available through O'Reilly learn, so you can get deeper look into it before buying.

[undone portal]

sounds great! thanks!

[tidal plume]

Sobell's books are all really well written and very thorough. The scripting book will always be relevant since that doesn't really change much year to year

[scenic rock]

I'm halfway through reading the Breaking And Entering: The Extraordinary Story of a Hacker Called “Alien” by Jeremy Smith.
It's a pretty easy, story-like read about a girl who slowly becomes a hacker while having fun at MIT. Apparently it's based on true events but either way, it's a fun bedtime read that's not brain numbing but still has a nice infosec hint to it.