Resource List

This is a list of (hopefully) useful resources, broken down by category. Feel free to reach out to me with suggestions.

Table of Contents

• Application Security
• Attacker Mindset
• Binary Exploitation
• Cryptography
• General Security
• Learning Platform
• Operating Systems
• Penetration Testing
• Reverse Engineering
• Security Culture
• Security Fiction
• Security News
• Soft Skills
• Web Security

Application Security

• A Bug Hunter's Diary (Book) · (Amazon)
• The Art of Software Security Assessment (Book)

Attacker Mindset

• Adversarial Tradecraft in Cybersecurity (Book)
• I Spy (Podcast)
• Red Team: How to Succeed by Thinking Like the Enemy (Book)
• The Art of Deception: Controlling the Human Element of Security (Book)
• Tribe of Hackers: Red Team (Book)

Binary Exploitation

• A Bug Hunter's Diary (Book) · (Amazon)
• Getting Started with Exploit Development (Blog)
• How2Heap (Lab)
  Heap Exploitation lab by the Shellphish CTF team.

Cryptography

• Cryptography I (Course)
• Cryptopals (Lab)
• Serious Cryptography (Book) · (Amazon)
• Understanding Cryptography (Book) · (Amazon)

General Security

• Awesome Hacking! (Website)
• Building Secure and Reliable Systems (Book) · (Amazon)
• Cyberclopaedia (Website)
• Gynvael Livestreams (YouTube)
• IppSec HTB Walkthroughs (YouTube)
• Linux Basics for Hackers (Book) · (Amazon)
• LiveOverflow (YouTube)
• Phrack Magazine (eZine)
  eZine on a wide range of topics with a long, long history in the hacking community.
• PoC||GTFO (eZine) · (Amazon)
  Collection of articles about a variety of security and related topics. Also available in book form.
• Security Engineering: A Guide to Building Dependable Distributed Systems (Book)

Learning Platform

• AttackDefense.com (Lab)
• Cryptopals (Lab)
• Hack the Box (Lab)
• PentesterLab (Lab)
• pwnable.kr (Lab)
• pwnable.tw (Lab)
• pwnable.xyz (Lab)
• Ringzer0 CTF (Lab)
• Root Me (Lab)
• Stereotyped Challenges (Lab)
• TryHackMe (Lab)
• websec.fr (Lab)

Operating Systems

• *OS Internals (Book) · (Amazon)
• Linux Basics for Hackers (Book) · (Amazon)
• Windows Internals (Book)

Penetration Testing

• Darth Sidious Guide (Blog)
• Metasploit: The Penetration Tester's Guide (Book) · (Amazon)
• Penetration Testing: A Hands-On Introduction to Hacking (Book) · (Amazon)
• PentesterLab (Lab)

Reverse Engineering

• Frida Handbook (Website)
• Practical Binary Analysis (Book) · (Amazon)
• Reverse Engineering for Everyone (eBook)
• The IDA Pro Book (Book) · (Amazon)
• Unnamed Reverse Engineering Podcast (Podcast)
• xchg rax,rax (Book)
  Some assembly gems and riddles for x86_64. Not for beginners, but helps drive a deeper understanding of x86_64 assembly.

Security Culture

• Breaking and Entering: The Extraordinary Story of a Hacker Called "Alien" (Book)
  Book about a hacker who goes from hijinks at MIT to running her own security consulting business.
• Hackers: Heroes of the Computer Revolution (Book)
• Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers (Book)
• The Cuckoo's Egg: Tracking a Spy Through the Maze of Computer Espionage (Book)
• Tribe of Hackers: Red Team (Book)

Security Fiction

• Cryptonomicon (Book)
• Hackers (Movie)
• Neuromancer (Book)
• Snow Crash (Book)

Security News

• CyberWire Daily (Podcast)
• Darknet Diaries (Podcast)
• risky.biz - Risky Business Podcast (Podcast)
• Security, Cryptography, Whatever (Podcast)

Soft Skills

• Deep Work: Rules for Focused Success in a Distracted World (Book)
• Federal Plain Language Guidelines (Website)

Web Security

• Stereotyped Challenges (Lab)
• The Ghidra Book (Book) · (Amazon)
• The Tangled Web (Book) · (Amazon)
• The Web Application Hacker's Handbook (Book)
• websec.fr (Lab)