Computer Security

Learn how to find interesting behaviour and flaws in JavaScript. Reading this book you will find the latest and greatest techniques for hacking JavaScript and generating XSS payloads. Includes ways to construct JavaScript using only +[]()! characters. Never heard of DOM Clobbering? This book has all the details.

A short, hands-on guide to reverse engineering with AI agents and REA 6.4.0: drive Ghidra from Claude Code, Codex or Cursor, check every claim against evidence, and work through native, Electron, Android, .NET and web targets you are allowed to analyse. Every output shown is a real lab run.

Modern C++ Memory Safety shows you how to make existing C++ systems safer without starting over. Learn practical ways to find and fix memory safety issues using modern C++, compiler tools, sanitizers, static analysis and fuzzing, with techniques you can apply directly to real production code.

Build offensive security tools that go beyond simple scripts. BlackHat Ruby shows how to create scanners, fuzzers, protocol analyzers and exploit frameworks with clean, practical Ruby code. Along the way you'll see how these techniques work, where the legal boundaries are and how defenders spot and stop them.

45% of AI-generated code has vulnerabilities. This book covers prompt injection, data leakage, secure coding with AI tools, MCP server hardening, agent sandboxing, supply chain security, and OWASP LLM compliance. 14 chapters with attack demos and defense code.

A hacked WordPress site can look perfectly normal. Follow real investigations across files, databases, hidden users, cron jobs, hosting, DNS, checkout pages, and blacklists—and learn how to find the full compromise, remove it safely, and stop it from coming back.

I’ve been studying secure unicorns and their habits for a pretty long time. During that time, and as a conclusion of my extensive effort, I figured out that a big part of them are known as procrastinating unicorns whose famous motto is: I’ll think about security later... After even more studies of these creatures, I found their weapon: IAM...

How to put AI agents in production without ending up in the news. A field guide to bounded AI autonomy, MCP security, and AgentSecOps.

Your app is mostly other people's code. You chose a few packages, and those packages pulled in dozens more. Your AI coding agent installs whatever makes the demo work. Your secrets sit in files you will one day share. Your server has not been updated in months. None of this means you failed. It means you build alone, with no security team and no reviewer. This book gives you a realistic, low-cost routine to reduce supply chain risk in a small project, including the risks your AI coding agent introduces. In one weekend plus thirty minutes a month, you will learn to: - map what you actually ship, from direct packages to hidden transitive ones;- vet a new package in five minutes before you install it;- update safely, one small reversible step at a time;- read scanner reports without panic and without ignoring them;- keep secrets out of your code and rotate them when they leak;- protect your code host, registry, and cloud accounts;- run a minimal build pipeline and a boring, updated small server;- keep your AI coding agent leashed with permissions and rules files;- recover calmly from a compromised package, a leaked key, or a hijacked account. You will not become a security expert. You will become a solo builder with a written inventory, safer accounts, tested backups, and a monthly routine you can sustain for years. Most existing books on this topic target large companies, Kubernetes, and enterprise CI/CD. This one is for one person with limited time. It says what to do first, what to skip, and what is overkill. No setup is risk-free, and this book promises none. It promises fewer easy failures and faster recovery.

Cryptography Cookbook is the intuitive way of learning practical cryptography and applied cryptograhy. This book contains more than 1000+ recieipes which include and not limited to Symmetric Key, Assymetric Keys, hashing algorithms, hmac, key exchanges,pki ,encoding decoding,certificare management tls,gpg,smime,ssh-keygen,keytool,iptables etc.

Your applications lives and runs in more places - MCP, desktop applications, browser-based application, data integration pipelines, gRPC, browsers, etc. - than ever. Can your security framework keep up? If you're using Spring Security, then it definitely can, and this book - by Spring Developer Advocate Josh Long - will show you how.

Embedded security is an architecture problem, not a checklist.This book shows how to build a coherent security design for real devices: what embedded cybersecurity means, why it’s different in embedded systems (constraints, lifecycle, physical access, limited patching), and how to turn that into practical design decisions. You’ll learn threat modeling and trust boundaries, then the core mechanisms that must work together: secure boot and root of trust, key management, secure communication, and robust firmware updates. Early access: updated regularly as new chapters and examples are added. Purchasers receive updates.

Das Buch behandelt alle Themen des aktuellen CISSP-Prüfungslehrplans in einem Format, das es ermöglicht, spezifische Prüfungsdomänen und Konzepte auf einen Blick zu vertiefen, wodurch es sich zu einer unverzichtbaren Prüfungsressource für alle entwickelt, die sich ohne Zeit- und Geldverschwendung auf die Prüfung vorbereiten möchten.

The premise of this book is to provide students a hands-on, go-to resource for building a secure, customizable lab environment in order to enable their own specific pursuits.

Learn about binary instrumentation using the Frida toolkit using practical examples. This book is not deeply focused in theory but practical use cases instead, from basic uses of the API to how to apply it in real-world scenarios. We will apply instrumentation under Linux, Windows and MacOS systems.