Leanpub Header

Skip to main content

Filters

Category: "Computer Security"

Computer Security

  1. Maester Hardening Guide
    Maester Hardening Guide
    A practical, test-by-test playbook for hardening Microsoft 365, Entra ID, and Active Directory — built from the real Maester security test suite.
    Thomas Førde

    A test-by-test playbook that turns Maester's 676 security checks into risks you understand and fixes you can run.

  2. Hardened TypeScript. Passkeys, Supply Chain Defense, and Zero-Trust Architectures
    No Description Available
  3. Hardening MCP Servers
    Hardening MCP Servers
    Hands-on recipes to secure MCP Servers from code injection, rug pulls, OAuth flaws, and prompt attacks
    GitforGits | Asian Publishing House

    This book is a workshop where things go wrong on the page, in front of you, and then get fixed in code, with the output that proves the fix worked. There's no need to be a security expert to follow along. We'll be moving from the interpreter to the supply chain, from the token to the human clicking Allow, and from a single tool to a whole host of untrusting servers.

  4. BlackHat Ruby
    BlackHat Ruby
    Building Offensive Security Tools, Exploit Frameworks, and Vulnerability Research Instrumentation
    Steve Publications

    Build offensive security tools that go beyond simple scripts. BlackHat Ruby shows how to create scanners, fuzzers, protocol analyzers and exploit frameworks with clean, practical Ruby code. Along the way you'll see how these techniques work, where the legal boundaries are and how defenders spot and stop them.

  5. Post-Quantum, Measured
    Post-Quantum, Measured
    Migrating TLS, PKI, and application crypto with evidence you can reproduce
    Danny B. Carr, Jr.

    Adversaries are recording encrypted traffic today to read it once a quantum computer arrives. NIST published the replacements in 2024, and OpenSSL ships them now. This is the migration: measured on one laptop with stock OpenSSL 3.5.5, with every claim labeled verified, reported, or proposed.

  6. Zero to Hero Bash
    Zero to Hero Bash
    Build a Real Backup Tool, One Commit at a Time
    Muhammad Y. Rasheed

    Learn Bash the way it should be taught: by building one real, tested backup tool — not toy examples — one Git commit at a time.

  7. Security Testing for AI Applications: The New Attack Surface
    Security Testing for AI Applications: The New Attack Surface
    Prompt Injection, Jailbreaking, Data Leakage, and the AI Threat Landscape
    Yuri Syuganov

    Your AI features are an attack surface. Learn to break them before someone else does — from prompt injection to retrieval poisoning, with hands-on labs.

  8. API Security
    API Security
    A Definitive Reference for Building Secure APIs at Scale
    Steve Publications

    APIs are the foundation of modern software and one of its most critical attack surfaces. API Security: A Definitive Reference for Building Secure APIs at Scale shows you how to build APIs that are secure by design, resilient under attack, and ready for production.

  9. Docker Containers: From Beginner to Mastery
    Docker Containers: From Beginner to Mastery
    A Complete Guide to Building, Running, and Managing Containerized Applications
    Steve Publications

    Discover how Docker is revolutionizing modern software development by making applications faster to build, easier to deploy, and more reliable to run. Whether you are just getting started or refining production workflows, this practical guide will help you master containers through clear explanations, hands-on examples, and real-world techniques that you can apply with confidence.

  10. バッファオーバーフローの悪用と防御の回避
    バッファオーバーフローの悪用と防御の回避
    メモリ破壊脆弱性の徹底解説:エクスプロイトと防御
    Steve Publications

    メモリ破損は、依然としてソフトウェアの脆弱性の中でも最も重大な分類の一つです。本書では、メモリ破損の基礎から、現代のエクスプロイト技術、それらを防ぐために設計された防御機構までを包括的に取り上げ、セキュリティ専門家や研究者がこれらの脆弱性の仕組みを深く理解し、効果的な対策を講じるための知識を提供します。

  11. Ausnutzung von Pufferüberläufen und Umgehung von Schutzmechanismen
    Ausnutzung von Pufferüberläufen und Umgehung von Schutzmechanismen
    Ein tiefer Einblick in Speicherbeschädigungs-Schwachstellen, Ausnutzung und Verteidigung
    Steve Publications

    Speicherkorruption zählt zu den schwerwiegendsten Klassen von Softwareschwachstellen. Dieses Buch vermittelt die Grundlagen, moderne Exploitation-Techniken und wirksame Schutzmaßnahmen und richtet sich an IT-Sicherheitsexperten sowie Schwachstellenforscher.

  12. 버퍼 오버플로우 악용 및 방어 우회
    버퍼 오버플로우 악용 및 방어 우회
    메모리 손상 취약점, 익스플로이팅 및 방어에 대한 심층 연구
    Steve Publications

    메모리 손상(Memory Corruption)은 여전히 가장 심각한 소프트웨어 취약점 유형 중 하나입니다. 이 책은 메모리 손상의 기초 개념, 최신 익스플로잇 기법, 그리고 이를 방어하기 위해 설계된 다양한 방어 메커니즘을 살펴보며, 보안 전문가와 연구자들이 이러한 취약점이 어떻게 동작하는지 깊이 이해하고 이를 효과적으로 완화하는 방법을 익힐 수 있도록 돕습니다.

  13. Offensive Security with Kali Linux
    Offensive Security with Kali Linux
    A Comprehensive Guide to Ethical Hacking and Penetration Testing
    Steve Publications

    Offensive Security with Kali Linux is a practical guide to ethical hacking and penetration testing, taking you from foundational Linux and networking concepts to advanced exploitation techniques. With a strong emphasis on ethical practice and real-world methodology, you'll learn to identify vulnerabilities, assess systems responsibly, and strengthen security using Kali Linux.

  14. Inside the Debugger: Building a Source-Level Debugger in Rust
    Inside the Debugger: Building a Source-Level Debugger in Rust
    A Deep Dive into Processes, Memory, Breakpoints, and DWARF Debug Information
    Steve Publications

    Build a source-level debugger in Rust from the ground up while uncovering the operating system, CPU, and compiler mechanisms behind modern debugging. Through hands-on implementation, you'll learn how processes, memory, breakpoints, and DWARF debug information come together to make source-level debugging possible.

  15. Digital Forensics: A Practical Guide to Modern Investigations
    Digital Forensics: A Practical Guide to Modern Investigations
    From Evidence Acquisition to Advanced Analysis
    Steve Publications

    Discover how to uncover, preserve, and analyze digital evidence with confidence. From fundamental forensic principles to advanced investigative techniques, this practical guide combines hands-on exercises, real-world case studies, and industry-standard tools to help you conduct modern digital investigations with accuracy and credibility.