Leanpub Header

Skip to main content

Filters

Category: "Offensive Security"

Offensive Security

New to Cybersecurity? Read the Cybersecurity article

  1. Intelligent Discovery
    Intelligent Discovery
    AI-Powered Vulnerability Research and Software Security
    Steve Publications

    AI is changing the way we find and fix software vulnerabilities. Intelligent Discovery explores the techniques behind this shift, from static analysis to AI-driven vulnerability research and automated repair. With a clear-eyed look at both the potential and the pitfalls, it shows what these tools can do, where they fall short and why human expertise still matters.

  2. Blockchain Security: Attack and Defense

    Master offensive and defensive security techniques across smart contracts, DeFi protocols, bridges, rollups, consensus systems, and next-generation Web3 infrastructure.Blockchain ecosystems secure billions of dollars in digital assets, making them a persistent target for sophisticated cyberattacks. From reentrancy vulnerabilities and oracle manipulation to flash loan exploits, bridge compromises, governance attacks, and Layer-2 weaknesses, blockchain security requires expertise spanning cryptography, distributed systems, protocol engineering, and adversarial analysis.

  3. Offensive Security with Kali Linux
    Offensive Security with Kali Linux
    A Comprehensive Guide to Ethical Hacking and Penetration Testing
    Steve Publications

    Offensive Security with Kali Linux is a practical guide to ethical hacking and penetration testing, taking you from foundational Linux and networking concepts to advanced exploitation techniques. With a strong emphasis on ethical practice and real-world methodology, you'll learn to identify vulnerabilities, assess systems responsibly, and strengthen security using Kali Linux.

  4. Inside the Domain: A Field Manual for Active Directory Penetration Testing

    “Guns. Lots of guns.” — Neo, The Matrix (1999)Every domain has its weaknesses. Every privilege has a path.Go inside Active Directory with a practical, 100-page field manual featuring six phases of penetration testing, real-world attack techniques, actionable commands, and defensive insights.Know the domain. Understand the attack paths. Master the methodology.

  5. Practical Metasploit
    Practical Metasploit
    Mastering the Metasploit Framework from First Exploit to Advanced Post-Exploitation
    Ground Truth Books

    Go beyond clicking through msfconsole. A progressive, hands-on course that takes you from your first canned exploit to writing custom Ruby modules, pivoting through compromised networks, and extending the Metasploit Framework itself.

  6. The 3-Tier Vault
    The 3-Tier Vault
    A Practical Security Architecture for Solo Founders and Small Firms
    Daxxis

    Could you tell someone your bank password right now? If you can, that is the problem this guide fixes.

  7. Offensive Security Testing
    Offensive Security Testing
    Methodologies for Professional Assessment
    Steve Publications

    Learn how expert penetration testers find what scanners miss. This practical guide takes you from the foundations of offensive security to advanced assessment techniques, teaching you how to uncover, validate and chain weaknesses then turn technical findings into clear, useful results.

  8. BlackHat Ruby
    BlackHat Ruby
    Building Offensive Security Tools, Exploit Frameworks, and Vulnerability Research Instrumentation
    Steve Publications

    Build offensive security tools that go beyond simple scripts. BlackHat Ruby shows how to create scanners, fuzzers, protocol analyzers and exploit frameworks with clean, practical Ruby code. Along the way you'll see how these techniques work, where the legal boundaries are and how defenders spot and stop them.

  9. The Effective Bug Bounty Playbook
    The Effective Bug Bounty Playbook
    A Systematic Approach to Finding High-Impact Vulnerabilities
    Steve Publications

    The Effective Bug Bounty Playbook teaches a systematic approach to finding high-impact vulnerabilities. Through real-world case studies and proven methodologies, you'll learn how to think like an experienced bug bounty hunter and uncover impactful security flaws more consistently.