Penetration Testing

Offensive Security with Kali Linux is a practical guide to ethical hacking and penetration testing, taking you from foundational Linux and networking concepts to advanced exploitation techniques. With a strong emphasis on ethical practice and real-world methodology, you'll learn to identify vulnerabilities, assess systems responsibly, and strengthen security using Kali Linux.

Pass the OSCP with a proven, hands-on plan. This field manual covers the current exam format and the new scaled scoring, a realistic 12- or 24-week study plan, enumeration, web attacks, privilege escalation, pivoting, and full Active Directory compromise, plus exam-day strategy, reporting, and how to bounce back from a failed attempt.

AI now drives entire pentest workflows, from recon and fuzzing to exploit analysis and reporting. This hands-on guide shows security professionals which AI tools to trust, where they fail, and how to use them responsibly, with real-world scenarios and 13 practical labs covering prompt injection, the OWASP LLM Top 10, and red teaming AI agents.

Explore the art and science of privilege escalation across modern operating systems, enterprise networks and cloud environments. From system internals and misconfigurations to advanced exploitation techniques, this book delivers the technical depth, practical insights and defensive knowledge needed to uncover privilege escalation paths and strengthen security in complex infrastructures.

“Guns. Lots of guns.” — Neo, The Matrix (1999)Every domain has its weaknesses. Every privilege has a path.Go inside Active Directory with a practical, 100-page field manual featuring six phases of penetration testing, real-world attack techniques, actionable commands, and defensive insights.Know the domain. Understand the attack paths. Master the methodology.

Go beyond clicking through msfconsole. A progressive, hands-on course that takes you from your first canned exploit to writing custom Ruby modules, pivoting through compromised networks, and extending the Metasploit Framework itself.

Master offensive and defensive security techniques across smart contracts, DeFi protocols, bridges, rollups, consensus systems, and next-generation Web3 infrastructure.Blockchain ecosystems secure billions of dollars in digital assets, making them a persistent target for sophisticated cyberattacks. From reentrancy vulnerabilities and oracle manipulation to flash loan exploits, bridge compromises, governance attacks, and Layer-2 weaknesses, blockchain security requires expertise spanning cryptography, distributed systems, protocol engineering, and adversarial analysis.

Learn how expert penetration testers find what scanners miss. This practical guide takes you from the foundations of offensive security to advanced assessment techniques, teaching you how to uncover, validate and chain weaknesses then turn technical findings into clear, useful results.

Master applied security automation! Learn how to build, code, harden, and deploy 24/7 continuous autonomous AI security agent swarms using Python 3.10+, Playwright, LLM Triage (Gemini & Ollama), OAST interaction verification, and Burp Suite Pro extensions.

Build offensive security tools that go beyond simple scripts. BlackHat Ruby shows how to create scanners, fuzzers, protocol analyzers and exploit frameworks with clean, practical Ruby code. Along the way you'll see how these techniques work, where the legal boundaries are and how defenders spot and stop them.

Master modern JavaScript and Node.js from absolute beginner to professional with 1,100+ pages of practical explanations, real-world examples, exercises, projects, and career guidance.

The Effective Bug Bounty Playbook teaches a systematic approach to finding high-impact vulnerabilities. Through real-world case studies and proven methodologies, you'll learn how to think like an experienced bug bounty hunter and uncover impactful security flaws more consistently.

メモリ破損は、依然としてソフトウェアの脆弱性の中でも最も重大な分類の一つです。本書では、メモリ破損の基礎から、現代のエクスプロイト技術、それらを防ぐために設計された防御機構までを包括的に取り上げ、セキュリティ専門家や研究者がこれらの脆弱性の仕組みを深く理解し、効果的な対策を講じるための知識を提供します。

Speicherkorruption zählt zu den schwerwiegendsten Klassen von Softwareschwachstellen. Dieses Buch vermittelt die Grundlagen, moderne Exploitation-Techniken und wirksame Schutzmaßnahmen und richtet sich an IT-Sicherheitsexperten sowie Schwachstellenforscher.

메모리 손상(Memory Corruption)은 여전히 가장 심각한 소프트웨어 취약점 유형 중 하나입니다. 이 책은 메모리 손상의 기초 개념, 최신 익스플로잇 기법, 그리고 이를 방어하기 위해 설계된 다양한 방어 메커니즘을 살펴보며, 보안 전문가와 연구자들이 이러한 취약점이 어떻게 동작하는지 깊이 이해하고 이를 효과적으로 완화하는 방법을 익힐 수 있도록 돕습니다.