Books

Learn how to find interesting behaviour and flaws in JavaScript. Reading this book you will find the latest and greatest techniques for hacking JavaScript and generating XSS payloads. Includes ways to construct JavaScript using only +[]()! characters. Never heard of DOM Clobbering? This book has all the details.

Modern C++ Memory Safety shows you how to make existing C++ systems safer without starting over. Learn practical ways to find and fix memory safety issues using modern C++, compiler tools, sanitizers, static analysis and fuzzing, with techniques you can apply directly to real production code.

Build a source-level debugger in Rust from the ground up while uncovering the operating system, CPU, and compiler mechanisms behind modern debugging. Through hands-on implementation, you'll learn how processes, memory, breakpoints, and DWARF debug information come together to make source-level debugging possible.

Cyber deception gives defenders a powerful way to detect threats and gather valuable intelligence. Honeypots: The Art and Science of Cyber Deception is a practical guide to designing, deploying, and operating security honeypots, covering everything from core concepts to modern frameworks and real-world operations.

AI is changing exploit development. Learn how to use large language models with tools like IDA Pro, Ghidra and Binary Ninja to speed up vulnerability research, reverse engineering and proof-of-concept exploit development while understanding where human expertise still matters.

Linux is one of the best decisions you can make for your computer — but knowing where to start is the hard part. This guide walks you through everything: choosing a distribution, installing it, and using it confidently every day. It was written by Jay LaCroix of Learn Linux TV, for complete beginners. No prior experience required.

Prepare yourself for the HashiCorp Certified: Vault Associate exam with this guide! HashiCorp Ambassador, Ned Bellavance reviews the certification objectives, provides insight from real-world experience, and gives key takeaways for to help you focus on what matters most.

Day two of HashiCorp Vault and OpenBao, measured: restore with a stopwatch, upgrade without an outage window, break the audit device, put the seal in an HSM - and keep the runbook page each lab leaves behind.

Twenty-four chapters, each ending in a working lab on your laptop. Perform an OpenID Connect login by hand, put Active Directory, kubectl and Vault behind one login, then take your own access away on purpose and get it back.

Twenty-four chapters, twenty-three labs on your own laptop, and several that break Harbor on purpose. Install it on a VM and on Kubernetes, gate deployments on scans and signatures, back it up in an order you can defend — and become the person responsible for the registry, not just the one who installed it.

UPDATE: Please don't pay for this!! It's free. Please just take it for free. I'd much rather give it away. Even when it's done, it'll still be free. I'm 100% NOT trying to make money on this. Tell your friends, and be sure to read it. Your applications lives and runs in more places - MCP, desktop applications, browser-based application, data integration pipelines, gRPC, browsers, etc. - than ever. Can your security framework keep up? If you're using Spring Security, then it definitely can, and this book - by Spring Developer Advocate Josh Long - will show you how.

Prepare for the CompTIA Security+® SY0-801 V8 exam with a guide that explains the why, not just the what. It has 27 chapters mapped to every exam objective, 135 explained practice questions, performance-based labs, real-incident case studies and full coverage of the new AI topics.

The 350-701 exam changed in August 2026. This guide was written for the version you are about to sit — all six domains, all 47 topics, in blueprint order.

A 22-chapter explanation of how network traffic moves, what observers can learn, and how privacy mechanisms affect performance.

45% of AI-generated code has vulnerabilities. This book covers prompt injection, data leakage, secure coding with AI tools, MCP server hardening, agent sandboxing, supply chain security, and OWASP LLM compliance. 14 chapters with attack demos and defense code.