Books

Código gerado por IA compila, passa nos testes e parece pronto. Os defeitos que importam estão no que falta. Um método prático para revisar esse código antes do deploy.

Master practical system design with 62 parts covering distributed systems, scalability, databases, security, and production architecture. A comprehensive engineering handbook with real-world examples, diagrams, and decision frameworks.

Attackers can hide in your network for months before anyone notices. This practical guide shows you how to uncover hidden threats, develop effective hunting strategies and use the right tools to stay ahead of adversaries. Packed with real-world examples and step-by-step guidance, it helps you turn threat hunting into a proactive part of your security strategy.

Industrial systems and smart buildings are increasingly connected, creating new opportunities for cyberattacks. This book explores the threats, vulnerabilities and security challenges facing modern infrastructure, with practical guidance on protecting industrial networks and building automation systems using proven architectures, established standards and lessons drawn from real-world incidents.

Learn to build, send, capture and analyze network packets with Scapy, one of Python’s most versatile networking tools. Through practical examples and runnable code, you’ll explore protocols, traffic analysis, PCAP files, custom packet creation and security testing. Whether you’re troubleshooting networks or sharpening your security skills, this book gives you the tools to get hands-on.

“Guns. Lots of guns.” — Neo, The Matrix (1999)Every domain has its weaknesses. Every privilege has a path.Go inside Active Directory with a practical, 100-page field manual featuring six phases of penetration testing, real-world attack techniques, actionable commands, and defensive insights.Know the domain. Understand the attack paths. Master the methodology.

AI-assisted code often looks finished while resting on a premise nobody checked. A practical, evidence-based method for developers, tech leads and architects to find system-level defects before they ship.

Your app is mostly other people's code. You chose a few packages, and those packages pulled in dozens more. Your AI coding agent installs whatever makes the demo work. Your secrets sit in files you will one day share. Your server has not been updated in months. None of this means you failed. It means you build alone, with no security team and no reviewer. This book gives you a realistic, low-cost routine to reduce supply chain risk in a small project, including the risks your AI coding agent introduces. In one weekend plus thirty minutes a month, you will learn to: - map what you actually ship, from direct packages to hidden transitive ones;- vet a new package in five minutes before you install it;- update safely, one small reversible step at a time;- read scanner reports without panic and without ignoring them;- keep secrets out of your code and rotate them when they leak;- protect your code host, registry, and cloud accounts;- run a minimal build pipeline and a boring, updated small server;- keep your AI coding agent leashed with permissions and rules files;- recover calmly from a compromised package, a leaked key, or a hijacked account. You will not become a security expert. You will become a solo builder with a written inventory, safer accounts, tested backups, and a monthly routine you can sustain for years. Most existing books on this topic target large companies, Kubernetes, and enterprise CI/CD. This one is for one person with limited time. It says what to do first, what to skip, and what is overkill. No setup is risk-free, and this book promises none. It promises fewer easy failures and faster recovery.

Build security into the full delivery lifecycle, from risk and trust boundaries to CI/CD controls and resilient operations. Visual explanations and practical examples connect secure architecture, supply-chain safeguards, verification, and incident recovery.

You have built an app with AI assistance. Now learn how to check what it actually does. Develop a repeatable method to test, fix and verify what you build.

A hands-on guide to mitmproxy 12: trust the CA, filter, modify and replay traffic, write Python addons, choose the right proxy mode, intercept mobile apps past certificate pinning, and automate API security tests. Every output shown is a real run against a lab API.

A short, hands-on guide to reverse engineering with AI agents and REA 6.4.0: drive Ghidra from Claude Code, Codex or Cursor, check every claim against evidence, and work through native, Electron, Android, .NET and web targets you are allowed to analyse. Every output shown is a real lab run.

Build a Deep Technical Understanding of How Modern Browsers Reveal Device IdentityBrowser fingerprinting has evolved far beyond traditional cookies and persistent tracking identifiers. Modern websites can derive identifying signals from browser internals, graphics hardware, JavaScript runtimes, network protocols, rendering engines, media subsystems, and operating system characteristics. When combined, these signals can help distinguish devices and correlate browsing sessions even when conventional tracking mechanisms are unavailable.Modern Browser Fingerprinting: Techniques and Code is a comprehensive technical guide to the architecture, mathematics, implementation, and practical applications of browser fingerprinting. It examines how individual signals are generated, how their identifying value can be measured, and how multiple observations can be combined to construct probabilistic device profiles.Combining technical explanations with source code, controlled experiments, telemetry analysis, and statistical methods, the book explores browser fingerprinting across security research, fraud prevention, bot detection, web analytics, and digital privacy. It also examines the limitations of fingerprint-based identification, including measurement noise, browser updates, hardware changes, signal instability, and privacy-preserving countermeasures.

BGP security is more than a set of filters and policies. This book takes a practical, systems-level look at securing routing infrastructure, from RPKI and route filtering to monitoring, automation and incident response, with real configurations, code examples and lessons from incidents that have shaped how the Internet is secured.

Go beyond the basics of Tor and learn how to build private, resilient services on the dark web. From onion routing and v3 onion services to real-world threats and secure deployment, this book gives you the technical knowledge and practical skills to host privacy-critical services without exposing where they live.