Books

Detection keeps getting smarter. So do the systems built to avoid it. Evasion Engineering explores the techniques, architectures and design principles behind stealth in modern computing, from operating systems and networks to cloud environments and machine learning. A practical deep dive for security professionals who want to understand how advanced evasion really works.

AI changes the security game. New attack paths demand new ways of thinking. This practical guide shows you how to build, deploy and defend AI systems with confidence using proven patterns, real code and production-tested techniques. Built for engineers who need security that works in the real world.

Your software is only as secure as the path it takes to production. This book walks you through protecting every stage of the software supply chain, from dependencies and builds to deployment and runtime. Learn practical techniques, proven tools and the mindset needed to stop modern supply chain attacks before they spread.

This book is a workshop where things go wrong on the page, in front of you, and then get fixed in code, with the output that proves the fix worked. There's no need to be a security expert to follow along. We'll be moving from the interpreter to the supply chain, from the token to the human clicking Allow, and from a single tool to a whole host of untrusting servers.

Build offensive security tools that go beyond simple scripts. BlackHat Ruby shows how to create scanners, fuzzers, protocol analyzers and exploit frameworks with clean, practical Ruby code. Along the way you'll see how these techniques work, where the legal boundaries are and how defenders spot and stop them.

AI-generated code can look flawless while hiding invented APIs, security gaps and subtle logic errors. This practical guide shows you how to build production-ready analyzers that catch what tests miss, from taint tracking and symbolic execution to custom rules for CI/CD and IDEs.

The Effective Bug Bounty Playbook teaches a systematic approach to finding high-impact vulnerabilities. Through real-world case studies and proven methodologies, you'll learn how to think like an experienced bug bounty hunter and uncover impactful security flaws more consistently.

APIs are the foundation of modern software and one of its most critical attack surfaces. API Security: A Definitive Reference for Building Secure APIs at Scale shows you how to build APIs that are secure by design, resilient under attack, and ready for production.

Here's a shorter version:Go beyond DNS lookups and build a high-performance recursive DNS resolver in Zig from the ground up. Through a hands-on implementation, you will master the protocols, algorithms, and systems programming techniques that power one of the internet's most essential services.

Master AArch64 assembly with a practical guide that covers ARM64 fundamentals, advanced instruction sets, performance optimization, debugging, and systems programming. From your first instructions to writing efficient low-level code, this book provides the knowledge and hands-on examples you need.

Offensive Security with Kali Linux is a practical guide to ethical hacking and penetration testing, taking you from foundational Linux and networking concepts to advanced exploitation techniques. With a strong emphasis on ethical practice and real-world methodology, you'll learn to identify vulnerabilities, assess systems responsibly, and strengthen security using Kali Linux.

Build a source-level debugger in Rust from the ground up while uncovering the operating system, CPU, and compiler mechanisms behind modern debugging. Through hands-on implementation, you'll learn how processes, memory, breakpoints, and DWARF debug information come together to make source-level debugging possible.

Discover how to uncover, preserve, and analyze digital evidence with confidence. From fundamental forensic principles to advanced investigative techniques, this practical guide combines hands-on exercises, real-world case studies, and industry-standard tools to help you conduct modern digital investigations with accuracy and credibility.

In Google Cloud, the compromised system you need often disappears before you can touch it. This practitioner's guide shows you how to pursue attackers through Cloud Audit Logs, IAM, and ephemeral infrastructure instead, with runnable gcloud commands and BigQuery queries for every step.

Master AWS incident response from CloudTrail to courtroom-ready evidence. Learn to acquire EC2 and container evidence, trace identity-based attacks, investigate S3 exfiltration, and build forensic readiness, all through three real-world incidents walked end to end.