Books & Writing
Books and writing: reading lists, essays, authors, the craft of writing, and literature.
-
Getting Started with Craft Plugin Development (Craft 3) craftquest.io
by Ben Croker/CraftQuest
-
Craft.Podcast craftpodcast.com
A voice for the #CraftCMS community.
-
Craft Cookbook craftcookbook.net
Quick solutions to common Craft CMS problems.
-
StackExchange craftcms.stackexchange.com
Q&A for administrators, end users, developers and designers.
-
craftcms.com/newsletter craftcms.com
-
Why Content Writers Love Craft CMS caffeinecreations.ca
by Sean Smith/Caffeine Creations
-
-
-
The GitHub Actions Worm: Compromising GitHub Repositories Through the Actions Dependency Tree paloaltonetworks.com
A novel GitHub Actions worm exploits the action dependency tree. Attackers compromise an action, then infect dependent actions via branch pushes or tag overwrites, spreading malware recursively.
-
Google cloud.google.com
Advances In Threat Actor Usage Of AI Tools (2025) - Focuses on the increasing use of AI tools by threat actors, highlighting a shift towards deploying novel AI-enabled malware in active operations. Key findings include the emergence of malware families using LLMs for dynamic…
-
Improving LLM Security Against Prompt Injection: AppSec Guidance For Pentesters and Developers blog.includesecurity.com
Using Role Based APIs to Minimize the Risk of Prompt Injection and 13 Guidelines for Writing System Prompts that Minimize the Risk of Prompt Injection.
-
SOCLabs soc-labs.top
A lab for blue teamers and detection engineers, with real threat data and support for popular SIEM query languages, enabling hands-on learning and practice in detection rule writing and threat hunting.
-
Elevation of Privilege (EOP) by Microsoft web.archive.org
A card game based on Microsoft's threat modeling framework "STRIDE" (Spoofing, Tampering etc.). The card deck is available as PDF from Microsoft. Adam Shostack, the author of EoP has also a git repo for EoP.
-
-
-
Writing a PE packer wirediver.com
-
Eureka web.archive.org
Binary static analysis preparation framework implementing a novel binary unpacking strategy based on statistical bigram analysis and coarse-grained execution tracing.
-
A novel framework for image-based malware detection with a deep neural network linkinghub.elsevier.com
(October 2021) :star:
-
Writing a packer dr4k0nia.github.io
-
BitBlaze bitblaze.cs.berkeley.edu
Analysis platform that features a novel fusion of static and dynamic analysis techniques, mixed concrete and symbolic execution, and whole-system emulation and binary instrumentation, all to facilitate state-of-the art research on real security problems.
-
Novel feature extraction, selection and fusion for effective malware family classification arxiv.org
(March 2016)
-
The Art, Science, and Engineering of Fuzzing: A Survey ieeexplore.ieee.org
(2019) - Actually, this document is a paper, but it contains more important and essential content than any other book.
-
The Fuzzing Book fuzzingbook.org
(2019)
-
Locksport International Guide to Lock Picking web.archive.org
Locksport primer in the style of a comic book, with photographs and speech bubbles.
-
Eddie the Wire books dropbox.com
-
Zenduty zenduty.com
Zenduty is a novel incident management platform providing end-to-end incident alerting, on-call management and response orchestration, giving teams greater control and automation over the incident management lifecycle.
-
Car Hacking with Craig Smith softwareengineeringdaily.com
Software Engineering Daily did an amazing episode with Craig Smith, author of the Car Hacking Handbook (above), on hacking into vehicles.
-
Inside Radio: An Attack and Defense Guide amazon.com
This book discusses the security issues in a wide range of wireless devices and systems,Chapter 4 433/315MHz Communication (4.3 4.4 4.5 is about car keys Security)
-
Embedded Networking with CAN and CANopen amazon.com
From 2003, this book fills in gaps in CAN literature and will educate you further on CAN networks and working with embedded systems.
-
Controller Area Network Prototyping with Arduino amazon.com
This book guides you through prototyping CAN applications on Arduinos, which can help when working with CAN on your own car.
-
A Comprehensible Guide to Controller Area Network amazon.com
An older book from 2005, but still a comprehensive guide on CAN buses and networking in vehicles.
-
2016 Car Hacker's Handbook amazon.com
Latest version of the Car Hacker's handbook with updated information to hack your own vehicle and learning vehicle security. For a physical copy as well unlimited PDF, MOBI, and EPUB copies of the book, buy it at No Starch Press. Sections are available online here.
-
智能汽车安全攻防大揭秘 amazon.cn
This book first introduced some basic knowledge of security for automotive R&D personnel, such as encryption and decryption, security authentication, digital signatures, common attack types, and methods. Then it introduced the working principles of some smart cars for security…
-
App Detonator appdetonator.run
Detonate APK binary to provide source code-level details, including app author, signature, build, and manifest information. 3 Analysis/day free quota.
-
The Practice of Network Security Monitoring: Understanding Incident Detection and Response amazon.com
Richard Bejtlich's book on IR.
-
Applied Incident Response amazon.com
Steve Anson's book on Incident Response.
-
Exploit Writing Tutorials for Pentesters web.archive.org
-
Corelan Team's Exploit writing tutorial corelan.be
-
Kali Linux CTF Blueprints packtpub.com
Online book on building, testing, and customizing your own Capture the Flag challenges.
-
The IDA Pro Book amzn.com
-
SecMobi Wiki wiki.secmobi.com
A collection of mobile security resources which including articles, blogs, books, groups, projects, tools and conferences. *
-
The Art of Network Penetration Testing manning.com
Book that is a hands-on guide to running your own penetration test on an enterprise network. (early access, published continuously, final release December 2020)
-
Spring Security in Action, Second Edition manning.com
A book about designing and developing Spring applications that are secure right from the start.
-
Spring Boot in Practice manning.com
Book that is a practical guide which presents dozens of relevant scenarios in a convenient problem-solution-discussion format.. (early access, published continuously, final release fall 2021)
-
Self-Sovereign Identity manning.com
A book about how SSI empowers us to receive digitally-signed credentials, store them in private wallets, and securely prove our online identities. (early access, published continuously, final release fall 2021)
-
Securing DevOps manning.com
A book on Security techniques for DevOps that reviews state of the art practices used in securing web applications and their infrastructure.
-
Secret Key Cryptography manning.com
A book about cryptographic techniques and Secret Key methods. (early access, published continuously, final release Summer 2022)
-
OAuth 2 in Action manning.com
Book that teaches you practical use and deployment of OAuth 2 from the perspectives of a client, an authorization server, and a resource server.
-
Edge Computing Technology and Applications manning.com
A book about the business and technical foundation you need to create your edge computing strategy.
-
Data Privacy manning.com
A book that teaches you to implement technical privacy solutions and tools at scale. (early access, published continuously, final release January 2022)
- next page of items loading…
