Современные веб-атаки и эксплуатация WEB-300, Offensive Security, 2022

Вольный перевод официального руководства Advanced Web Attacks and Exploitation (AWAE) \ WEB-300

Современные веб-приложения представляют собой поверхность атаки, важность которой, несомненно, продолжает расти в течение последнего десятилетия. С улучшением безопасности устройств на границе сети и уменьшением количества успешных атак на них, веб-приложения, наряду с социальной инженерией, вероятно, представляют собой наиболее жизнеспособный способ проникновения через периметр безопасности сети.

Официальной сайт
English version + 2019 version + 2019 video

#book #web

Windows Security Internals: A Deep Dive into Windows Authentication, Authorization, and Auditing by James Forshaw, 2024 (Early Access 2023)

Power up your Windows security skills with expert guidance, in-depth technical insights, and dozens of real-world vulnerability examples from Google Project Zero’s most renowned researcher! Learn core components of the system in greater depth than ever before, and gain hands-on experience probing advanced Microsoft security systems with the added benefit of PowerShell noscripts.

The book is a must-have for anyone needing to understand the Windows operating system’s low-level implementations, whether to discover new vulnerabilities or protect against known ones. Developers, devops, and security researchers will all find unparalleled insight into the operating system’s key elements and weaknesses, surpassing even Microsoft’s official documentation.

#book #windows #defensive

The Language of Deception: Weaponizing Next Generation AI, 1st Edition by Justin Hutchens, Stuart McClure

In the book, you will explore multiple foundational concepts to include the history of social engineering and social robotics, the psychology of deception, considerations of machine sentience and consciousness, and the history of how technology has been weaponized in the past. From these foundations, the author examines topics related to the emerging risks of advanced AI technologies

#book #OSINT #privacy #AI

Security Orchestration, Automation, and Response for Security Analysts. Learn the secrets of SOAR to improve MTTA and MTTR and strengthen your organization’s security posture by Benjamin Kovacevic, 2023

What's inside
(+) An exploration of the SOAR platform's full features to streamline your security operations
(+) Lots of automation techniques to improve your investigative ability
(+) Actionable advice on how to leverage the capabilities of SOAR technologies such as incident management and automation to improve security posture

#book #defensive

How to Find Information About Anyone by Joshua Moses, 2023

Are you looking for an old friend that you have lost touch with? Has a relative met someone off the internet and something doesn’t feel right? Are you that nosy person who must know everything about everyone?

Great news! You have come to the right place. I can teach you the skills that private investigators have utilized for years.

#OSINT

ESP32-C3: Беспроводное приключение: Полное руководство по IoT, Espressif , 2023

Эта книга демонстрирует различные приложения семейства ESP32-C3 –одноядерного микроконтроллера, представляющего собой «систему на кристалле» (SoC) с интегрированными Wi-Fi и Bluetooth 5 (LE). Он обеспечивает необходимый баланс мощности, возможностей ввода-вывода и безопасности, предлагая таким образом оптимальное экономичное решение для подключаемых устройств.

Вы освоите основы разработки проектов интернета вещей (IoT) и настройки среды и выполните практические примеры вплоть до запуска изделия в серийное производство.

#book #hardware