🕵️
VeryLazyTech
📜 Medium🛒 My Shop👾 Github📩 Telegram 📺 YouTube✖ Twitter
  • 🕵️Welcome!
    • VeryLazyTech
    • Support VeryLazyTech
      • 👾 GitHub
      • 📜 Medium
      • ☕ My Shop
      • 📺 YouTube
      • ✖ Twitter
      • 📩 Telegram
  • 🛡️ Vulnerabilities and Exploits
    • CVE - POC
      • Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692
      • POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal
      • POC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolf
      • Telerik Auth Bypass CVE-2024-4358
      • Check Point Security Gateways Information Disclosure - CVE-2024-24919
      • CVE-2024-23897 - Jenkins File Read Vulnerability
      • CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS
      • POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE)
      • CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary
      • CVE-2024-50623- Cleo Unrestricted file upload and download
      • POC - WordPress File Upload plugin, in the wfu_file_downloader.php file before version <= 4.24.11
      • POC - Remote and unauthenticated attacker can send crafted HTTP requests to RCE - cve-2025-3248
      • POC - CVE-2025–2539 File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File
      • POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability
  • 🕵️‍♂️Dorks
    • GitHub Dorks
    • Google Dork Online Tool
  • 📚 Resources
    • Top Hacking Books for 2024: FREE and Paid
    • How to Study for OSCP with the PWK Book PDF
    • Top 20 phishing tools to use in 2024
    • Top 8 Bug Bounty Books for 2025: Must-Reads for Ethical Hackers
    • Top Hacking Tools and Skills You Need to Learn in 2025
    • Offensive Cloud
    • Penetration Testing & Hacking Tools List
    • Top Cybersecurity Books by Topic
  • The Ultimate Penetration Testing Methodology (2025 Edition)
  • 🕸️Pentesting Web
    • Client Side Template Injection (CSTI)
    • Identify a Server’s Origin IP
    • 2FA/MFA/OTP Bypass
  • IDOR
  • Open Redirect
  • Subdomain Takeover
  • Penetration Testing WiFi Networks
  • Client-Side Path Traversal
  • Clickjacking
  • Command Injection
  • JWT Vulnerabilities
  • Bypass rating limit
  • CORS - Misconfigurations & Bypass
  • LDAP Injection
  • File upload vulnerabilities
  • Content Security Policy (CSP) bypass
  • Brute Force - Services, web, local, tools & wordlists
  • 🐧Linux
    • Practical Linux Commands
    • Bypassing Bash Restrictions - Rbash
    • Privilege escalation - Linux
  • Linux Environment Variables
  • 🪟Windows
    • Active Directory Methodology
    • Antivirus (AV) Bypass
  • 🌐Network Pentesting
    • FTP - Port 21
    • SSH- Port 22
    • Telnet - Port 23
    • SMTP/s - Port 25,465,587
    • WHOIS - Port 43
    • TACACS+ - Port 49
    • DNS - Port 53
    • TFTP/Bittorrent-tracker - Port 69/UDP
    • Finger - Port 79
    • Web - Port 80,443
    • Kerberos - Port 88
    • POP - Port 110/995
    • Portmapper - Port 111/TCP/UDP
    • Ident - Port 113
    • NTP - Port 123/UDP
    • MSRPC - Port 135, 539
    • NetBios - Port 137,138,139
    • SMB - Port 139 445
    • IMAP - Port 143, 993
    • SNMP - Ports 161, 162, 10161, and 10162/UDP
    • IRC - Ports 194,6667,6660-7000
    • Check Point Firewall - Port 264
    • LDAP - Ports 389, 636, 3268, 3269
    • IPsec/IKE VPN - Port 500/UDP
    • Modbus - Port 502
    • Rexec - Port 512
    • Rlogin - Port 513
    • Rsh - Port 514
    • Line Printer Daemon (LPD) - Port 515
    • Apple Filing Protocol (AFP) - PORT 548
    • RTSP - Port 554, 8554
    • IPMI - Port 623/UDP/TCP
    • Internet Printing Protocol (IPP) - Port 631
    • EPP - Port 700
    • Rsync - Port 873
    • Rusersd Service - Port 1026
    • Socks - Port 1080
    • Java RMI - RMI-IIOP - Port 1098/1099/1050
    • MSSQL (Microsoft SQL Server) - Port 1433
    • Oracle TNS Listener - Port 1521,1522-1529
  • PPTP - Port 1723
  • MQTT (Message Queuing Telemetry Transport) - Port 1883
  • Compaq HP Insight Manager - Port 2301, 2381
  • NFS Service - Port 2049
  • Docker - Port 2375,2376
  • Squid - Port 3128
  • iScsi - Port 3260
  • SAPRouter - Port 3299
  • 😎Post-exploitation
    • File Transfer Cheatsheet: Windows and Linux
  • 🧑‍🔧Technical guides
    • Kali Linux - Installation
Powered by GitBook
On this page
  • Penetration Testing Books
  • Hackers Handbook Series
  • Defensive Development
  • Linux & Network Analysis Books
  • Reverse Engineering Books
  • Malware Analysis Books
  • Windows Books
  • Social Engineering Books
  • OSINT & Privacy Books
  • Web & API Hacking Books
  • Scripting & Programming Books

Was this helpful?

  1. 📚 Resources

Top Cybersecurity Books by Topic

Looking for the best cybersecurity books? This list covers ethical hacking, OSINT, red teaming, malware analysis, and more—organized by topic for easy access.

Support VeryLazyTech 🎉
  • Become VeryLazyTech member! 🎁

  • Follow us on:

    • ✖ Twitter @VeryLazyTech.

    • 👾 Github @VeryLazyTech.

    • 📜 Medium @VeryLazyTech.

    • 📺 YouTube @VeryLazyTech.

    • 📩 Telegram @VeryLazyTech.

    • 🕵️‍♂️ My Site @VeryLazyTech.

  • Visit our shop for e-books and courses. 📚

Penetration Testing Books

  • Metasploit, 2nd Edition 2nd Edition by David Kennedy (Author), Mati Aharoni (Author), Devon Kearns (Author), Jim O'Gorman (Author), 2025

    • Amazon Link

  • Black Hat Python, 2nd Edition: Python Programming for Hackers and Pentesters, 2021

    • Buy Now

    • Amazon Link

  • Ethical Hacking: A Hands-on Introduction to Breaking In, 2021

    • Buy Now

    • Amazon Link

  • Bug Bounty Bootcamp, 2021

    • Buy Now

    • Amazon Link

  • Real-World Bug Hunting: A Field Guide to Web Hacking, 2021

    • Buy Now

    • Amazon Link

  • Red Team Development and Operations: A Practical Guide (2021)

    • Buy Now

    • Amazon Link

  • Red Team Field Manual V2 (2022)

    • Buy Now

    • Amazon Link

  • Tribe of Hackers Red Team: Tribal Knowledge from the Best in Offensive Cybersecurity (2020)

    • Buy Now

    • Amazon Link

  • Operator Handbook: Red Team + OSINT + Blue Team Reference (2020)

    • Buy Now

    • Amazon Link

  • The Pentester Blueprint: Starting a Career as an Ethical Hacker, 2020

    • Buy Now

    • Amazon Link

  • Hands-on Hacking: Become an Expert at Next-Gen Penetration Testing and Purple Teaming, 2020

    • Buy Now

    • Amazon Link

  • The Hacker Playbook 3 by Peter Kim, 2018

    • Buy Now

    • Amazon Link

  • Advanced Penetration Testing by Wil Allsopp, 2017

    • Amazon Link

  • Advanced Penetration Testing for Highly-Secured Environments by Lee Allen, 2016

    • Amazon Link

  • Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman, 2014

    • Amazon Link

  • Rtfm: Red Team Field Manual by Ben Clark, 2014

    • Buy Now

    • Amazon Link

  • Black Hat Python: Python Programming for Hackers and Pentesters by Justin Seitz, 2014

    • Amazon Link

  • Advanced Persistent Threat Hacking: The Art and Science of Hacking Any Organization by Tyler Wrightson, 2014

    • Amazon Link

  • The Basics of Hacking and Penetration Testing by Patrick Engebretson, 2013

    • Amazon Link

  • Professional Penetration Testing by Thomas Wilhelm, 2013

    • Amazon Link

  • Violent Python by TJ O’Connor, 2012

    • Amazon Link

  • Metasploit: The Penetration Tester’s Guide by David Kennedy et al., 2011

    • Amazon Link

  • Bug Hunter’s Diary by Tobias Klein, 2011

    • Amazon Link

  • Unauthorized Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp, 2010

    • Amazon Link

  • The Art of Exploitation by Jon Erickson, 2008

    • Amazon Link

  • Fuzzing: Brute Force Vulnerability Discovery by Michael Sutton et al., 2007

    • Amazon Link

Hackers Handbook Series

  • Car Hacker’s Handbook by Craig Smith, 2016

    • Buy Now

    • Amazon Link

  • The Mobile Application Hackers Handbook by Dominic Chell et al., 2015

    • Amazon Link

  • The Browser Hackers Handbook by Wade Alcorn et al., 2014

    • Amazon Link

  • Android Hackers Handbook by Joshua J. Drake et al., 2014

    • Amazon Link

  • iOS Hackers Handbook by Charlie Miller et al., 2012

    • Amazon Link

  • The Web Application Hackers Handbook 2 by D. Stuttard, M. Pinto, 2011

    • Buy Now

    • Amazon Link

  • The Mac Hacker’s Handbook by Charlie Miller & Dino Dai Zovi, 2009

    • Amazon Link

  • The Shellcoders Handbook by Chris Anley et al., 2007

    • Buy Now

    • Amazon Link

  • The Database Hacker’s Handbook, David Litchfield et al., 2005

    • Amazon Link

Defensive Development

  • Holistic Info-Sec for Web Developers (Fascicle 0)

    • Amazon Link

  • Holistic Info-Sec for Web Developers (Fascicle 1)

    • Amazon Link

Linux & Network Analysis Books

  • Network Basics for Hackers: How Networks Work and How They Break (2023)

    • Buy Now

    • Amazon Link

  • Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali (2018)

    • Buy Now

    • Amazon Link

  • Practical Packet Analysis 3 by Chris Sanders, 2017

    • Amazon Link

  • Wireshark 101: Essential Skills for Network Analysis , 2017

    • Amazon Link

  • Network Forensics: Tracking Hackers through Cyberspace by Sherri Davidoff & Jonathan Ham, 2012

    • Amazon Link

  • Practical Packet Analysis 2 by Chris Sanders, 2011

    • Amazon Link

  • Nmap Network Scanning by Gordon Fyodor Lyon, 2009

    • Amazon Link

  • Practical Packet Analysis by Chris Sanders, 2007

    • Amazon Link

Reverse Engineering Books

  • Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition 6th Edition by HARPER, 2022

    • Buy Now

    • Amazon Link

  • Practical Reverse Engineering by Bruce Dang et al., 2014

    • Amazon Link

  • The IDA Pro Book, 2nd Edition: The Unofficial Guide to the World's Most Popular Disassembler Second Edition by Chris Eagle, 2011

    • Amazon Link

  • The IDA Pro Book by Chris Eagle, 2011

    • Amazon Link

  • Hacking the Xbox by Andrew Huang, 2003

    • Amazon Link

Malware Analysis Books

  • The Art of Memory Forensics by Michael Hale Ligh et al., 2014

    • Amazon Link

  • Practical Malware Analysis by Michael Sikorski & Andrew Honig, 2012

    • Amazon Link

  • Malware Analyst’s Cookbook and DVD by Michael Hale Ligh et al., 2010

    • Amazon Link

Windows Books

  • Windows Security Internals with PowerShell (2022)

    • Buy Now

    • Amazon Link

  • Windows Internals, Part 2 (Developer Reference) 7th Edition by Andrea Allievi, Mark Russinovich, Alex Ionescu, David Solomon, 2021

    • Amazon Link

  • Windows Internals by Mark Russinovich et al., 2017

    • Amazon Link

  • Troubleshooting with the Windows Sysinternals Tools by Mark Russinovich & Aaron Margosis, 2016

    • Amazon Link

Social Engineering Books

  • The Social Engineer’s Playbook: A Practical Guide to Pretexting (2015)

    • Buy Now

    • Amazon Link

  • Social Engineering in IT Security: Tools, Tactics, and Techniques by Sharon Conheady, 2014

    • Amazon Link

  • Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014

    • Amazon Link

  • Ghost in the Wires by Kevin D. Mitnick & William L. Simon, 2011

    • Amazon Link

  • Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010

    • Amazon Link

  • No Tech Hacking by Johnny Long & Jack Wiles, 2008

    • Amazon Link

  • The Art of Intrusion by Kevin D. Mitnick & William L. Simon, 2005

    • Amazon Link

  • The Art of Deception by Kevin D. Mitnick & William L. Simon, 2002

    • Amazon Link

OSINT & Privacy Books

  • Open Source Intelligence Techniques: Resources for Searching and Analyzing Online Information (2023)

    • Buy Now

    • Amazon Link

  • OSINT Techniques: Resources for Uncovering Online Information (2023)

    • Buy Now

    • Amazon Link

  • Hack The World with OSINT (Hackers Gonna Hack) (2023)

    • Buy Now

    • Amazon Link

  • Extreme Privacy: What It Takes to Disappear (2021)

    • Buy Now

    • Amazon Link

Web & API Hacking Books

  • Black Hat GraphQL: Attacking Next Generation APIs (2023)

    • Buy Now

    • Amazon Link

  • Hacking APIs: Breaking Web Application Programming Interfaces (2022)

    • Buy Now

    • Amazon Link

  • The Web Application Hacker’s Handbook 2 (2011)

    • Buy Now

    • Amazon Link

Scripting & Programming Books

  • Black Hat Bash: Creative Scripting for Hackers and Pentesters (2023)

    • Buy Now

    • Amazon Link

  • Windows Security Internals with PowerShell (2022)

    • Buy Now

    • Amazon Link

  • Black Hat Python, 2nd Edition: Python Programming for Hackers and Pentesters, 2021

    • Buy Now

    • Amazon Link

  • Black Hat Python: Python Programming for Hackers and Pentesters by Justin Seitz, 2014

    • Amazon Link

  • Violent Python by TJ O’Connor, 2012

    • Amazon Link

Learn & practice For the OSCP.

Support VeryLazyTech 🎉
  • Become VeryLazyTech member! 🎁

  • Follow us on:

    • ✖ Twitter @VeryLazyTech.

    • 👾 Github @VeryLazyTech.

    • 📜 Medium @VeryLazyTech.

    • 📺 YouTube @VeryLazyTech.

    • 📩 Telegram @VeryLazyTech.

    • 🕵️‍♂️ My Site @VeryLazyTech.

  • Visit our shop for e-books and courses. 📚

PreviousPenetration Testing & Hacking Tools ListNextThe Ultimate Penetration Testing Methodology (2025 Edition)

Last updated 2 months ago

Was this helpful?