Editor's top Cybersecurity books
3Hacking: The Art of Exploitation, 2nd Edition
Jon Erickson · No Starch Press · 214 pages · ~5 hrs to read
The most rigorous technical hacking book available — covers C programming, network sockets, shellcode, buffer overflows, and heap exploitation from first principles. Dense but formative for engineers who want to understand attacks at the system level.
The Hacker Playbook 3: Practical Guide to Penetration Testing
Peter Kim · Secure Planet0
Real-world penetration testing methodology — covers reconnaissance, exploitation, lateral movement, and exfiltration with actual tools and commands. Practical in a way that academic security texts are not.
Gray Hat Hacking: The Ethical Hacker's Handbook, 6th Edition
Allen Harper, Ryan Linn, Stephen Sims, et al. · McGraw-Hill · 752 pages · ~19 hrs to read
The broadest single-book survey in the field — a dozen practising researchers each cover their specialty across network, IoT, cloud, and mobile attacks with hands-on labs. The closest thing to a one-book cybersecurity curriculum beyond the fundamentals.
All Cybersecurity Books
10Hacking: The Art of Exploitation, 2nd Edition
Jon Erickson · No Starch Press · 214 pages · ~5 hrs to read
The most rigorous technical hacking book available — covers C programming, network sockets, shellcode, buffer overflows, and heap exploitation from first principles. Dense but formative for engineers who want to understand attacks at the system level.
The Hacker Playbook 3: Practical Guide to Penetration Testing
Peter Kim · Secure Planet0
Real-world penetration testing methodology — covers reconnaissance, exploitation, lateral movement, and exfiltration with actual tools and commands. Practical in a way that academic security texts are not.
Threat Modeling: Designing for Security
Adam Shostack · Wiley · 624 pages · ~16 hrs to read
The authoritative guide to threat modelling — the practice of systematically identifying security risks in software design before writing code. Essential reading for security engineers and developers building secure systems.
Security Engineering, 3rd Edition
Ross Anderson · Wiley · 1232 pages · ~31 hrs to read
The most comprehensive academic treatment of security engineering — covers cryptography, access control, network security, and adversarial thinking across every system type. Free PDF of the 2nd edition at the author's website. Indispensable for security architects.
The Web Application Hacker's Handbook, 2nd Edition
Stuttard · Pinto · Wiley0
The technical reference for web application penetration testing — covers SQL injection, XSS, CSRF, authentication attacks, and session management in exhaustive detail. Dated in some areas but still the most thorough web hacking reference.
Black Hat Python, 2nd Edition
Justin Seitz, Tim Arnold · No Starch Press · 216 pages · ~5 hrs to read
Python scripting for offense and defence alike — network sniffers, packet manipulation, and automating the repetitive recon tasks that eat a security analyst's day. As useful for building detection tooling as for red team work.
RTFM: Red Team Field Manual v2
Ben Clark, Nick Downer
A pocket reference of exact command syntax for Linux, Windows, PowerShell, and Active Directory attacks — no theory, just the commands operators run mid-engagement. Teams running internal red exercises keep a copy nearby.
Gray Hat Hacking: The Ethical Hacker's Handbook, 6th Edition
Allen Harper, Ryan Linn, Stephen Sims, et al. · McGraw-Hill · 752 pages · ~19 hrs to read
The broadest single-book survey in the field — a dozen practising researchers each cover their specialty across network, IoT, cloud, and mobile attacks with hands-on labs. The closest thing to a one-book cybersecurity curriculum beyond the fundamentals.
Social Engineering: The Science of Human Hacking
Christopher Hadnagy · Wiley · 327 pages · ~8 hrs to read
The human side of the attack surface that technical training skips — pretexting, elicitation, and manipulation frameworks grounded in real psychology research rather than hacker folklore. Essential context for security awareness programmes and social engineering assessments alike.
Practical Malware Analysis
Michael Sikorski, Andrew Honig · No Starch Press · 802 pages · ~20 hrs to read
Static and dynamic malware analysis in IDA Pro and OllyDbg, including unpacking and anti-debugging techniques. The standard text for SOC analysts and incident responders who need to know what they're looking at once a sample lands on their desk.