Recommended Reading - This contains a "live" list of recommended/curated books to read or have as part of a library with links to obtain the books. The list is updated as new recommendations are made.
Amazon availability and formats can change. New Amazon links use canonical product URLs without tracking parameters.
-
The Starfish and the Spider: The Unstoppable Power of Leaderless Organizations
-
Team Topologies: Organizing Business and Technology Teams for Fast Flow
-
Network Basics for Hackers: How Networks Work and How They Break
-
Practical Packet Analysis, 3rd Edition: Using Wireshark to Solve Real-World Network Problems
-
Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali
-
The Linux Command Line, 2nd Edition: A Complete Introduction
-
Efficient Linux at the Command Line: Boost Your Command-Line Skills
-
Linux Administration: The Linux Operating System and Command Line Guide for Linux Administrators
-
Network Security with pfSense: Architect, deploy, and operate enterprise-grade firewalls
-
How Linux Works, 3rd Edition: What Every Superuser Should Know
-
Perl Scripting for Windows Security: Live Response, Forensic Analysis, and Monitoring 1st Edition
-
Learning Perl, 8th Edition: Making Easy Things Easy and Hard Things Possible
-
PowerShell Cookbook, 4th Edition: Your Complete Guide to Scripting the Ubiquitous Object-Based Shell
-
Simplifying Regular Expression Using Python: Learn RegEx Like Never Before
-
Black Hat Python, 2nd Edition: Python Programming for Hackers and Pentesters
-
Mastering Python: Write powerful and efficient code using the full range of Python's capabilities
-
The Python Workshop: Write Python code to solve challenging real-world problems
-
Applied Computational Thinking with Python: Algorithm design for complex real-world problems
-
Open Source Projects - Beyond Code: A blueprint for scalable and sustainable open source projects
-
Hands-On Data Structures and Algorithms with Python, Third Edition
-
Learn Python Programming: An in-depth introduction to the fundamentals of Python
-
Clean Code in Python: Develop maintainable and efficient code
-
Software Architecture for Busy Developers: Talk and act like a software architect in one weekend
-
Python GUI Programming with Tkinter: Design and build functional and user-friendly GUI applications
-
Fluent Python, 2nd Edition: Clear, Concise, and Effective Programming
-
Cybersecurity: The Beginner's Guide: A comprehensive guide to getting started in cybersecurity
-
Tribe of Hackers: Cybersecurity Advice from the Best Hackers in the World
-
Agentic Coding with Claude Code: The everyday developer's guide to agentic coding with Claude Code
-
AI Engineering: Building Applications with Foundation Models
-
AI Security Engineering: Design, Build, and Secure Dependable AI Systems
-
Practical AI Security: A Hands-on Guide to Attacking, Defending, and Securing Modern AI Systems
-
Hands-On Cybersecurity for Architects: Plan and design robust security architectures
-
Zero Trust Done Right: A Practitioner’s Guide to Zero Trust Security in the Age of AI
-
Applied Cryptography: Protocols, Algorithms and Source Code in C
-
AWS Certified Solutions Architect Associate All-in-One Exam Guide, Second Edition (Exam SAA-C02)
-
Computer Security Handbook, Set (Volume 1 and 2) 6th Edition
-
The Official (ISC)2 CISSP CBK Reference (Cissp: Certified Information Systems Security Professional)
-
Cryptography And Network Security: Principles and Practices 4th Edition
-
OSINT Techniques: Resources for Uncovering Online Information
-
Security Engineering: A Guide to Building Dependable Distributed Systems 3rd Edition
-
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
-
Cybersecurity First Principles: A Reboot of Strategy and Tactics
-
Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities
-
The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
-
zseano's methodology - Identifying security vulnerabilities in web applications
-
Web Application Security, 2nd Edition: Exploitation and Countermeasures for Modern Web Applications
-
The Art of Social Engineering: Uncover the secrets behind the human dynamics in cybersecurity
-
The Complete Metasploit Guide: Explore effective penetration testing techniques with Metasploit
-
Nmap Network Exploration and Security Auditing Cookbook - Third Edition
-
Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning
-
Tribe of Hackers Red Team: Tribal Knowledge from the Best in Offensive Cybersecurity
-
Hacking APIs: Breaking Web Application Programming Interfaces
-
The Pentester BluePrint: Starting a Career as an Ethical Hacker
-
Evading EDR: The Definitive Guide to Defeating Endpoint Detection Systems
-
Attacking Network Protocols: A Hacker's Guide to Capture, Analysis, and Exploitation
-
Ten Strategies of a World-Class Cybersecurity Operations Center
-
The Art of Memory Forensics: Detecting Malware and Threats in Windows, Linux, and Mac Memory
Dual-licensed, attribution required under both:
- Code & configuration (scripts, rules, decoders, pipelines, configs): Apache License 2.0
- Docs, guides & diagrams (README, docs, diagrams): CC BY 4.0
See LICENSING.md and NOTICE. Credit: Lester E. Nichols III, secdoc.tech.
GitLab CI validates tracked JSON, Python, and shell syntax, then runs a network-independent high-confidence secret scan across full Git history. The public pipeline contains no private registry, runner, credential, CA, or internal-domain reference.