This is a list of books for learning cybersecurity and hacking skills including Penetration Testing and Reverse Engineering.
Sections
2
Penetration Testing
Reverse Engineering
Penetration Testing
These are the books I go back to again and again for Penetration Testing knowledge.
This is a book you will want to carry with you on testing engagements. Concise lists of commands and flags for Windows and Linux.
Rtfm: Red Team Field Manual: Clark, Ben
You're not always going to be breaking stuff; you also need to know how to defend. Small and portable list of valuable commands and configurations.
Blue Team Field Manual (BTFM) Vol II: Advanced Detection
APIs are everywhere behind the scenes of web apps. Great book for learning how to get started with testing them.
Hacking APIs: Breaking Web Application Programming
Don't be fooled by the short length of this book - there are JavaScript pentesting techniques in here that are not widely taught. This is not the same old JS testing!
JavaScript for Hackers: Learn to Think Like a Hacker
And oldie but goodie - this is one I always give a copy of to my interns. This actually gets into the whys and hows of hacking. Even if some of the techniques are outdated, its a foundational read.
Hacking : The Art of Exploitation: Jon Erickson
GraphQL doesn't do things like most other APIs. If you're testing web apps, you're going to want to know how to tackle it.
Black Hat GraphQL: Attacking Next Generation APIs
Code vulnerability analysis is a critical skill because automates solutions often miss exploitable bugs.
The Art of Software Security Assessment
Reverse Engineering
Another oldie but goodie - how to learn reverse engineering from starting with a lab setup to tackling both Linux and Windows binaries.
Practical Malware Analysis: The Hands-On Guide ...
Ghidra is a free, fully featured binary analysis platform. This book will teach you how to use it!
The Ghidra Book: The Definitive Guide
How to identify and reverse Mac malware and defeat anti-analysis techniques