Justin Seitz

Tim Arnold

Paperback (1 to 2 lbs)

Pennsylvania

Python Programming for Hackers and Pentesters

Fully-updated for Python 3, the second edition of this worldwide bestseller (over 100,000 copies sold) explores the stealthier side of programming and brings you all new strategies for your hacking projects. When it comes to creating powerful and effective hacking tools, Python is the language of choice for most security analysts. In this second edition of the bestselling Black Hat Python, you’ll explore the darker side of Python’s capabilities: everything from writing network sniffers, stealing email credentials, and bruteforcing directories to crafting mutation fuzzers, investigating virtual machines, and creating stealthy trojans. All of the code in this edition has been updated to Python 3.x. You’ll also find new coverage of bit shifting, code hygiene, and offensive forensics with the Volatility Framework as well as expanded explanations of the Python libraries ctypes, struct, lxml, and BeautifulSoup, and offensive hacking strategies like splitting bytes, leveraging computer vision libraries, and scraping websites. You’ll even learn how to: Create a trojan command-and-control server using GitHub Detect sandboxing and automate common malware tasks like keylogging and screenshotting Extend the Burp Suite web-hacking tool Escalate Windows privileges with creative process control Use offensive memory forensics tricks to retrieve password hashes and find vulnerabilities on a virtual machine Abuse Windows COM automation Exfiltrate data from a network undetected When it comes to offensive security, you need to be able to create powerful tools on the fly. Learn how with Black Hat Python.

Black Hat Python, 2nd Edition

5abccb3f-c268-42e7-b54c-1f79f55ea707-1

Sparc Flow

Breaching the Cloud

How to Hack Like a Ghost takes readers deep inside the mind of a hacker as they carry out a fictionalised attack against a tech company, teaching cutting-edge hacking techniques along the way. Readers shadow a hacker as they describe, with detailed code, how they might hack a tech company and escape detection. While the account is fictional, the tech company's vulnerabilities are drawn from real-life weaknesses common in today's corporate, cloud-based systems. By following along and studying the code, the reader learns practical, cutting-edge hacking techniques.

How to Hack Like a Ghost

38f329a4-fe6b-4d6a-ba41-9b63c05aa1ef-1

Breaking Windows

Tag along with a master hacker on a truly memorable attack. From reconnaissance to infiltration, you’ll experience their every thought, frustration, and strategic decision-making first-hand in this exhilarating narrative journey into a highly defended Windows environment driven by AI. Step into the shoes of a master hacker and break into an intelligent, highly defensive Windows environment. You’ll be infiltrating the suspicious (fictional) offshoring company G & S Trust and their hostile Microsoft stronghold. While the target is fictional, the corporation’s vulnerabilities are based on real-life weaknesses in today’s advanced Windows defense systems. You’ll experience all the thrills, frustrations, dead-ends, and eureka moments of the mission first-hand, while picking up practical, cutting-edge techniques for evading Microsoft’s best security systems. The adventure starts with setting up your elite hacking infrastructure complete with virtual Windows system. After some thorough passive recon, you’ll craft a sophisticated phishing campaign to steal credentials and gain initial access. Once inside you’ll identify the security systems, scrape passwords, plant persistent backdoors, and delve deep into areas you don’t belong. Throughout your task you’ll get caught, change tack on a tee, dance around defensive monitoring systems, anddisable tools from the inside. Spark Flow’s clever insights, witty reasoning, andstealth maneuvers teach you to be patient, persevere, and adapt your skills at the drop of a hat. You’ll learn how to: Identify and evade Microsoft security systems like Advanced Threat Analysis,QRadar, MDE, and AMSI Seek out subdomains and open ports with Censys, Python scripts, and other OSINT tools Scrape password hashes using Kerberoasting Plant camouflaged C# backdoors and payloads Grab victims’ credentials with more advanced techniques like reflection anddomain replication Like other titles in the How to Hack series, this book is packed with interesting tricks, ingenious tips, and links to useful resources to give you a fast-paced, hands-on guide to penetrating and bypassing Microsoft security systems.

How to Hack Like a Legend

def86532-681f-4dbc-90b0-3525c2790bbc-1

Fotios Chantzis

Ioannis Stais

Paulino Calderon

Evangelos Deirmentzoglou

Beau Woods

Heavy Paperback (2 to 4 lbs)

The Definitive Guide to Attacking the Internet of Things

Written by all-star security experts, Practical IoT Hacking is a quick-start conceptual guide to testing and exploiting IoT systems and devices. Drawing from the real-life exploits of five highly regarded IoT security researchers, Practical IoT Hacking teaches you how to test IoT systems, devices, and protocols to mitigate risk. The book begins by walking you through common threats and a threat modeling framework. You’ll develop a security testing methodology, discover the art of passive reconnaissance, and assess security on all layers of an IoT system. Next, you’ll perform VLAN hopping, crack MQTT authentication, abuse UPnP, develop an mDNS poisoner, and craft WS-Discovery attacks. You’ll tackle both hardware hacking and radio hacking, with in-depth coverage of attacks against embedded IoT devices and RFID systems. You’ll also learn how to: Write a DICOM service scanner as an NSE module Hack a microcontroller through the UART and SWD interfaces Reverse engineer firmware and analyze mobile companion apps Develop an NFC fuzzer using Proxmark3 Hack a smart home by jamming wireless alarms, playing back IP camera feeds, and controlling a smart treadmill The tools and devices you’ll use are affordable and readily available, so you can easily practice what you learn. Whether you’re a security researcher, IT team member, or hacking hobbyist, you’ll find Practical IoT Hacking indispensable in your efforts to hack all the things REQUIREMENTS: Basic knowledge of Linux command line, TCP/IP, and programming

Practical IoT Hacking

db3f8214-1c9d-4422-9b0a-42cbd2516f77-0

Joe Gray

A Primer for the Ethical Hacker

A guide to hacking the human element. Even the most advanced security teams can do little to defend against an employee clicking a malicious link, opening an email attachment, or revealing sensitive information in a phone call. Practical Social Engineering will help you better understand the techniques behind these social engineering attacks and how to thwart cyber criminals and malicious actors who use them to take advantage of human nature. Joe Gray, an award-winning expert on social engineering, shares case studies, best practices, open source intelligence (OSINT) tools, and templates for orchestrating and reporting attacks so companies can better protect themselves. He outlines creative techniques to trick users out of their credentials, such as leveraging Python scripts and editing HTML files to clone a legitimate website. Once you’ve succeeded in harvesting information about your targets with advanced OSINT methods, you’ll discover how to defend your own organization from similar threats. You’ll learn how to: Apply phishing techniques like spoofing, squatting, and standing up your own web server to avoid detection Use OSINT tools like Recon-ng, theHarvester, and Hunter Capture a target’s information from social media Collect and report metrics about the success of your attack Implement technical controls and awareness programs to help defend against social engineering Fast-paced, hands-on, and ethically focused, Practical Social Engineering is a book every pentester can put to use immediately.

Practical Social Engineering

20a6f942-1dc4-4886-acc7-0f42f8106b54-0

Omar Santos

Heavy Hardcover (2 to 4 lbs)

Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide is Cisco's official, comprehensive self-study resource for this exam. Designed for all exam candidates, it covers every exam objective concisely and logically, with extensive teaching features that promote retention and understanding. You'll find: Pre-chapter quizzes to assess knowledge upfront and focus your study more efficiently Foundation topics sections that explain concepts and configurations, and link theory to practice Key topics sections calling attention to every figure, table, and list you must know Exam Preparation sections with additional chapter review features Final preparation chapter providing tools and a complete final study plan A customizable practice test library This guide offers comprehensive, up-to-date coverage of all CBROPS #200-201 topics related to: Security concepts Security monitoring Host-based analysis Network intrusion analysis Security policies and procedures

Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide

4bdb7fa5-c30a-474d-8fb5-3a63f14f0400-0

Corey J. Ball

Breaking Web Application Programming Interfaces

Hacking APIs is a crash course in web API security testing that will prepare you to penetration-test APIs, reap high rewards on bug bounty programs, and make your own APIs more secure. Hacking APIs is a crash course on web API security testing that will prepare you to penetration-test APIs, reap high rewards on bug bounty programs, and make your own APIs more secure. You’ll learn how REST and GraphQL APIs work in the wild and set up a streamlined API testing lab with Burp Suite and Postman. Then you’ll master tools useful for reconnaissance, endpoint analysis, and fuzzing, such as Kiterunner and OWASP Amass. Next, you’ll learn to perform common attacks, like those targeting an API’s authentication mechanisms and the injection vulnerabilities commonly found in web applications. You’ll also learn techniques for bypassing protections against these attacks. In the book’s nine guided labs, which target intentionally vulnerable APIs, you’ll practice: Enumerating APIs users and endpoints using fuzzing techniques Using Postman to discover an excessive data exposure vulnerability Performing a JSON Web Token attack against an API authentication process Combining multiple API attack techniques to perform a NoSQL injection Attacking a GraphQL API to uncover a broken object level authorization vulnerability By the end of the book, you’ll be prepared to uncover those high-payout API bugs other hackers aren’t finding and improve the security of applications on the web.

Hacking APIs

f1cb6f9d-9305-4445-8c2a-f4db2a992540-0

Robert Nystrom

Software engineers use programming languages every day, but few of us understand how those languages are designed and implemented. Crafting Interpreters gives you that insight by implementing two complete interpreters from scratch. In the process, you'll learn parsing, compilation, garbage collection, and other fundamental computer science concepts. But don't be intimidated! Crafting Interpreters walks you though all of this one step at a time with an emphasis on having fun and getting your hands dirty.

Crafting Interpreters

0fec58a4-d12a-4924-ae4b-cbfcf8216df0-0

Classic of system modeling and simulation 

System Zoo - volumes 1-3

Hartmut Bossel

Front cover slightly deformed, otherwise like new.

A multitude of complex systems and actors pursuing their own agenda shape the dynamics of our world. Better understanding of their actions and interactions is crucial, and can be achieved by a profound knowledge of systems and their properties, and their representation in models allowing simulation of probable behavior. Drawing on his extensive research and teaching experience in modeling and simulation of a wide range of systems - from engineering to social systems and ecosystems - the author presents the fundamental concepts and approaches for understanding and modeling the complex systems shaping the dynamics of our world. The book applies state space analysis and system dynamics to deal with the dynamic processes of "causal systems," discusses information processing approaches for modeling decision processes of "actors" and "agents," and uses aspects of the coevolutionary development of systems in their environment to deal with normative orientation, ethics, and evaluation of policies and long-term development. The concepts are applied in particular to the issue of sustainable development of human society in an evolving world. The book is complemented by a survey of system topics and of models from many fields, and by an extensive bibliography on the many systems-related subjects covered. Hartmut Bossel is Professor Emeritus of environmental systems analysis. He taught for many years at the University of California in Santa Barbara and the University of Kassel, Germany, where he was director of the Center for Environmental Systems Research until his retirement. He holds an engineering degree from the Technical University of Darmstadt, and a Ph.D. degree from the University of California at Berkeley. With a background in engineering, systems science, and mathematical modeling, he has led many research projects and future studies in different countries, developing computer simulation models and decision support systems in the areas of energy supply policy, global dynamics, orientation of behavior, agricultural policy, and forest dynamics and management. He has written numerous books on modeling and simulation of dynamic systems, social change and future paths, and has published widely in the scientific literature in several fields. Bossel is author of a System Zoo containing over one hundred simulation models of diverse systems.

Systems and Models Complexity, Dynamics, Evolution, Sustainability

dec15de4-c2a5-4fa0-9555-93f9d45c82b9-0

Roger T. Dean

The Oxford Handbook of Computer Music provides a state-of-the-art cross-section of the most field-defining topics and debates in the field of computer music today.

The Oxford Handbook of Computer Music

2afa0742-a308-4a0f-af67-9e8e194a8b92-0

Alex McLean

Featuring chapters by emerging and established scholars as well as by leading practitioners in the field, this Handbook both describes the state of algorithmic composition and also set the agenda for critical research on and analysis of algorithmic music.

The Oxford Handbook of Algorithmic Music

f362b5b7-ae2e-4b4d-a85e-97fa1b873ffe-0

Andrew Ford

System dynamics is one of the most widely known and widely used methods of modeling.

Modeling the Environment, Second Edition

1dfebccc-abb5-43f8-84a0-ccbec12aec7a-0

Bruce Silver

Aaron Sayles

The Practitioner's Guide to Decision Modeling with Business Rules

Business Decision Management is a technology-assisted practice of defining, analyzing, and maintaining the decision logic that drives interactions with customers, suppliers, and employees. For many years, subject matter experts created text-based "requirements" and handed them over to programmers for implementation on a Business Rule Engine. The Decision Model and Notation (DMN) now offers a better way: decision logic precisely defined and maintained by subject matter experts themselves, using business-friendly graphical models that can be automatically validated for completeness and consistency. Since DMN is an industry standard, the meaning of a decision model does not depend on the tool used to create it or some consultant's methodology. It's defined by a specification. And best of all, DMN models are directly executable, so What You See Is What You Get. "DMN Method and Style" is your guide to the new standard and to the features and benefits of Business Decision Management. It explains not only the shapes and symbols used to describe end-to-end decision logic in a Decision Requirements Diagram (DRD), but how to properly decompose the top-level decision into a network of supporting decisions and input data. It also shows you how to define the detailed logic of each decision in the diagram using decision tables, literal expressions, and reusable logic blocks called business knowledge models. Like its predecessor "BPMN Method and Style," the book suggests best practices, in the form of style rules and a modeling methodology, for capturing the end-to-end decision logic in a way that is complete, consistent, and clear from the printed DRD and tabular expressions alone.

Dmn Method and Style

044335e6-f7d0-49c3-9e91-c3fea71cb7b3-0

Stephen King

A monumentally devastating plague leaves only a few survivors who, while experiencing dreams of a battle between good and evil, move toward an actual confrontation as they migrate to Boulder, Colorado.

The Stand

dfcf4f89-407c-4e83-8821-f913d0c62bfa-1

Lauren McCarthy

Casey Reas

Ben Fry

Light Paperback (1 lb or less)

Making Interactive Graphics in JavaScript and Processing

With p5.js, you can think of your entire Web browser as your canvas for sketching with code!

Learn programming the fun way--by sketching with interactive computer graphics! Getting Started with p5.js contains techniques that can be applied to creating games, animations, and interfaces. p5.js is a new interpretation of Processing written in JavaScript that makes it easy to interact with HTML5 objects, including text, input, video, webcam, and sound. Like its older sibling Processing, p5.js makes coding accessible for artists, designers, educators, and beginners.

Written by the lead p5.js developer and the founders of Processing, this book provides an introduction to the creative possibilities of today's Web, using JavaScript and HTML.

With Getting Started with p5.js, you'll:

 * Quickly learn programming basics, from variables to objects
 * Understand the fundamentals of computer graphics
 * Create interactive graphics with easy-to-follow projects
 * Learn to apply data visualization techniques
 * Capture and manipulate webcam audio and video feeds in the browser

Getting Started with P5. js

c0e389b9-78e5-48bc-b3fb-1d48f976caaf-1

Jon Duckett

Oversized Paperback (4 to 6 lbs)

Interactive Front-End Web Development

Provides information on how to make more interactive, engaging, and usable Web pages with JavaScript and jQuery, covering core programming concepts in both and such techniques as animation, form validation, and interactive galleries.

JavaScript and JQuery

6f7fc557-545a-4291-9904-5330e81c6a19

Jordan B. Peterson

Hardcover (1 to 2 lbs)

An Antidote to Chaos

"What does everyone in the modern world need to know? [The author's] answer to this most difficult of questions uniquely combines the hard-won truths of ancient tradition with the stunning revelations of cutting-edge scientific research. [The author discusses] discussing discipline, freedom, adventure and responsibility, distilling the world's wisdom into 12 practical and profound rules for life"--

12 Rules for Life

a23c647f-df34-43c7-aeb0-cc463126b789-1

Nassim Nicholas Taleb

Hidden Asymmetries in Daily Life

#1 NEW YORK TIMES BESTSELLER • A bold work from the author of The Black Swan that challenges many of our long-held beliefs about risk and reward, politics and religion, finance and personal responsibility In his most provocative and practical book yet, one of the foremost thinkers of our time redefines what it means to understand the world, succeed in a profession, contribute to a fair and just society, detect nonsense, and influence others. Citing examples ranging from Hammurabi to Seneca, Antaeus the Giant to Donald Trump, Nassim Nicholas Taleb shows how the willingness to accept one’s own risks is an essential attribute of heroes, saints, and flourishing people in all walks of life. As always both accessible and iconoclastic, Taleb challenges long-held beliefs about the values of those who spearhead military interventions, make financial investments, and propagate religious faiths. Among his insights: • For social justice, focus on symmetry and risk sharing. You cannot make profits and transfer the risks to others, as bankers and large corporations do. You cannot get rich without owning your own risk and paying for your own losses. Forcing skin in the game corrects this asymmetry better than thousands of laws and regulations. • Ethical rules aren’t universal. You’re part of a group larger than you, but it’s still smaller than humanity in general. • Minorities, not majorities, run the world. The world is not run by consensus but by stubborn minorities imposing their tastes and ethics on others. • You can be an intellectual yet still be an idiot. “Educated philistines” have been wrong on everything from Stalinism to Iraq to low-carb diets. • Beware of complicated solutions (that someone was paid to find). A simple barbell can build muscle better than expensive new machines. • True religion is commitment, not just faith. How much you believe in something is manifested only by what you’re willing to risk for it. The phrase “skin in the game” is one we have often heard but rarely stopped to truly dissect. It is the backbone of risk management, but it’s also an astonishingly rich worldview that, as Taleb shows in this book, applies to all aspects of our lives. As Taleb says, “The symmetry of skin in the game is a simple rule that’s necessary for fairness and justice, and the ultimate BS-buster,” and “Never trust anyone who doesn’t have skin in the game. Without it, fools and crooks will benefit, and their mistakes will never come back to haunt them.”

Skin in the Game

b4832f78-703d-4e42-9359-cc4cda4f107d-1

Scott Berkun

Big Ideas for Curious Minds

"These essays were meant to challenge minds ... a collection of previously published works ... selected for this book because they fit the theme of intelligent provocation"--Preface

Mindfire

d7839115-dfeb-4b70-ad36-afe59120675a-0

David H. Wolpert

The Energetics of Computing in Life and Machines

88632f9d-6375-4a2b-8ffd-10a1b7ebd67f-0

Peter Turchin

Geerat J. Vermeij

Geoffrey B. West

Laura Egley Taylor

Tim Taylor

David Christian

Douglas H. Erwin

Murray Gell-Mann

Geoffrey H. Harpham

J. R. McNeill

Fred. Spier

What is history anyway? Most people would say it¿s what happened in the past, but how far back does the past extend? To the first written sources? To what other forms of evidence reveal about pre-literate civilizations? What does that term mean¿an empire, a nation, a city, a village, a family, a lonely hermit somewhere? Why stop with people: shouldn¿t history also comprise the environment in which they exist, and if so on what scale and how far back? And as long as we¿re headed in that direction, why stop with the earth and the solar system? Why not go all the way back to the Big Bang itself? There¿s obviously no consensus on how to answer these questions, but even asking them raises another set of questions about history: who should be doing it? Traditionally trained historians, for whom archives are the only significant source? Historians willing to go beyond archives, who must therefore rely on, and to some extent themselves become, psychologists, sociologists, anthropologists, archeologists? But if they¿re also going to take environments into account, don¿t they also have to know something about climatology, biology, paleontology, geology, and even astronomy? And how can they do that without knowing some basic physics, chemistry, and mathematics? This inaugural volume of the SFI Press (the new publishing arm of the Santa Fe Institute) attempts to address these questions via thoughtful essays on history written by distinguished scholars¿including Nobel laureate Murray Gell-Mann¿from across a wide range of fields.

History, Big History, and Metahistory

e8108978-91e7-4dba-b8be-381ad4cfc1b8-0

David C. Krakauer

Worlds Hidden in Plain Sight

7c8a4d6a-6bd4-47f3-b7e6-813b70bffc0d-0

David Pines

Proceedings of the Founding Workshops of the Santa Fe Institute

Emerging Syntheses in Science

2d3a93d3-fecb-49a9-bfbc-aac38a772a06-0

Regular Books

Browse by categories

Justin Seitz; Tim Arnold

Black Hat Python, 2nd Edition

Sparc Flow

How to Hack Like a Ghost

Sparc Flow

How to Hack Like a Legend

Fotios Chantzis; Ioannis Stais; Paulino Calderon; Evangelos Deirmentzoglou; Beau Woods

Practical IoT Hacking

Joe Gray

Practical Social Engineering

Omar Santos

Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide

Corey J. Ball

Hacking APIs

Robert Nystrom

Crafting Interpreters

Hartmut Bossel

System Zoo - volumes 1-3

Hartmut Bossel

Systems and Models Complexity, Dynamics, Evolution, Sustainability

Roger T. Dean

The Oxford Handbook of Computer Music

Alex McLean

The Oxford Handbook of Algorithmic Music

Andrew Ford

Modeling the Environment, Second Edition

Bruce Silver; Aaron Sayles

Dmn Method and Style

Stephen King

The Stand

Lauren McCarthy; Casey Reas; Ben Fry

Getting Started with P5. js

Jon Duckett

JavaScript and JQuery

Jordan B. Peterson

12 Rules for Life

Nassim Nicholas Taleb

Skin in the Game

Scott Berkun

Mindfire

David H. Wolpert

The Energetics of Computing in Life and Machines

Peter Turchin; Geerat J. Vermeij; Geoffrey B. West; Laura Egley Taylor; Tim Taylor; David Christian; Douglas H. Erwin; Murray Gell-Mann; Geoffrey H. Harpham; J. R. McNeill; Fred. Spier

History, Big History, and Metahistory

David C. Krakauer

Worlds Hidden in Plain Sight

David Pines

Emerging Syntheses in Science

Get The App