Resources-for-Beginner-Bug-Bounty-Hunters
Books 📚
This Section is dedicated to all books related to Hacking, Web Hacking, & Bug Bounty Hunting
NahamSec's Must Read Picks
- RTFM: Red Team Field Manual v2 by Ben Clark, Nick Downer
- The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws by Dafydd Stuttard, and Marcus Pinto
- The Hacker Playbook 3: Practical Guide To Penetration Testing by Peter Kim
- Bug Bounty Bootcamp by Vickie Li
- Black Hat Python by Justin Seitz and Tim Arnold
Fundamental Books
- Ethical Hacking by Daniel G. Graham
- Foundations of Information Security by Jason Andress
- Penetration Testing by Georgia Weidman
- Metasploit by David Kennedy, Jim O’Gorman, Devon Kearns, and Mati Aharoni
- The Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski
Web Hacking & Bug Bounty
- Hacking APIs by Corey Ball
- Real-World Bug Hunting by Peter Yaworski
Coding for Hacking
- Automate the Boring Stuff with Python, 2nd Edition by Al Sweigart
- Python One-Liners by Christian Mayer
- Black Hat GraphQL by Dolev Farhi, Nick Aleks
- Black Hat Go by Tom Steele, Chris Patten, and Dan Kottmann
- JavaScript for hackers - Learn to think like a hacker by Gareth Heyes
Misc
- Practical Malware Analysis by Michael Sikorski and Andrew Honig
- Practical Social Engineering by Joe Gray
- The Ghidra Book by Chris Eagle and Kara Nance
- Operator Handbook: Red Team + OSINT + Blue Team Reference by Joshua Picolet
back to Intro Page