…foundations of memory and network exploitation [Security Engineering](https://www.cl.cam.ac.uk/~rja14/book.html) - An overview of a huge array of info sec topics, from "E-policy" to nuclear command security. Advanced Penetration Testing - Focuses on simulating APT attacks, using the author's penetration testing experiences to illustrate each point.
……Chris McNab 写的《Network Security Assessment》。我手里是第二版，内容很棒、很有启发，但确实挺老了。* Peter Yaworski 的《Real-World Bug Hunting》。Web 安全入门必读（101）。读起来很过瘾，也相当实用。* Wil Allsop 的《Advanced Penetration Testing》。虽然过时了，但很有趣。读完这本书你这辈子都不会再碰 Flash 了。* Christopher Hadnagy 的《Social Engineering, The Science of Human Hacking》。一本极有意思的读物。……
…Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read.…
……Chris McNab 写的《Network Security Assessment》。我手里是第二版，内容很棒、很有启发，但确实挺老了。* Peter Yaworski 的《Real-World Bug Hunting》。Web 安全入门必读（101）。读起来很过瘾，也相当实用。* Wil Allsop 的《Advanced Penetration Testing》。虽然过时了，但很有趣。读完这本书你这辈子都不会再碰 Flash 了。* Christopher Hadnagy 的《Social Engineering, The Science of Human Hacking》。一本极有意思的读物。……
…Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read.…
……Chris McNab 写的《Network Security Assessment》。我手里是第二版，内容很棒、很有启发，但确实挺老了。* Peter Yaworski 的《Real-World Bug Hunting》。Web 安全入门必读（101）。读起来很过瘾，也相当实用。* Wil Allsop 的《Advanced Penetration Testing》。虽然过时了，但很有趣。读完这本书你这辈子都不会再碰 Flash 了。* Christopher Hadnagy 的《Social Engineering, The Science of Human Hacking》。一本极有意思的读物。……
…Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read.…
……内存与网络 exploitation 的基础知识；《Security Engineering》（https://www.cl.cam.ac.uk/~rja14/book.html）——全面概述了广泛的 info sec 议题，从“网络政策”到核指挥控制安全无所不包。《Advanced Penetration Testing》——侧重于模拟 APT 攻击，用作者亲身经历的渗透测试案例来拆解各个知识点。
…foundations of memory and network exploitation [Security Engineering](https://www.cl.cam.ac.uk/~rja14/book.html) - An overview of a huge array of info sec topics, from "E-policy" to nuclear command security. Advanced Penetration Testing - Focuses on simulating APT attacks, using the author's penetration testing experiences to illustrate each point.
……Chris McNab 写的《Network Security Assessment》。我手里是第二版，内容很棒、很有启发，但确实挺老了。* Peter Yaworski 的《Real-World Bug Hunting》。Web 安全入门必读（101）。读起来很过瘾，也相当实用。* Wil Allsop 的《Advanced Penetration Testing》。虽然过时了，但很有趣。读完这本书你这辈子都不会再碰 Flash 了。* Christopher Hadnagy 的《Social Engineering, The Science of Human Hacking》。一本极有意思的读物。……
…Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read.…
……Chris McNab 写的《Network Security Assessment》。我手里是第二版，内容很棒、很有启发，但确实挺老了。* Peter Yaworski 的《Real-World Bug Hunting》。Web 安全入门必读（101）。读起来很过瘾，也相当实用。* Wil Allsop 的《Advanced Penetration Testing》。虽然过时了，但很有趣。读完这本书你这辈子都不会再碰 Flash 了。* Christopher Hadnagy 的《Social Engineering, The Science of Human Hacking》。一本极有意思的读物。……
…Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read.…
……Chris McNab 写的《Network Security Assessment》。我手里是第二版，内容很棒、很有启发，但确实挺老了。* Peter Yaworski 的《Real-World Bug Hunting》。Web 安全入门必读（101）。读起来很过瘾，也相当实用。* Wil Allsop 的《Advanced Penetration Testing》。虽然过时了，但很有趣。读完这本书你这辈子都不会再碰 Flash 了。* Christopher Hadnagy 的《Social Engineering, The Science of Human Hacking》。一本极有意思的读物。……
…Assessment by Chris McNab. I have second edition, which is a good and instructive read, but quite outdated. * Real-World Bug Hunting by Peter Yaworski. Web security 101. Good read, and fairly useful. * Advanced Penetration Testing by Wil Allsop. Outdated, but interesting. You will never use flash again after reading this. * Social Engineering, The Science of Human Hacking by Christopher Hadnagy. This is a very interesting read.…