Resources-for-Beginner-Bug-Bounty-Hunters

Books 📚

This Section is dedicated to all books related to Hacking, Web Hacking, & Bug Bounty Hunting

NahamSec’s Must Read Picks

• RTFM: Red Team Field Manual v2 by Ben Clark, Nick Downer
• The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws by Dafydd Stuttard, and Marcus Pinto
• The Hacker Playbook 3: Practical Guide To Penetration Testing by Peter Kim
• Bug Bounty Bootcamp by Vickie Li
• Black Hat Python by Justin Seitz and Tim Arnold

Fundamental Books

• Ethical Hacking by Daniel G. Graham
• Foundations of Information Security by Jason Andress
• Penetration Testing by Georgia Weidman
• Metasploit by David Kennedy, Jim O’Gorman, Devon Kearns, and Mati Aharoni
• The Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski

Web Hacking & Bug Bounty

• Hacking APIs by Corey Ball
• Real-World Bug Hunting by Peter Yaworski

Coding for Hacking

• Automate the Boring Stuff with Python, 2nd Edition by Al Sweigart
• Python One-Liners by Christian Mayer
• Black Hat GraphQL by Dolev Farhi, Nick Aleks
• Black Hat Go by Tom Steele, Chris Patten, and Dan Kottmann
• JavaScript for hackers - Learn to think like a hacker by Gareth Heyes

Misc

• Practical Malware Analysis by Michael Sikorski and Andrew Honig
• Practical Social Engineering by Joe Gray
• The Ghidra Book by Chris Eagle and Kara Nance
• Operator Handbook: Red Team + OSINT + Blue Team Reference by Joshua Picolet

---

back to Intro Page