Cyber Security — resources

roadmap.sh: https://roadmap.sh/cyber-security

Books

  • The Web Application Hacker’s Handbook (Stuttard & Pinto) — the definitive guide to finding and exploiting web vulnerabilities.
  • Hacking: The Art of Exploitation (Jon Erickson) — builds real intuition for memory, shellcode and how exploits actually work.
  • Practical Malware Analysis (Sikorski & Honig) — hands-on introduction to reverse engineering and analyzing malicious software.
  • CompTIA Security+ Study Guide (Chapple & Seidl) — broad, exam-aligned coverage of the fundamentals across the whole field.

Courses / practice

  • TryHackMe — guided, browser-based rooms that teach offensive and defensive skills from scratch.
  • Hack The Box — realistic vulnerable machines and labs to practice exploitation hands-on.
  • OWASP — Top 10, cheat sheets and tooling; the canonical reference for application security.
  • PortSwigger Web Security Academy — free, high-quality interactive labs on web vulnerabilities by the Burp Suite team.