"Knowledge is the most powerful weapon in cybersecurity."
This repository is a one-stop library for anyone passionate about Cybersecurity, Ethical Hacking, Penetration Testing, Network Defense, Bug Bounty, Red Teaming, Blue Teaming, OSINT, Digital Forensics, and much more. Whether you're a beginner breaking into cybersecurity or a seasoned professional sharpening your skills — this collection has something for everyone.
📖 Click on any book name to open/download it directly!
- 🎯 About
- 💡 Why I Made This
- 🐛 Bug Bounty & Web Security
- 💀 Ethical Hacking & Penetration Testing
- 🏴 Red Teaming
- 🔵 Blue Team & SOC
- 🐉 Kali Linux
- 🌐 Network Security & Defense
- 🦠 Malware, Threats & Incident Response
- 🏛️ Frameworks & Compliance (NIST, OWASP, MITRE)
- 🤖 AI & Machine Learning in Cybersecurity
- 📜 Certifications (CEH, OSCP, CISSP, CHFI, CompTIA, CISM)
- 🐧 Linux & Bash
- 💻 Programming for Security
- 🕵️ OSINT & Social Engineering
- 🔧 Security Tools & Frameworks
- 🔐 Cryptography & Blockchain
- 📊 Career, Strategy & Miscellaneous
- ⭐ Star History
- 💖 Support This Project
- 🤝 Contributing
- 📬 Connect
Welcome to Security-Books — a carefully curated, categorized collection of 160+ cybersecurity PDFs covering everything from foundational concepts to advanced exploitation techniques.
| Feature | Description |
|---|---|
| 📚 160+ Resources | One of the largest open collections of security books on GitHub |
| 🏷️ Fully Categorized | Every book organized into clear, logical categories |
| 🔗 Clickable Links | Click any book name to open/download it instantly |
| 🎓 All Skill Levels | From absolute beginner to advanced red teamer |
| 🆓 100% Free | Open access for the entire cybersecurity community |
| 🔄 Regularly Updated | New resources added frequently |
"I believe cybersecurity knowledge should be accessible to everyone — not locked behind paywalls."
When I started my journey in cybersecurity, I spent countless hours searching the internet for quality learning material. Books were scattered across random websites, some behind paywalls, others buried in obscure forums. I wished there was one single place where I could find everything I needed — organized, categorized, and ready to read.
So I built it myself.
This repository is the resource I wish I had when I started. It's for:
- 🎓 Students who can't afford expensive textbooks but are hungry to learn
- 💼 Career switchers who need a solid foundation before their first security role
- 🔬 Researchers who need quick access to reference material
- 🏆 Certification seekers preparing for CEH, OSCP, CISSP, CompTIA, and more
- 🌍 The global community — especially those in regions where access to quality resources is limited
I've personally gone through many of these books during my own CEH journey and professional experience. Every book here has been handpicked because it provides real, practical value.
My goal is simple: Remove barriers to cybersecurity education and help the next generation of security professionals get started — no matter where they are or what their background is.
Master the art of finding vulnerabilities and earning bounties.
| # | Book | Description |
|---|---|---|
| 1 | 📕 Bug Bounty Bootcamp | Complete bootcamp for aspiring bug bounty hunters |
| 2 | 📕 Bug Bounty Checklist for Web App | Essential checklist for web application testing |
| 3 | 📕 Bug Bounty Hunting | Comprehensive guide to bug bounty hunting |
| 4 | 📕 Bug Bounty Methodology | Step-by-step methodology for finding bugs |
| 5 | 📕 Bug Bounty PlayBook | Strategic playbook for bounty programs |
| 6 | 📕 Bug Bounty Playbook (Ghostlulz) | Ghostlulz's legendary bug bounty playbook |
| 7 | 📕 Bug Bounty Playbook V2 | Updated V2 edition of the bug bounty playbook |
| 8 | 📕 Bug Bounty Roadmap | Complete roadmap from beginner to pro |
| 9 | 📕 Bug Bounty Hunting Essentials | Essential skills for successful bug bounty hunting |
| 10 | 📕 Bug Bounty Tools Collection | Curated collection of bug bounty tools |
| 11 | 📕 Awesome Bugbounty Writeups | Collection of amazing bug bounty writeups |
| 12 | 📕 A Bug Hunter's Diary | Real-world bug hunting stories & techniques |
| 13 | 📕 Bug Hunting Guide | Practical guide to hunting bugs |
| 14 | 📕 Big Bounty | Advanced bounty hunting strategies |
| 15 | 📕 Top 100 Bugs | Top 100 most common bugs & vulnerabilities |
| 16 | 📕 Web Application Hacking | Web app exploitation techniques |
| 17 | 📕 Web Application Pen Test | Web application penetration testing |
| 18 | 📕 Web Application Testing | Comprehensive web testing guide |
| 19 | 📕 Web Application Penetration Testing | Complete web app pentesting methodology |
| 20 | 📕 Web Testing Security Guide | Security-focused web testing |
| 21 | 📕 Web Hacking Arsenal | Web hacking tools & arsenal by Rafay Baloch |
| 22 | 📕 Web Hacking Arsenal — A Practical Guide to Modern Web Pentesting | Modern web pentesting practical guide |
| 23 | 📕 Web Hacking Arsenal — Practical Guide (Standalone) | Standalone edition by Rafay Baloch |
| 24 | 📕 WebPenTestKali | Web penetration testing with Kali |
| 25 | 📕 100 Web PenTesting Checklist | 100-point web penetration testing checklist |
| 26 | 📕 API Security Threats | Understanding and mitigating API vulnerabilities |
| 27 | 📕 Advance XSS | Advanced Cross-Site Scripting techniques |
| 28 | 📕 XSS Cheat Sheet | Quick reference for XSS payloads & bypasses |
| 29 | 📕 Types of Sensitive Information | Identifying & classifying sensitive data |
| 30 | 📕 eLearnSecurity eWPT Notes | eWPT certification study notes |
| 31 | 📕 Web Agents Inject | Web agent injection techniques |
| 32 | 📕 Pentesting With Burp Suite | Master Burp Suite for web testing |
Learn to think like a hacker — ethically.
| # | Book | Description |
|---|---|---|
| 1 | 📗 Learn Ethical Hacking from Scratch | Start your ethical hacking journey |
| 2 | 📗 Ethical Hacking and Penetration Testing Guide | Comprehensive guide by Rafay Baloch |
| 3 | 📗 Certified Ethical Hacker (CEH) v3.0 Official Course | Official CEH course material |
| 4 | 📗 CEH v03 — Ethical Hacking & Countermeasures: Web Apps & Data | CEH web application module |
| 5 | 📗 CEH Brochure | CEH certification overview |
| 6 | 📗 GenAI Ethical Hacking | Generative AI meets ethical hacking |
| 7 | 📗 Hacking Project To Get Started | Hands-on hacking projects |
| 8 | 📗 Coding for Penetration Testers | Building better pentesting tools |
| 9 | 📗 Network Pen Test | Network penetration testing |
| 10 | 📗 AD Pen Test | Active Directory penetration testing |
| 11 | 📗 Pentest Handwriting Notes | Hand-written pentesting notes & cheatsheets |
| 12 | 📗 Gray Hat Hacking (4th Edition) | Advanced gray hat techniques |
| 13 | 📗 Hacking Exposed Linux (3rd Edition) | Linux exploitation techniques |
| 14 | 📗 Hacking Gmail (ExtremeTech) | Email exploitation techniques |
| 15 | 📗 AC DER BY PASS TECH.HACKERS | Access control bypass techniques |
| 16 | 📗 Offensive Security Professional Overview Survival | OffSec professional guide |
| 17 | 📗 Week 1 — Intro to Pentesting | Beginner-friendly intro to penetration testing |
Simulate real-world adversaries to strengthen defenses.
| # | Book | Description |
|---|---|---|
| 1 | 📙 Red Teaming Handbook | Comprehensive red team operations guide |
| 2 | 📙 What Can Generative AI Red Teaming Learn from Cyber Red Teaming | AI-powered red teaming insights |
Defend, detect, and respond to cyber threats.
| # | Book | Description |
|---|---|---|
| 1 | 📘 100 Security Operation Center Tools | Essential SOC tools reference |
| 2 | 📘 Blue Team Cheat Sheet | Quick reference for blue teamers |
| 3 | 📘 Detection Tool | Threat detection tools & techniques |
| 4 | 📘 Windows Event Log Analysis | Master Windows event log forensics |
| 5 | 📘 Ransomware Defense Report | Defending against ransomware attacks |
The ultimate penetration testing distribution — mastered.
| # | Book | Description |
|---|---|---|
| 1 | 🐧 Kali Linux For Hackers | Kali Linux hacking essentials |
| 2 | 🐧 Kali Wireless | Wireless hacking with Kali |
| 3 | 🐧 Kali Advanced Pentest | Advanced penetration testing with Kali |
| 4 | 🐧 Kali Linux | Core Kali Linux guide |
| 5 | 🐧 Kali Linux CookBook | Recipes for everyday Kali usage |
| 6 | 🐧 Kali Linux CTF | Capture The Flag challenges with Kali |
| 7 | 🐧 Kali Linux Revealed | Official Kali Linux documentation |
| 8 | 🐧 Kali Network Scanning | Network scanning techniques |
| 9 | 🐧 Kali Social Engineering | Social engineering with Kali |
| 10 | 🐧 Kali Tools List with Short Description | Complete Kali tools reference |
| 11 | 🐧 CTF Cheat Sheet | Capture The Flag competition cheat sheet |
| 12 | 🐧 The Ultimate Guide to Flag Hunting | Complete guide to CTF flag hunting strategies |
Protect the backbone of every organization.
| # | Book | Description |
|---|---|---|
| 1 | 🌍 Network Attacks and Exploitation | Understanding network attack vectors |
| 2 | 🌍 Network Defense: Fundamentals & Protocols | Core network defense concepts |
| 3 | 🌍 Network Defense: Perimeter Defense Mechanisms | Perimeter security strategies |
| 4 | 🌍 Network Defense: Security & Vulnerability Assessment | Vulnerability assessment techniques |
| 5 | 🌍 Network Defense: Security Policy & Threats | Security policies and threat modeling |
| 6 | 🌍 Network Defense: Securing & Troubleshooting Network OS | Securing network operating systems |
| 7 | 🌍 Network Performance and Security | Balancing performance with security |
| 8 | 🌍 Network Safety Certification | Network safety certification guide |
| 9 | 🌍 Network Security Through Data | Data-driven network security |
| 10 | 🌍 Hacking Exposed: Network Security Secrets & Solutions | Classic network security reference |
| 11 | 🌍 Network Security with OpenSSL | OpenSSL for secure communications |
| 12 | 🌍 Attacks on TCP | TCP/IP attack vectors and defenses |
| 13 | 🌍 CISCO SD-WAN & NAT — Part 1 | Cisco networking & SD-WAN |
| 14 | 🌍 Firewall Checklist | Essential firewall configuration checklist |
Understand the enemy to defeat it.
| # | Book | Description |
|---|---|---|
| 1 | 🔴 Common Malware Types | Classification of malware families |
| 2 | 🔴 Document Malware | Document-based malware analysis |
| 3 | 🔴 CyberCrime Espionage | Cyber espionage tactics & defense |
| 4 | 🔴 Common Sense Guide to Mitigating Insider Threats, v7 | Insider threat mitigation guide |
| 5 | 🔴 Ransomware Defense Report | Ransomware prevention & response |
| 6 | 🔴 Control System Defense: Know the Opponent | ICS/SCADA security |
| 7 | 🔴 Learn How to Prevent Phishing Attacks | Anti-phishing strategies |
Build security on solid foundations.
| # | Book | Description |
|---|---|---|
| 1 | 📐 NIST Cyber Security Framework — Overview | NIST CSF overview |
| 2 | 📐 NIST Cyber Security Framework | Full NIST CSF guide |
| 3 | 📐 NIST Cybersecurity Framework | Comprehensive NIST reference |
| 4 | 📐 NIST.CSWP.04162018 | NIST special publication |
| 5 | 📐 NIST | General NIST security guide |
| 6 | 📐 OWASP Top 10 Vulnerabilities | OWASP Top 10 reference |
| 7 | 📐 OWASP Top 10 Vulnerabilities (Edition 2) | Updated OWASP Top 10 |
| 8 | 📐 MITRE ATT&CK | MITRE ATT&CK framework |
| 9 | 📐 Zero Trust Architecture | Zero Trust security model |
| 10 | 📐 Shift Left | Shift-left security approach |
| 11 | 📐 Building an Application Security Program | AppSec program development |
The future of security is intelligent.
| # | Book | Description |
|---|---|---|
| 1 | 🤖 AI in Cybersecurity | AI applications in security |
| 2 | 🤖 AI Tools in Cybersecurity — 2025 Edition | Latest AI security tools |
| 3 | 🤖 ChatGPT for CyberSecurity | Leveraging ChatGPT for security |
| 4 | 🤖 Creatively Malicious Prompt Engineering | Prompt injection & AI security |
| 5 | 🤖 Natural Language Processing Python | NLP for security applications |
Level up your career with industry-recognized credentials.
| # | Book | Description |
|---|---|---|
| 1 | 🎖️ OSCP OffSec Penetration Testing with Kali Linux (2014) | Official OSCP course material |
| 2 | 🎖️ OSCP Preparation Guide | Complete OSCP prep guide |
| 3 | 🎖️ OSCP Preparation Guide (2) | Additional OSCP preparation |
| 4 | 🎖️ OSCP Preparation Guide (3) | More OSCP strategies |
| 5 | 🎖️ OSCP Cheat Sheet — Thor-Sec | OSCP quick reference cheatsheet |
| # | Book | Description |
|---|---|---|
| 1 | 🎖️ CISSP For Dummies (4th Edition) | CISSP made accessible |
| 2 | 🎖️ CISSP Glossary | Complete CISSP terminology |
| # | Book | Description |
|---|---|---|
| 1 | 🎖️ CHFIv9 Study Guide | CHFI v9 exam preparation |
| 2 | 🎖️ CHFI v01 — Computer Forensics Investigation Procedures & Response | Forensics investigation |
| 3 | 🎖️ CHFI v03 — Computer Forensics Investigating Data & Image Files | Data forensics techniques |
| # | Book | Description |
|---|---|---|
| 1 | 🎖️ CompTIA Security+ Certification Guide (eBook) | Complete Security+ guide |
| 2 | 🎖️ SY0-601 Official Guide | Security+ SY0-601 reference |
| 3 | 🎖️ SY0-601 Practice — Egbert (190Q) | Practice exam set 1 |
| 4 | 🎖️ SY0-601 Practice — Allen (276Q) | Practice exam set 2 |
| 5 | 🎖️ SY0-601 Practice — Hardy (313Q) | Practice exam set 3 |
| 6 | 🎖️ SY0-601 Practice — Timothy (269Q) | Practice exam set 4 |
| 7 | 🎖️ SY0-601 Practice — Alexander (158Q) | Practice exam set 5 |
| 8 | 🎖️ SY0-601 Practice — Rachel (207Q) | Practice exam set 6 |
| 9 | 🎖️ SY0-601 Practice — Moses (287Q) | Practice exam set 7 |
| 10 | 🎖️ SY0-601 Practice — Newman (204Q) | Practice exam set 8 |
| 11 | 🎖️ SY0-601 Practice — Tiffany (169Q) | Practice exam set 9 |
| # | Book | Description |
|---|---|---|
| 1 | 🎖️ Complete Guide to CISM Certification | Full CISM preparation guide |
| # | Book | Description |
|---|---|---|
| 1 | 🎖️ ITIL 4 Foundation Courseware | ITIL 4 Foundation study material |
Command the terminal like a pro.
| # | Book | Description |
|---|---|---|
| 1 | 🖥️ +100 Linux Commands | Essential Linux command reference |
| 2 | 🖥️ Bash Notes For Professionals | Professional Bash scripting |
| 3 | 🖥️ Linux Bible by Christopher Negus | The definitive Linux guide |
| 4 | 🖥️ Linux Bash Cheat Sheet | Quick Bash reference |
Code your way through security challenges.
| # | Book | Description |
|---|---|---|
| 1 | ⌨️ Python Guide | Python for security professionals |
| 2 | ⌨️ JavaScript by Example (2nd Edition) | JavaScript security concepts |
| 3 | ⌨️ JS | JavaScript essentials |
The art of intelligence gathering.
| # | Book | Description |
|---|---|---|
| 1 | 🔍 OSINT | Open Source Intelligence techniques |
| 2 | 🔍 Mining Social Web | Extracting intelligence from social media |
| 3 | 🔍 Beef Framework Explained | Browser Exploitation Framework |
| 4 | 🔍 Kali Social Engineering | Social engineering with Kali |
Master the tools of the trade.
| # | Book | Description |
|---|---|---|
| 1 | 🛠️ SANS Tools | SANS security tools reference |
| 2 | 🛠️ Open Source Tools | Open source security tools guide |
| 3 | 🛠️ Mastering Nmap Scripting | Advanced Nmap scripting engine |
| 4 | 🛠️ 100 Security Operation Center Tools | Essential SOC toolkit |
| 5 | 🛠️ cURL Cheat Sheet | Quick reference for cURL commands |
| 6 | 🛠️ cURL Command Cheat Sheet | Comprehensive cURL command reference |
Secure communication in the digital age.
| # | Book | Description |
|---|---|---|
| 1 | 🔑 Introduction to Cryptography | Cryptography fundamentals |
| 2 | 🔑 Navigating Crypto by Binance | Blockchain & cryptocurrency security |
Build your cybersecurity career and stay ahead.
| # | Book | Description |
|---|---|---|
| 1 | 🚀 5 Steps to Get a Job in Cyber Security | Career kickstart guide |
| 2 | 🚀 Cybersecurity Career 2026 | Future cybersecurity career paths |
| 3 | 🚀 Cybersecurity Portfolio | Building an impressive portfolio |
| 4 | 🚀 Cyber Security For CISO/CIO/CTO | Executive security guide |
| 5 | 🚀 Cyber Security Practical Training | Hands-on training guide |
| 6 | 🚀 Cyber Security Basics | Foundational cybersecurity concepts |
| 7 | 🚀 Cross Sector Cybersecurity | Multi-industry security guide |
| 8 | 🚀 Cybersecurity Poster | Visual cybersecurity reference |
| 9 | 🚀 Cyber Security Russia | Russian cybersecurity landscape |
| 10 | 🚀 Major Cybersecurity Focus Areas for 2026 | Emerging security trends |
| 11 | 🚀 Small Business Guide — Cyber Security | SMB security essentials |
| 12 | 🚀 SaaS Security | SaaS security best practices |
| 13 | 🚀 Support Security Provider | Security provider guide |
| 14 | 🚀 Infosec | General information security |
| 15 | 🚀 Overview | Security overview guide |
| 16 | 🚀 AD1027344 | Additional security reference |
| 17 | 🚀 CAIQ v4.0.2 STAR Security Questionnaire | Cloud security questionnaire |
Maintaining and growing this collection takes time, effort, and dedication. If this repository has helped you in any way — whether you found a book for your studies, passed a certification, or learned something new — here's how you can give back:
| How to Support | What It Does |
|---|---|
| ⭐ Star this repo | Helps others discover this resource — it's free and takes 1 second! |
| 🍴 Fork & Share | Spread the word to your cybersecurity community, classmates, and colleagues |
| 🐛 Report Issues | Found a broken link or have a suggestion? Open an issue! |
| 📚 Contribute Books | Have a cybersecurity book to add? Submit a Pull Request! |
| 📢 Share on Social Media | Tweet about it, post on LinkedIn, share in Discord servers |
| 💬 Give Feedback | Tell me what you'd like to see next — your input shapes this project |
Why does this matter? Every star, fork, and share helps this repository reach more people who need it. There are students around the world who can't afford cybersecurity books. Your small action of starring or sharing this repo could be the reason someone discovers their passion for security and starts a career that protects millions.
A small ⭐ from you = A giant leap for someone starting their cybersecurity journey.
Contributions are welcome! If you have cybersecurity books or resources to add:
- Fork this repository
- Add your resource to the appropriate category
- Update the README with the book details
- Submit a Pull Request
Please ensure all resources are freely distributable and do not violate any copyright.
| 👤 Author | Muhammad Izaz Haider |
| 🌐 Portfolio | mizazhaider-ceh.dev |
| 🚀 Powered By | The PenTrix |
| ⭐ GitHub | mizazhaider-ceh |
💜 From Muhammad Izaz Haider & Powered by The PenTrix
If you find this repository helpful, please consider giving it a ⭐
It motivates me to keep adding more resources for the community!
