New Russian Translations of Leading Cybersecurity Books on Ethical Hacking, Reverse Engineering, Malware Analysis, and Privacy Released
A well-known Russian-language cybersecurity library has released a substantial batch of new translations of leading English books on ethical hacking, bug bounty hunting, reverse engineering, malware analysis, and privacy.
The project, which continues the long-running series “Materials on Hacking in Russian,” focuses on translating high-quality resources and hosting them on the Hackbooks site. The latest update adds more than a dozen titles that span web application security, network discovery, protocol exploitation, binary analysis, and defensive techniques.
Web Application Security and Bug Hunting
Web Hacking 101: How to Make Money Hacking Ethically presents more than thirty real-world vulnerability disclosures, covering HTML injection, XSS, CSRF, open redirects, remote code execution, and business logic flaws, each accompanied by attack classification, original reports, bounty amounts, and key takeaways.
Real-World Bug Hunting: A Field Guide to Web Hacking by Peter Yaworski walks readers through rewarded vulnerability reports, dedicating chapters to XSS, CSRF, SSRF, SQL injection, XXE, subdomain takeover, IDOR, OAuth issues, race conditions, and logic errors while also explaining how to select bug bounty programs and write effective reports.
Network Security and Protocol Analysis
The official Nmap Network Scanning guide covers host and service detection, firewall and IDS evasion, performance tuning, and automation via the Nmap Scripting Engine, with practical scenarios for network inventory, penetration testing, rogue access point discovery, and worm response.
Attacking Network Protocols: A Hacker’s Guide to Capture, Analysis, and Exploitation teaches traffic capture, modification, and replay, followed by static and dynamic analysis, protocol reverse engineering, custom proxy and dissector development, fuzzing, debugging, memory corruption exploitation, authentication bypass, and denial-of-service techniques.
Reverse Engineering and Binary Analysis
Reverse Engineering for Beginners is a large free textbook that teaches assembly reading and logic reconstruction, illustrating how C and C++ constructs appear after compilation, covering function calls, stack, memory, optimizations, system APIs, multiple architectures, and operating systems.
How to Approach Binary File Format Analysis explains encodings, endianness, numbers, flags, structures, alignment, signatures, and headers, offering a practical workflow using histograms, string searches, section extraction, and pattern matching for digital forensics, malware analysis, data recovery, and converter development.
Privacy, Surveillance, and Cryptography
Obfuscation: A User’s Guide for Privacy and Protest explores creating ambiguous or misleading data to resist mass surveillance, drawing examples from WWII chaff, social media bots, and search query masking tools while discussing technical and ethical limits.
Gigabytes of Power by Kiwi Bird connects societal and technological history with growing state and corporate control, covering mass surveillance, biometrics, cryptography, GSM and satellite TV hacking, propaganda, and counter-terrorism restrictions.
Crypto Wars: The Fight for Privacy in the Digital Age traces fifty years of conflict between privacy advocates and governments, examining debates around DES, academic freedom, crypto export controls, key escrow, and post-Snowden developments.
Windows Security and Malware Analysis
Windows Security Internals: A Deep Dive into Windows Authentication, Authorization, and Auditing by James Forshaw details kernel and user-mode security mechanisms including access tokens, security descriptors, rights checking, auditing, SAM, Active Directory, NTLM, and Kerberos, with PowerShell examples for hands-on exploration.
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software guides readers through the full malware investigation lifecycle—from initial file inspection to logic reconstruction—using static and dynamic analysis, disassemblers, debuggers, memory forensics, network behavior, packers, and shellcode, reinforced by laboratory exercises.
Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats focuses on malware that detects virtual machines, sandboxes, and analysis tools, covering anti-disassembly and anti-debugging methods, process injection, rootkits, fileless techniques, packers, obfuscation, and laboratory setup recommendations.
Fuzzing and Automated Testing
The Fuzzing Book is an interactive textbook demonstrating random, mutational, grey-box, grammar-based, search-based, and symbolic fuzzing, complete with executable Python examples and Jupyter notebooks that readers can run while studying.
Readers are encouraged to explore the full collection on Hackbooks and share the resources with the community. The translations significantly lower the barrier for Russian-speaking professionals and students seeking authoritative material on information security, reverse engineering, and antivirus research.
Related articles
Automating Malware Reverse Engineering with Local LLMs, PyGhidra and Neo4j Graphs
A researcher has developed an automated pipeline that uses local large language models to analyze decompiled malware code extracted via PyGhidra. The system loads functions, call graphs, strings and imports into a Neo4j graph database to preserve context across hundreds of functions. Each function is sent to a local Qwen3 model running in LM Studio together with its neighboring call-graph context, producing structured JSON output on purpose, IOCs, tags and evasion techniques. Aggregated capabilities and behavioral patterns such as file encryption and C2 communication are then derived through graph queries. Testing on a WannaCry sample from MalwareBazaar processed 195 functions in 126 minutes and correctly identified File Encryption, C2 Communication and Anti-Analysis behaviors with 100 percent confidence. The approach keeps all sensitive indicators inside a local environment and avoids context overflow and censorship issues common with cloud-based models.
GitHub Removes 10,000 Malware Repositories After Public Exposure but Takes No Further Action
An investigation reveals that GitHub hosts thousands of repositories distributing trojanized ZIP archives, many of which have persisted for two years despite the platform's resources. The malicious repositories follow consistent patterns in README files, including specific headings and links to versioned archives hosted on githubusercontent.com. A detailed article and accompanying script published on Hacker News identified over 10,000 such repositories, prompting GitHub to delete only those specific entries. New repositories matching the same patterns continue to appear and remain active, with no additional proactive measures taken by the security team. The situation highlights questions about Microsoft's approach to automated detection and response on its subsidiary platform.
Dolphin X Malware Adds AI Profiler to Rank and Prioritize High-Value Victims After Infection
Dolphin X is a newly identified Windows infostealer and remote access trojan that integrates an AI Profiler component designed to score infected machines and generate priority rankings for operators. The profiler analyzes telemetry from compromised systems, including application usage, browser domains visited, and installed software, to produce daily summaries that help attackers focus resources on the most valuable targets such as those with cloud access or sensitive tools. Dolphin X claims compatibility with over 300 applications, explicitly covering nine Chromium and Gecko browser families, more than 100 cryptocurrency wallet extensions, 65 desktop wallets, 10 password managers, and over 30 common cloud CLI tools. The malware targets files like .env configurations, SSH keys, cloud access tokens, browser sessions, and cryptocurrency wallet data to accelerate movement from initial credential theft to further compromises in accounts and production environments. Researchers have confirmed the AI Profiler workflow and associated scoring functions in the operator panel, although the underlying AI model itself remains unverified without full analysis of an active sample. The discovery highlights how automated prioritization can significantly shorten the time between mass infections and targeted follow-on attacks, prompting recommendations for reduced local credential storage and enhanced behavioral detection.
YARA Style Guide: Comprehensive Best Practices for Naming, Structuring and Maintaining Detection Rules
The article presents a detailed translation and adaptation of Florian Roth's YARA Style Guide, aimed at bringing consistency to large collections of YARA rules used by security teams. It explains how to construct informative rule names that include threat category, context, operating system, architecture, technology, packers and creation date, using prefixes such as MAL, HKTL, WEBSHELL, EXPL, VULN, SUSP and PUA. The guide recommends specific metadata fields including description, author, date, reference, score and hash, along with a three-tier string categorization system using $x*, $s* and $a* prefixes for high-specificity, group and preliminary strings. It also covers false-positive filters marked with $fp*, proper indentation, readable hex and string formatting, and a recommended order of conditions that begins with header checks and ends with false-positive filters. The publication highlights the benefits of this structured approach for long-term maintainability and faster triage during mass detections. Additional references point to the separate YARA-Performance-Guidelines project for deeper optimization techniques.