Resources: Module 01 — Introduction to Ethical Hacking¶

Curated resources specifically relevant to this module's content. For the full topic resource list, see ../../RESOURCES.md.

Essential Reading¶

OWASP Top 10 (2021) — https://owasp.org/www-project-top-ten/ Free. The canonical reference for web application vulnerability categories. Read the overview page before Module 03; return to individual categories as you cover each module.
PTES (Penetration Testing Execution Standard) — http://www.pentest-standard.org/ Free. The industry-standard methodology document. Read the "Intelligence Gathering" and "Pre-Engagement Interactions" sections now; the rest aligns with later modules.
US Department of Justice Guidance on Cybersecurity Research — [Verify URL: DOJ guidance on CFAA and good-faith security research] The DOJ published updated policy guidance in 2022 clarifying that good-faith security research is not an intended target of CFAA enforcement. Understanding the legal landscape is essential for every security practitioner.

TryHackMe — "Pre-Security" learning path — https://tryhackme.com/path/outline/presecurity Free. Covers exactly the prerequisites for this topic: networking fundamentals, Linux basics, web fundamentals. If you feel shaky on prerequisites, start here.
TryHackMe — "Introduction to Cybersecurity" path — https://tryhackme.com/path/outline/introtocyber Free. A well-structured beginner path that complements Module 01.
OverTheWire: Bandit — https://overthewire.org/wargames/bandit/ Free. Linux command line challenges for beginners. Essential if your Linux skills need strengthening before diving into security tools.

DEF CON talks (YouTube) — https://www.youtube.com/@DEFCONConference Free. Browse talks from DEF CON conferences. For this module, look for talks on: "How to get into security", "Bug bounty 101", "The ethics of security research."
"The Secret Life of a Bug Bounty Hunter" — Various talks by well-known bug bounty hunters (Katie Paxton-Fear, LiveOverflow, InsiderPhD) available on YouTube. Search for these names to find practical career and methodology guidance.

"Hackers: Heroes of the Computer Revolution" by Steven Levy (1984) — [Verify: ISBN 978-1449388393] The definitive account of MIT hacker culture, the Homebrew Computer Club, and the early ethical hacking ethos. Not a technical book — cultural and historical context.
"The Cuckoo's Egg" by Cliff Stoll (1989) — [Verify: ISBN 978-1416507789] A first-person account of tracking hackers in 1986. Reads like a thriller and is one of the best introductions to the human dimension of security research. Non-technical.