Books
The Ghost Protocol Field Library: illustrated security books that follow a new recruit at Ghost Protocol from the law and the basics to AI, Active Directory and forensics. And Below the Wire, our tabletop game. Every book is a PDF with a free sample.
The core path
The spine of the library, read first and in order.
The Core Path
The six volumes everyone reads first, in order: The Oath (the law, authorisation and clean conduct), Groundwork, The Web, The Wider Field, The Work and The Craft.
Deep tracks
One surface or one skill, taken to real depth.
AI and Agents
LLM applications, prompt injection and jailbreaks, agents that act, MCP and RAG, and the OWASP lists for LLM and agentic applications.
Reading Code
Secure code review: the white-box eye, following tainted input, the vulnerability classes in source, and reviewing a diff.
Internal and Active Directory
The internal network, Windows and Active Directory: enumeration, the AD attack classes, lateral movement and privilege escalation.
The Web, Deeper
Deserialization, template injection, prototype pollution, request smuggling, cache poisoning, OAuth and JWT, GraphQL and WebSockets.
Cloud and Containers
AWS, Azure and GCP, identity and misconfiguration, serverless, containers and Kubernetes.
Mobile and APIs
Android and iOS in depth, certificate pinning, and API security across REST, GraphQL and gRPC.
Reverse Engineering
Assembly, Ghidra, memory corruption and how exploits are built, for the advanced reader.
Hardware and the Edges
IoT, firmware, UART and JTAG, and what a tester should know about OT and industrial systems.
The operations
How professionals actually run the work.
Red and Purple Team
Assumed breach, tradecraft and purple teaming, with the line between testing and harm drawn hard.
OSINT and Recon
Infrastructure, people and breach data: the reconnaissance phase in depth.
Report Writing Mastery
The report as a craft, with worked examples, written for a board and for a developer.
The Consulting Craft
Scoping, estimating, proposals, retainers and the debrief: running security work as a business.
Bug Bounty
The platforms, staying inside scope, and the business of bug bounty.
The other side
The defender's craft, so the tester is sharper.
Detection and Response
Detection engineering, logging, SIEM and incident response.
Threat Hunting and Forensics
Threat hunting, and digital forensics on disk and in memory.
Hardening and Architecture
Secure configuration, vulnerability management and secure design.
The ground rules
The law, the standards and the ethics.
The Law, Deeper
Sri Lanka's Computer Crime Act, the Personal Data Protection Act and digital evidence, and the law abroad for clients overseas.
Standards and Compliance
PCI DSS, ISO 27001, SOC 2, NIST and OWASP ASVS, and where a security test fits in each.
Ethics and Disclosure
Clean conduct in depth, and how to report a vulnerability responsibly.
Companions
Not new topics, new shapes: templates, labs, stories, a glossary. And the whole library in one order.
The Reference Pack
Rules-of-engagement and authorisation templates, report templates, checklists, command cheat sheets and a Sri Lanka legal quick reference.
The Lab Workbook
Guided walkthroughs on DVWA, PortSwigger Web Security Academy and Hack The Box.
Case Files
Complete engagements told end to end, in the story voice, with every client kept anonymous.
The Bestiary
The vulnerability classes drawn as creatures, in the house art.
The Glossary and the Ledger
A full glossary, and the end-of-chapter lines from every book gathered as revision cards.
The whole Field Library
All thirty books: the Core Path and every book on every shelf above.
Below the Wire
Our tabletop game. A Forged in the Dark game, set in Colombo.
Below the Wire
A Forged in the Dark tabletop game of operators for hire in present-day Colombo: twelve playbooks, five scores, one crew, and the heat that follows it.
How to buy
Order on WhatsApp
The button opens WhatsApp with your order written out. Send it as it is.
Pay by bank transfer
We reply with our bank details and the amount. Prices are in Sri Lankan rupees, with US dollars for orders from abroad.
Get the PDF
Once the transfer arrives, we send the book to your WhatsApp or your email. It is for you to read: please do not share the file.
If a file arrives damaged, incomplete or is not the book you ordered, tell us within 14 days and we will send the right file or refund you in full. The refund policy has the rest.
Talk to an engineer
Email ryan@ghosts.lk or message +94 71 055 5055 on WhatsApp. Ryan replies within 24 hours. Working hours are Monday to Friday, 09:00 to 18:00 Colombo time (UTC+5:30).
Book a 15-minute call Buying for a company? Procurement details