引用

总览

• PayloadsAllTheThings

• 狼组安全团队公开知识库

• 渗透测试笔记

• 零组文库

• 文档库1

• s0cm0nkeys-security-reference-guide

• securehat

• 安全矩阵

• 安全客

• HackTricks

• xapax

• My OSCP Preparation Notes

• All About OSCP

• adithyanak_OSCP

• geekby

• awesome-cve-poc

• ired.team

• RedTeamNotes

• Pentest_Note

  实战多

• xuan-sec

• brainyou-oscp

• burmat-oscp

• six2dez

  工具集合

• powersploit

• Payloads All The Things

• the hacker tools

• OFFENSIVE SECURITY CHEATSHEET

• Experienced-Pentester-OSEP

• active-directory-attack-defense

• 1earn

• 3gstudent

• zeyu2001

• sushant747

• 渗透测试实战第三版(红队版)

• 渗透攻击红队百科全书

• collection-document

  很多方向文档，可后续继续回看

• Micro8

• seguranca-informatica

• OSCPRepo

• Android_Security

• linuxStack

• pentest-everything

• cuminsec

• hackingarticles

• red-team-notes-2-0

• Active-Directory-Exploitation-Cheat-Sheet

• Attack Catalog

• attacking_ad

• s0cm0nkey

• specterops

• ATT && ACK

• adsecurity

• snovvcrash

• piosky

• bhavsec

• hacknotes

• alexanderbittner

• Pentest_Note

• snovvcrash

• kashz-jewels

• redtm

• kashz

• oscp-notes

• Red Team notes

• hackinn

• sec-un安全村

• unh4ck

cobalt-strike

• CS中文书籍
• Cobalt Strike 4.0 手册
• Red Team Ops with Cobalt Strike
• CobaltStrike魔改与增强
• [探索 Cobalt Strike 的 ExternalC2 框架]
• DoHC2

codeql

• CodeQL 学习笔记

渗透测试

• spel表达式注入
• Spring Boot Actuator 漏洞复现合集

内网渗透

• AD-Attack-Defense
• windows协议

WAF

• WAF绕过姿势

CTF

• CTF竞赛权威指南
• CTF竞赛权威指南(Pwn篇)
• d00mfist1

代码审计

• 代码审计详解技巧与案例分享

免杀

edr免杀之syscall

APP安全

IOS端渗透测试从0到1

杂项

navicat-keygen-tools

CSP检测

提权

linux内核提权环境

https://cloud.tencent.com/developer/user/6318226

https://www.freebuf.com/vuls/284919.html

https://www.cnblogs.com/backlion/categories

https://www.youtube.com/playlist?list=PLziMzyAZFGMdVFAyW3MVTO0P9jMmVQkTB

https://github.com/Mr-xn/RedTeam_BlueTeam_HW

https://whoamianony.top/

https://tools.thehacker.recipes/crackmapexec

https://cloud.tencent.com/developer/user/2638143

https://heibai.org.cn/