# 引用

## 总览

* [ ] [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings)
* [ ] [狼组安全团队公开知识库](https://wiki.wgpsec.org/knowledge/ctf/xxe.html)
* [ ] [渗透测试笔记](https://github.com/xiaoy-sec/Pentest_Note)
* [ ] [零组文库](https://0-wiki.com/)
* [ ] [文档库1](https://blog.gm7.org/)
* [ ] [s0cm0nkeys-security-reference-guide](https://s0cm0nkey.gitbook.io/)
* [ ] [securehat](https://blog.securehat.co.uk)
* [ ] [安全矩阵](http://www.smatrix.org/forum/)
* [ ] [安全客](https://www.anquanke.com/)
* [ ] [HackTricks](https://book.hacktricks.xyz/welcome/readme)
* [ ] [xapax](https://xapax.github.io/security/)
* [x] [My OSCP Preparation Notes](https://oscpnotes.infosecsanyam.in/)
* [x] [All About OSCP](https://oscp.infosecsanyam.in/)
* [x] [adithyanak\_OSCP](https://blog.adithyanak.com/oscp-preparation-guide)
* [ ] [geekby](https://www.geekby.site/)
* [ ] [awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc)
* [ ] [ired.team](https://github.com/mantvydasb/RedTeaming-Tactics-and-Techniques)
* [ ] [RedTeamNotes](https://github.com/biggerduck/RedTeamNotes)
*   [ ] [Pentest\_Note](https://github.com/xiaoy-sec/Pentest_Note)

    > 实战多
* [ ] [xuan-sec](https://xu-an.gitbook.io/sec/)
* [ ] [brainyou-oscp](https://gitbook.brainyou.stream/)
* [ ] [burmat-oscp](https://burmat.gitbook.io/security/)
*   [ ] [six2dez](https://pentestbook.six2dez.com/)

    > 工具集合
* [ ] [powersploit](https://powersploit.readthedocs.io/en/latest/)
* [ ] [Payloads All The Things](http://www.milworm.cn/payloads/)
* [ ] [the hacker tools](https://tools.thehacker.recipes/)
* [ ] [OFFENSIVE SECURITY CHEATSHEET](https://cheatsheet.haax.fr/)
* [ ] [Experienced-Pentester-OSEP](https://github.com/nullg0re/Experienced-Pentester-OSEP)
* [ ] [active-directory-attack-defense](https://0xsp.com/offensive/active-directory-attack-defense/)
* [ ] [1earn](https://github.com/ffffffff0x/1earn)
* [ ] [3gstudent](https://3gstudent.github.io/)
* [ ] [zeyu2001](https://pentesting.zeyu2001.com/)
* [x] [sushant747](https://sushant747.gitbooks.io/total-oscp-guide/content/)
* [ ] [渗透测试实战第三版(红队版)](https://wizardforcel.gitbooks.io/the-hacker-playbook-3/content/)
* [ ] [渗透攻击红队百科全书](yin-yong)
*   [ ] [collection-document](https://github.com/tom0li/collection-document)

    > 很多方向文档，可后续继续回看
* [x] [Micro8](https://github.com/Micropoor/Micro8)
* [ ] [seguranca-informatica](https://gitbook.seguranca-informatica.pt/)
* [ ] [OSCPRepo](https://github.com/rewardone/OSCPRepo)
* [ ] [Android\_Security](https://github.com/anantshri/Android_Security)
* [ ] [linuxStack](https://github.com/g0dA/linuxStack)
* [ ] [pentest-everything](https://viperone.gitbook.io/pentest-everything/)
* [ ] [cuminsec](https://dh.cuminsec.com/)
* [ ] [hackingarticles](https://www.hackingarticles.in/)
* [ ] [red-team-notes-2-0](https://dmcxblue.gitbook.io/)
* [ ] [Active-Directory-Exploitation-Cheat-Sheet](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet)
* [ ] [Attack Catalog](https://www.netwrix.com/attack.html)
* [ ] [attacking\_ad](https://zer1t0.gitlab.io/posts/attacking_ad/?s=09)
* [ ] [s0cm0nkey](https://s0cm0nkey.gitbook.io/)
* [ ] [specterops](https://specterops.gitbook.io/ghostpack/rubeus/constrained-delegation-abuse)
* [ ] [ATT && ACK](https://attack.mitre.org/)
* [ ] [adsecurity](https://adsecurity.org/)
* [ ] [snovvcrash](https://ppn.snovvcrash.rocks/pentest/infrastructure/ad/roasting)
* [ ] [piosky](https://cs.piosky.fr/)
* [ ] [bhavsec](https://bhavsec.com/resources/)
* [ ] [hacknotes](https://nozerobit.gitbook.io/hacknotes/)
* [ ] [alexanderbittner](https://alexanderbittner.gitbook.io/pentest-resources/)
* [ ] [Pentest\_Note](https://github.com/xiaoy-sec/Pentest_Note)
* [ ] [snovvcrash](https://ppn.snovvcrash.rocks/)
* [ ] [kashz-jewels](https://kashz.gitbook.io/kashz-jewels/)
* [ ] [redtm](https://redtm.com/)
* [ ] [kashz](https://kashz.gitbook.io/)
* [ ] [oscp-notes](https://notchxor.github.io/oscp-notes/)
* [ ] [Red Team notes](https://dmcxblue.gitbook.io/)
* [ ] [hackinn](https://www.hackinn.com/)
* [ ] [sec-un安全村](https://www.sec-un.org/)
* [ ] [unh4ck](https://www.unh4ck.com/)

## cobalt-strike

* [x] [CS中文书籍](https://wbglil.gitbook.io/cobalt-strike)
* [x] [Cobalt Strike 4.0 手册](https://blog.ateam.qianxin.com/CobaltStrike4.0%E7%94%A8%E6%88%B7%E6%89%8B%E5%86%8C_%E4%B8%AD%E6%96%87%E7%BF%BB%E8%AF%91.pdf)
* [ ] [Red Team Ops with Cobalt Strike](https://www.youtube.com/playlist?list=PL9HO6M_MU2nfQ4kHSCzAQMqxQxH47d1no)
* [ ] [CobaltStrike魔改与增强](https://mp.weixin.qq.com/s/1iVhIMTGJ_rxshl8l98ucA)
* [ ] \[[探索 Cobalt Strike 的 ExternalC2 框架](https://blog.xpnsec.com/exploring-cobalt-strikes-externalc2-framework/)]
* [ ] [DoHC2](https://github.com/SpiderLabs/DoHC2)

## codeql

* [ ] [CodeQL 学习笔记](https://www.yuque.com/loulan-b47wt/rc30f7)

## 渗透测试

* [ ] [spel表达式注入](https://mp.weixin.qq.com/s/D5GXTNDskEFlgGYvjc0nYA)
* [ ] [Spring Boot Actuator 漏洞复现合集](https://blog.csdn.net/god_zzZ/article/details/122837698)

## 内网渗透

* [ ] [AD-Attack-Defense](https://github.com/infosecn1nja/AD-Attack-Defense)
* [x] [windows协议](https://daiker.gitbook.io/)

## WAF

* [ ] [WAF绕过姿势](https://github.com/CHYbeta/WAF-Bypass)

## CTF

* [ ] [CTF竞赛权威指南](https://github.com/firmianay/CTF-All-In-One)
* [ ] [CTF竞赛权威指南(Pwn篇)](https://github.com/firmianay/ctf-book)
* [ ] [d00mfist1](https://d00mfist1.gitbooks.io/ctf/content/)

## 代码审计

* [ ] [代码审计详解技巧与案例分享](https://www.bilibili.com/video/BV16F411h7Sy/)

## 免杀

[edr免杀之syscall](https://mp.weixin.qq.com/s/a8aXgIKN850aDgo0pUtPNg)

## APP安全

[IOS端渗透测试从0到1](https://mp.weixin.qq.com/s/ukV7wfFNEy9jdCjqJlSh7A)

## 杂项

[navicat-keygen-tools](https://github.com/HeQuanX/navicat-keygen-tools)

[CSP检测](https://csper.io/)

## 提权

[linux内核提权环境](https://github.com/bsauce/kernel-exploit-factory)

https://cloud.tencent.com/developer/user/6318226

https://www.freebuf.com/vuls/284919.html

https://www.cnblogs.com/backlion/categories

https://www.youtube.com/playlist?list=PLziMzyAZFGMdVFAyW3MVTO0P9jMmVQkTB

https://github.com/Mr-xn/RedTeam\_BlueTeam\_HW

https://whoamianony.top/

https://tools.thehacker.recipes/crackmapexec

https://cloud.tencent.com/developer/user/2638143

https://heibai.org.cn/
