黑客技术
点击放大
项目说明
Awesome Infosec
===============
![Awesome]()
A curated list of awesome information security resources, inspired by the awesome-* trend on GitHub.
Those resources and tools are intended only for cybersecurity professional and educational use in a controlled en.
Table of Contents
=================
1. Massi Open Courses
2. Academic Courses
3. Laboratories
4. Capture the Flag
5. Open Security Books
6. Challenges
7. Documentation
8. SecurityTube Playlists
9. Related Awesome Lists
10. Contributing
11. License
Massi Open Courses
===========================
#### Stanford Uni - Computer Security
In this class you will learn how to design secure systems and write secure 代码. You will learn how to find in 代码 and how to design software systems that limit the impact of security . We will focus on principles for building secure systems and give many real world examples.
#### Stanford Uni - Cryptography I
This course explains the inner workings of cryptographic primitives and how to correctly use them. Students will learn how to reason about the security of cryptographic constructions and how to apply this knowledge to real-world applications. The course begins with a detailed discussion of how two parties who have a shared secret key can communicate securely when a powerful ad ea and tampers with traffic. We will examine many deployed protocols and analyze mistakes in existing systems. The second half of the course discusses public-key techniques that let two or more parties generate a shared secret key. We will cover the relevant number theory and discuss public-key encryption and basic key-exchange. Throughout the course students will be exposed to many exciting open problems in the field.
#### Stanford Uni - Cryptography II
This course is a continuation of Crypto I and explains the inner workings of public-key systems and cryptographic protocols. Students will learn how to reason about the security of cryptographic constructions and how to apply this knowledge to real-world applications. The course begins with constructions for digital signatures and their applications. We will then discuss protocols for user authentication and zero-knowledge protocols. Next we will turn to privacy applications of cryptography supporting anonymous credentials and private 数据库 lookup. We will conclude with more ad topics including multi-party computation and elliptic cur.
#### Uni of Maryland - Usable Security
This course focuses on how to design and build secure systems with a human-centric focus. We will look at basic principles of human-computer interaction, and apply these insights to the design of secure systems with the goal of de security measures that respect human performance and their goals within a system.
#### Uni of Maryland - Software Security
#### Offensi & AI Red Team Frameworks
#### Offensi & AI Red Team Frameworks
This course we will explore the foundations of software security. We will consider important software and attacks that exploit them -- such as buffer o, SQL injection, and session hijacking -- and we will consider defenses that prevent or mitigate these attacks, including ad testing and program analysis techniques. Importantly, we take a "build security in" mentality, considering techniques at each phase of the de cycle that can be used to strengthen the security of software systems.
#### Uni of Maryland - Cryptography
This course will introduce you to the foundations of modern cryptography, with an eye toward practical applications. We will learn the importance of carefully defining security; of relying on a set of well-studied "hardness assumptions" (e.g., the hardness of factoring large numbers); and of the possibility of proving security of complicated constructions based on low-le. We will not only co ideas in theory, but will also explore their real-world impact. You will learn about cryptographic primitives in wide use today, and see how these can be combined to develop modern protocols for secure communication.
#### Uni of Maryland - Hardware Security
This course will introduce you to the foundations of modern cryptography, with an eye toward practical applications. We will learn the importance of carefully defining security; of relying on a set of well-studied “hardness assumptions” (e.g., the hardness of factoring large numbers); and of the possibility of proving security of complicated constructions based on low-le. We will not only co ideas in theory, but will also explore their real-world impact. You will learn about cryptographic primitives in wide use today, and see how these can be combined to develop modern protocols for secure communication.
#### Uni of Washington - Introduction to CyberSecurity
This course will introduce you to the cybersecurity, ideal for learners who are curious about the world of Internet security and who want to be literate in the field. This course will take a ride in to cybersecurity feild for beginners.
#### Uni of Washington - Finding Your Cybersecurity Career Path
There are 5-6 major job roles in industry for cybersecurity enthusiast. In This course you will Learn about different career pathways in cybersecurity and complete a self-assessment project to better understand the right path for you.
#### Uni of Washington - Essentials of Cybersecurity
This course is good for beginner It contains introduction to cybersecurity, The CISO's view, Helps you building cybersecurity toolKit and find your cybersecurity career path.
Academic Courses
================
#### NYU Tandon School of Engineering - OSIRIS Lab's Hack Night
De from the materials of NYU Tandon's old Penetration Testing and Analysis course, Hack Night is a sobering introduction to offensi. A lot of complex technical content is covered very quickly as students are introduced to a wide of complex and immersi o weeks.
#### Florida State Uni's - Offensi Security
The primary incentive for an attacker to exploit a , or series of is to achieve a return on an in (his/her time usually). This return need not be strictly monetary, an attacker may be interested in obtaining access to data, identities, or some other commodity that is to them. The field of penetration testing in authorized auditing and exploitation of systems to assess actual system security in order to protect against attackers. This requires thorough knowledge of and how to exploit them. Thus, this course provides an introductory but comprehensi of the fundamental methodologies, skills, legal issues, and tools used in white hat penetration testing and secure system administration.
* Offensi Security - Spring 2014
* Offensi Security - Spring 2013
#### Florida State Uni's - Offensi Security
This class allows students to look deep into know protocols (i.e. IP, TCP, UDP) to see how an attacker can utilize these protocols to their ad and how to spot issues in a 网络 网络 traffic.
The first half of this course focuses on know protocols while the second half of the class focuses on reverse engineering unknown protocols. This class will utilize captured traffic to allow students to reverse the 协议 by using known techniques such as incorporating bioinformatics introduced by Marshall Beddoe. This class will also co protocols to see if the 服务端 or 客户端 ha. O, a student finishing this class will have a better understanding of the 网络 layers, protocols, and 网络 communication and their interaction in computer networks.
* Offensi Security
#### Rensselaer Polytechnic Institute - Malware Analysis
This course will introduce students to modern malware analysis techniques through readings and hands-on interacti of real-world samples. After taking this course students will be equipped with the skills to analyze ad contemporary malware using both static and dynamic analysis.
#### Rensselaer Polytechnic Institute - Modern Binary Exploitation
This course will start off by co basic x86 reverse engineering, analysis, and classical forms of Linux-based userland binary exploitation. It will then transition into protections found on modern systems (Canaries, DEP, ASLR, RELRO, Fortify 源码, etc) and the techniques used to defeat them. Time permitting, the course will also co subjects in exploitation including kernel-land and Windows based exploitation.
* CSCI 4968 - Spring '15 Modern Binary Exploitation
#### Rensselaer Polytechnic Institute - Hardware Reverse Engineering
Reverse engineering techniques for semiconductor devices and their applications to competiti, IP litigation, security testing, supply chain , and failure analysis. IC packaging technologies and sample preparation techniques for die recovery and li. Deprocessing and staining methods for re features bellow top passi. Memory technologies and appropriate extraction techniques for each. Study contemporary anti-tamper/anti-RE methods and their effecti at protecting designs from attackers. Programmable logic microarchitecture and the issues in with reverse engineering programmable logic.
#### City College of San Francisco - Sam Bowne Class
DNS is crucial for all Internet transactions, but it is subject to numerous security risks, including phishing, hijacking, packet amplification, spoofing, snooping, poisoning, and more. Learn how to configure secure DNS servers, and to detect malicious activity with DNS monitoring. We will also co principles and deployment. Students will perform hands-on projects deploying secure DNS servers on both Windows and Linux platforms.
Knowledge and skills required for 网络 Administrators and Information Technology professionals to be aware of security , to implement security measures, to analyze an existing 网络 en in consideration of known security threats or risks, to defend against attacks or , and to ensure data privacy and integrity. Terminology and procedures for implementation and configuration of security, including access control, authorization, encryption, packet filters, firewalls, and Private Networks (VPNs).
The class covers forensics tools, methods, and procedures used for in of computers, techniques of data recovery and e collection, protection of e, expert witness skills, and computer crime in techniques. Includes analysis of file systems and specialized diagnostic software used to retrieve data. Prepares for part of the industry standard certification exam, Security+, and also maps to the Computer In Specialists exam.
Students learn how hackers attack computers and networks, and how to protect systems from such attacks, using both Windows and Linux systems. Students will learn legal restrictions and ethical guidelines, and will be required to obey them. Students will perform many hands-on labs, both attacking and defending, using port scans, footprinting, exploiting Windows and Linux , buffer o exploits, SQL injection, pri escalation, Trojans, and backdoors.
Ad techniques of defeating computer security, and countermeasures to protect Windows and Unix/Linux systems. Hands-on labs include Google hacking, automated footprinting, sophisticated ping and port scans, pri escalation, attacks against telephone and Voice o 协议 (VoIP) systems, routers, firewalls, wireless devices, Web servers, and Denial of Service attacks.
Learn how to analyze malware, including computer , trojans, and rootkits, using disassemblers, debuggers, static and dynamic analysis, using IDA Pro, OllyDbg and other tools.
Learn how to find and exploit them to gain control of target systems, including Linux, Windows, Mac, and Cisco. This class covers how to write tools, not just how to use them; essential skills for ad penetration testers and software security professionals.
Mobile devices such as smartphones and tablets are now used for making purchases, emails, social networking, and many other risky acti. These devices run specialized operating systems have many security problems. This class will cover how mobile operating systems and apps work, how to find and exploit in them, and how to defend them. Topics will include phone call, , and SMS intrusion, jailbreaking, rooting, NFC attacks, malware, browser exploitation, and application . Hands-on projects will include as many of these acti as are practical and legal.
Techniques used by attackers to breach Web applications, and how to protect them. How to secure authentication, access, databases, and back-end components. How to protect users from each other. How to find common in compiled 代码 and 源码 代码.
Training students for cybersecurity competitions, including CTF events and the Collegiate Cyberdefense Competition (CCDC). This training will prepare students for employment as security professionals, and if our team does well in the competitions, the competitors will gain recognition and respect which should lead to more and better job offers.
In the exploit de section, students will take o systems with simple Python scripts.
#### Uni of Cincinnati - CS6038/CS5138 Malware Analysis
This class will introduce the CS graduate students to malware concepts, malware analysis, and black-box reverse engineering techniques. The target audience is focused on computer science graduate students or undergraduate seniors without prior cyber security or malware experience. It is intended to introduce the students to types of malware, common attack recipes, some tools, and a wide array of malware analysis techniques.
#### Eurecom - Mobile Systems and Smartphone Security (MOBISEC)
Hands-On course co topics such as mobile ecosystem, the design and architecture of mobile operating systems, application analysis, reverse engineering, malware detection, assessment, automatic static and dynamic analysis, and exploitation and mitigation techniques.
Besides the slides for the course, there are also multiple challenges co mobile app de, re and exploitation.
Open Security Training
OpenSecurityTraining.info is dedicated to sharing training material for computer security classes, on any topic, that are at least one day long.
#### Beginner Classes
This class serves as a foundation for mobile digital forensics, forensics of Android operating systems, and penetration testing of Android applications.
The CISSP CBK Review course is uniquely designed for federal agency information assurance (IA) professionals in meeting NSTISSI-4011, National Training Standard for Information Systems Security Professionals, as required by DoD 8570.01-M, Information Assurance Workforce Impro Program.
This course focuses on 网络 analysis and hunting of malicious activity from a security operations center perspective. We will dive into the netflow strengths, operational limitations of netflow, recommended sensor placement, netflow tools, of 网络 data, analytic trade craft for 网络 situational awareness and networking hunting scenarios.
The course is designed to help students gain a detailed insight into the practical and theoretical aspects of ad topics in hacking techniques and intrusion detection.
This class serves as a foundation for the follow on Intermediate level x86 class. It teaches the basic concepts and describes the hardware that assembly 代码 deals with. It also goes over many of the most common assembly instructions. Although x86 has hundreds of special purpose instructions, students will be shown it is possible to read most programs by knowing only around 20-30 instructions and their .
This class serves as a foundation for the follow on Intermediate level x86 class. It teaches the basic concepts and describes the hardware that assembly 代码 deals with. It also goes over many of the most common assembly instructions. Although x86 has hundreds of special purpose instructions, students will be shown it is possible to read most programs by knowing only around 20-30 instructions and their .
This class builds on the Intro to x86 class and tries to provide parallels and differences between the two processor architectures where while focusing on the ARM instruction set, some of the ARM processor features, and how software works and runs on the ARM processor.
This course is intended to demonstrate the core concepts of cellular 网络 security. Although the course discusses GSM, UMTS, and LTE - it is heavily focused on LTE. The course first introduces important cellular concepts and then follows the e of GSM to LTE.
This is a mainly lecture based class giving an introduction to common 网络 monitoring and forensic techniques.
This course provides a look at some of the most pre security related coding mistakes made in industry today. Each type of issue is explained in depth including how a malicious user may attack the 代码, and strategies for a the issues are then re.
This is a lecture and lab based class giving an introduction to assessment of some common common computing technologies. Instructor-led lab exercises are used to demonstrate specific tools and technologies.
This course is an introduction to the fundamental technologies behind Trusted Computing. You will learn what Trusted Platform Modules (TPMs) are and what capabilities they can provide both at an in-depth technical level and in an enterprise context. You will also learn about how other technologies such as the Dynamic Root of Trust for Measurement (DRTM) and can both take ad of TPMs and be used to enhance the TPM's capabilities.
This course looks at web users from a few different perspectives. First, we look at identifying techniques to determine web user identities from a ser. Second, we will look at obfuscating techniques from a user whom seeks to be anonymous. Finally, we look at forensic techniques, which, when given a hard drive or similar media, we identify users who accessed that 服务端.
Introduction to Packet Capture (PCAP) explains the fundamentals of how, where, and why to capture 网络 traffic and what to do with it. This class covers open-源码 tools like tcpdump, Wireshark, and ChopShop in several lab exercises that reinforce the material. Some of the topics include capturing packets with tcpdump, mining DNS resolutions using only command-line tools, and busting obfuscated protocols. This class will prepare students to tackle common problems and help them begin de the skills to handle more ad networking challenges.
This introductory malware dynamic analysis class is dedicated to people who are starting to work on malware analysis or who want to know what kinds of artifacts left by malware can be detected tools. The class will be a hands-on class where students can use tools to look for how malware is: Persisting, Communicating, and Hiding
The course briefly talks about the de lifecycle and the importance of peer reviews in deli a quality product. How to perform this review is discussed and how to keep secure coding a priority during the review is stressed. A of hands-on exercises will address common coding mistakes, what to focus on during a review, and how to manage limited time.
This course shows how smart cards are different compared to other type of cards.
It is explained how smart cards can be used to realize confidentiality and integrity of information.
Along the way we discuss the relevance of security at different stages of a binary’s life, from the tricks that can be played by a malicious compiler, to how really work, to the way which malware “packers” duplicate OS process execution functionality, to the benefit of a security-enhanced OS loader which implements address space layout randomization (ASLR).
This is an introduction to cryptology with a focus on applied cryptology. It was designed to be accessible to a wide audience, and therefore does not include a rigorous mathematical foundation (this will be covered in later classes).
A class for those who want to stop learning about building cryptographic systems and want to attack them. This course is a mixture of lecture designed to introduce students to a of 代码-breaking techniques and python labs to solidify those concepts. Unlike its sister class, Core Concepts, math is necessary for this topic.
#### Intermediate Classes
Software are flaws in program logic that can be le by an attacker to execute arbitrary 代码 on a target system. This class will cover both the identification of software and the techniques attackers use to exploit them. In addition, current techniques that attempt to remediate the threat of software exploitation will be discussed.
This course covers the exploitation of stack corruption in the Windows en. Stack o are programming flaws that often times allow an attacker to execute arbitrary 代码 in the context of a program. There are many nuances in with exploiting these in Windows. Window's exploit mitigations such as DEP, ASLR, SafeSEH, and SEHOP, makes le these programming bugs more difficult, but not impossible. The course highlights the features and weaknesses of many the exploit mitigation techniques deployed in Windows operating systems. Also covered are labs that describe the process of finding bugs in Windows applications with mutation based fuzzing, and then de exploits that target those bugs.
Building upon the Introductory Intel x86 class, this class goes into more depth on topics already learned, and introduces more ad topics that di into how Intel-based systems work.
#### Ad Classes
The purpose of this course is to provide a hands on introduction to Intel hardware support for . The first part will motivate the challenges of in the absence of dedicated hardware. This is followed by a deep dive on the Intel "API" and labs to begin implementing a blue pill / hyperjacking attack made famous by researchers like Joanna Rutkowska and Dino Dai Zovi et al. Finally a discussion of detection techniques.
We will cover why the BIOS is critical to the security of the platform. This course will also show you what capabilities and opportunities are provided to an attacker when BIOSes are not properly secured. We will also provide you tools for performing analysis on firmware, as well as firmware forensics. This class will take people with existing reverse engineering skills and teach them to analyze UEFI firmware. This can be used either for hunting, or to analyze suspected implants found in a BIOS, without having to rely on anyone else.
Throughout the history of in curious minds ha to understand the inner workings of their gadgets. Whether in a broken watch, or improving an 引擎, these people ha down their goods into their elemental parts to understand how they work. This is Reverse Engineering (RE), and it is done every day from recreating outdated and incompatible software, understanding malicious 代码, or exploiting weaknesses in software.
This class picks up where the Introduction to Reverse Engineering Software course left off, exploring how static reverse engineering techniques can be used to understand what a piece of malware does and how it can be removed.
Rootkits are a class of malware which are dedicated to hiding the attacker’s presence on a compromised system. This class will focus on understanding how rootkits work, and what tools can be used to help find them.
Keyloggers are one of the most widely used components in malware. Keyboard and mouse are the devices nearly all of the PCs are controlled by, this makes them an important target of malware authors. If someone can record your keystrokes then he can control your whole PC without you noticing.
Cybrary - Online Cyber Security Training
This course covers the fundamentals of computer technology, basic networking, installation and configuration of PCs, laptops and related hardware, as well as configuring common features for mobile operation systems Android and Apple iOS.
Our free, self-paced online Linux+ training prepares students with the knowledge to become a certified Linux+ expert, spanning a curriculum that covers Linux maintenance tasks, user assistance and installation and configuration.
Our free, online Cloud+ training addresses the essential knowledge for implementing, managing and maintaining cloud technologies as securely as possible. It covers cloud concepts and models, , and infrastructure in the cloud.
In addition to building one’s networking skill set, this course is also designed to prepare an indi for the 网络+ certification exam, a distinction that can open a myriad of job opportunities from major companies
In our free online CompTIA CASP training, you’ll learn how to integrate ad authentication, how to manage risk in the enterprise, how to conduct assessments and how to analyze 网络 security concepts and components.
Learn about general security concepts, basics of cryptography, communications security and operational and organizational security. With the increase of major security breaches that are occurring, security experts are needed now more than ever.
Our online ITIL Foundation training course provides baseline knowledge for IT service management best practices: how to reduce costs, increase enhancements in processes, improve IT productivity and o customer satisfaction.
In this online course we will be examining how cryptography is the cornerstone of security technologies, and how through its use of different encryption methods you can protect private or sensiti from unauthorized access.
Our free, online, self-paced CCNA training teaches students to install, configure, troubleshoot and operate LAN, WAN and dial access services for medium-sized networks. You’ll also learn how to describe the operation of data networks.
Our free, self-paced online Management training class focuses on installing, configuring and managing software. You’ll learn how to work your way around the cloud and how to build the infrastructure for it.
If the idea of hacking as a career excites you, you’ll benefit greatly from completing this training here on Cybrary. You’ll learn how to exploit networks in the manner of an attacker, in order to find out how protect the system from them.
Love the idea of digital forensics in? That’s what computer forensics is all about. You’ll learn how to; determine potential online criminal activity at its inception, legally gather e, search and in wireless attacks.
In this course, SME, Raymond Evans, takes you on a wild and fascinating journey into the cyber security discipline of web application pentesting. This is a very hands-on course that will require you to set up your own pentesting en.
In order to face the dynamic requirements of meeting enterprise management challenges, this course covers the auditing process to ensure that you have the ability to analyze the state of your organization and make changes where needed.
Join industry leader Sunny Wear as she discusses secure coding guidelines and how secure coding is important when it comes to lowering risk and . Learn about XSS, Direct Object Reference, Data Exposure, Buffer O, & Resource Management.
The Cybrary NIST 800-171 course covers the 14 domains of safeguarding controlled unclassified information in non-federal agencies. Basic and deri are presented for each security domain as defined in the NIST 800-171 special publication.
This course covers how to attack from the web using cross-site scripting, SQL injection attacks, remote and local file inclusion and how to understand the defender of the 网络 you’re breaking into to. You’ll also learn tricks for exploiting a 网络.
In this course you’ll learn how to perform dynamic and static analysis on all major files types, how to car executables from documents and how to recognize common malware tactics and debug and disassemble malicious binaries.
In this online, self-paced Social Engineering and Manipulation training class, you will learn how some of the most elegant social engineering attacks take place. Learn to perform these scenarios and what is done during each step of the attack.
In this free self-paced online training course, you’ll co main topics: Information Gathering, Backdooring and Co Steps, how to use system specific tools to get general information, listener shells, metasploit and meterpreter scripting.
This course will take you from basic concepts to ad scripts in just over 10 hours of material, with a focus on networking and security.
This free Metasploit training class will teach you to utilize the deep capabilities of Metasploit for penetration testing and help you to prepare to run assessments for organizations of any size.
The reality is that attackers never rest, and along with the traditional threats targeting internal networks and systems, an entirely new specifically targeting the cloud has emerged.
Executive
Our free online CISSP (8 domains) training covers topics ranging from operations security, telecommunications, 网络 and internet security, access control systems and methodology and business continuity planning.
Cybrary’s Certified Information Security Manager (CISM) course is a great fit for IT professionals looking to move up in their organization and advance their careers and/or current CISMs looking to learn about the latest trends in the IT industry.
Our free online PMP training course educates on how to initiate, plan and manage a project, as well as the process behind analyzing risk, monitoring and controlling project contracts and how to develop schedules and budgets.
Certified in Risk and Information Systems Control is for IT and business professionals who develop and maintain information system controls, and whose job re around security operations and compliance.
The National Institute of Standards and Technology (NIST) established the Risk Management 框架 (RMF) as a set of operational and procedural standards or guidelines that a US go agency must follow to ensure the compliance of its data systems.
This course helps professionals in the industry build their credentials to advance within their organization, allowing them to learn managerial skills as well as how to apply the best practices to keep organizations systems running well.
Cybrary’s online COBIT certification program offers an opportunity to learn about all the components of the COBIT 5 框架, co e from the business end-to-end to strategies in how effectively managing and go enterprise IT.
Cyber risk, legal considerations and insurance are often o by businesses and this sets them up for major financial de should an incident occur.
Roppers Academy
Roppers is a community dedicated to pro free training to beginners so that they have the best introduction to the field possible and have the knowledge, skills, and confidence required to figure out what the next ten thousand hours will require them to learn.
A free, self-paced curriculum designed to give a beginner all of the foundational knowledge and skills required to be successful. It teaches security fundamentals along with building a strong technical foundation that students will build on for years to come. Full text a as a gitbook. Learning Objectives: Linux, Hardware, Networking, Operating Systems, Power User, Scripting Pre-Reqs: None
Free course designed to teach the fundamentals required to be successful in Capture the Flag competitions and compete in the picoCTF event. Our mentors will track your progress and provide assistance every step of the way. Full text a as a gitbook. Learning Objectives: CTFs, Forensics, Cryptography, Web-Exploitation Pre-Reqs: Linux, Scripting
Free course designed to teach students security theory and have them execute defensi so that they are better prepared against threats online and in the physical world. Full text a as a gitbook. Learning Objectives: Security Theory, Practical Application, Real-World Examples Pre-Reqs: None
TheXero Training Academy - Online Practical Offensi Training
This course covers the very foundations of how WiFi works, through to practical exercises to demonstrate the skills needed to succeed as a professional penetration tester. From personal WPA and WPA2 to secure and insecure Enterprtise WPA, and the latest WPA3. The included lab en allows students to ha practical skills they can use in the real world.
Laboratories
============
Syracuse Uni's SEED
Hands-on Labs for Security Education
Started in 2002, funded by a total of 1.3 million dollars from NSF, and now used by hundreds of educational institutes worldwide, the SEED project's objective is to develop hands-on laboratory exercises (called SEED labs) for computer and information security education and help instructors adopt these labs in their curricula.
Software Security Labs
These labs cover some of the most common in general software. The labs show students how attacks work in exploiting these .
Launching attack to exploit the buffer-o using shellcode. Conducting experiments with several countermeasures.
Using the return-to-libc technique to defeat the "non-executable stack" countermeasure of the buffer-o attack.
This is a redesign of the Set-UID lab (see below).
Launching attacks on pri Set-UID root program. Risks of en . Side effects of system().
Exploiting the race condition in pri program. Conducting experiments with countermeasures.
Exploiting the format string to crash a program, steal sensiti, or modify critical data.
Launch attack to exploit the Shellshock that is discovered in late 2014.
Network Security Labs
These labs co on 网络 security, ranging from attacks on TCP/IP and DNS to 网络 security technologies (Firewall, VPN, and IPSec).
Launching attacks to exploit the of the TCP/IP 协议, including session hijacking, SYN flooding, TCP reset attacks, etc.
Using the heartbleed attack to steal secrets from a remote 服务端.
Using several methods to conduct DNS pharming attacks on computers in a LAN en.
Using the Kaminsky method to launch DNS cache poisoning attacks on remote DNS servers.
Writing programs to sniff packets sent over the local 网络; writing programs to spoof types of packets.
Writing a simple packet-filter firewall; playing with Linux's built-in firewall software and web-proxy firewall; experimenting with ways to evade firewalls.
Implement a simple (客户端/服务端), and use it to bypass firewalls.
Design and implement a transport-layer for Linux, using the TUN/TAP technologies. This project requires at least a month of time to finish, so it is good for final project.
Implement the IPSec 协议 in the Minix operating system and use it to set up Private Networks.
Implementing a simple firewall in Minix operating system.
Web Security Labs
These labs cover some of the most common in web applications. The labs show students how attacks work in exploiting these .
#### Elgg-Based Labs
Elgg is an open-源码 social-网络 system. We ha it for our labs.
Launching the cross-site scripting attack on a web application. Conducting experiments with several countermeasures.
Launching the cross-site request forgery attack on a web application. Conducting experiments with several countermeasures.
Experimenting with the web tracking technology to see how users can be checked when they browse the web.
Launching the SQL-injection attack on a web application. Conducting experiments with several countermeasures.
#### Collabti Labs
Collabtive is an open-源码 web-based project management system. We ha it for our labs.
Launching the cross-site scripting attack on a web application. Conducting experiments with several countermeasures.
Launching the cross-site request forgery attack on a web application. Conducting experiments with several countermeasures.
Launching the SQL-injection attack on a web application. Conducting experiments with several countermeasures.
Exploring browser's access control system to understand its security policies.
#### PhpBB-Based Labs
PhpBB is an open-源码 web-based message board system, allowing users to post messages. We ha it for our labs.
Launching the cross-site scripting attack on a web application. Conducting experiments with several countermeasures.
Launching the cross-site request forgery attack on a web application. Conducting experiments with several countermeasures.
Launching the SQL-injection attack on a web application. Conducting experiments with several countermeasures.
Launching the ClickJacking attack on a web site. Conducting experiments with several countermeasures.
System Security Labs
These labs cover the security mechanisms in operating system, mostly focusing on access control mechanisms in Linux.
Exploring the POSIX 1.e capability system in Linux to see how pri can be divided into smaller pieces to ensure the compliance with the Least Pri principle.
Designing and implementing an integrated access control system for Minix that uses both capability-based and role-based access control mechanisms. Students need to modify the Minix kernel.
Designing and implementing an encrypted file system for Minix. Students need to modify the Minix kernel.
Cryptography Labs
These labs co essential concepts in cryptography, including secrete-key encryption, one-way hash function, and public-key encryption and PKI.
Exploring the secret-key encryption and its applications using OpenSSL.
Exploring one-way hash function and its applications using OpenSSL.
Exploring public-key cryptography, digital signature, certificate, and PKI using OpenSSL.
Mobile Security Labs
These labs focus on the smartphone security, co the most common and attacks on mobile devices. An Android VM is provided for these labs.
Insert malicious 代码 inside an existing Android app, and repackage it.
Develop an OTA (O) package from scratch to root an Android device.
Pentester Lab
There is only one way to properly learn web penetration testing: by getting your hands dirty. We teach how to manually find and exploit . You will understand the root cause of the problems and the methods that can be used to exploit them. Our exercises are based on common found in different systems. The issues are not emulated. We provide you real systems with real .
This exercise explains how you can, from a SQL injection, gain access to the administration console. Then in the administration console, how you can run commands on the system.
This exercise explains how you can, from a blind SQL injection, gain access to the administration console. Then in the administration console, how you can run commands on the system.
This exercise explains how you can from a SQL injection gain access to the administration console. Then in the administration console, how you can run commands on the system.
This exercise is a set of the most common web .
This exercise is a set of the most common web .
This exercice describes the exploitation of a local file include with limited access. Once 代码 execution is gained, you will see some post exploitation tricks.
This exercice explains how to perform a Linux host review, what and how you can check the configuration of a Linux 服务端 to ensure it is securely configured. The re system is a traditional Linux-Apache-Mysql-PHP (LAMP) 服务端 used to host a blog.
This exercise explains how you can tamper with an encrypted cookies to access another user's account.
After a short brute force introduction, this exercice explains the tampering of rack cookie and how you can e to modify a signed cookie (if the secret is trivial). Using this issue, you will be able to escalate your pri and gain commands execution.
This course details the exploitation of a weakness in the authentication of a PHP website. The website uses Cipher Block Chaining (CBC) to encrypt information provided by users and use this information to ensure authentication. The application also leaks if the padding is valid when decrypting the information. We will see how this behavior can impact the authentication and how it can be exploited.
This exercise explains how you can use a Cross-Site Scripting to get access to an administrator's cookies. Then how you can use his/her session to gain access to the administration to find a SQL injection and gain 代码 execution using it.
This exercice explains the interactions between Tomcat and Apache, then it will show you how to call and attack an Axis2 Web service. Using information retrieved from this attack, you will be able to gain access to the Tomcat Manager and deploy a WebShell to gain commands execution.
This exercise covers the exploitation of a session injection in the Play 框架. This issue can be used to tamper with the content of the session while bypassing the signing mechanism.
This exercise covers the exploitation of a XML entities in the Play 框架.
This exercise covers the exploitation of C. This allows an attacker to gain access to unaccessible pages using crafted requests. This is a common trick that a lot of testers miss.
This exercise explains how you can exploit C to gain access to the administration interface of a Wordpress installation.
This exercise explains how you can exploit C to retrieve the 源码 代码 of an application and gain 代码 execution.
This exercise explains how you can exploit C to retrie from a 数据库.
This exercise explains how you can exploit C to gain 代码 execution. This was exploited to compromise Debian's wiki and Python documentation website.
This exercise covers the exploitation of a Bash through a CGI.
Dr. Thorsten Schneider's Binary Auditing
Learn the fundamentals of Binary Auditing. Know how HLL mapping works, get more inner file understanding than ever. Learn how to find and analyse software . Dig inside Buffer O and learn how exploits can be pre. Start to analyse your first and malware the safe way. Learn about simple tricks and how look like using real life examples.
Damn Web Application (DVWA)
Damn Web Application (DVWA) is a PHP/MySQL web application that is damn . Its main goal is to be an aid for security professionals to test their skills and tools in a legal en, help web de better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room en.
Damn Web Services
Damn Web Services is an insecure web application with multiple web service components that can be used to learn real world web service . The aim of this project is to help security professionals learn about Web Application Security through the use of a practical lab en.
NOWASP (Mutillidae)
OWASP Mutillidae II is a free, open 源码, deliberately web-application pro a target for web-security enthusiest. With dozens of vulns and hints to help the user; this is an easy-to-use web hacking en designed for labs, security enthusiast, classrooms, CTF, and assessment 工具 targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for assessment software.
OWASP Broken Web Applications Project
Open Web Application Security Project (OWASP) Broken Web Applications Project, a collection of web applications that is distributed on a Machine in format compatible with their no-cost and commercial products.
OWASP Bricks
Bricks is a web application security learning platform built on PHP and MySQL. The project focuses on of commonly seen application security issues. Each 'Brick' has some sort of security issue which can be le manually or using automated software tools. The mission is to 'Break the Bricks' and thus learn the aspects of web application security.
OWASP Hackademic Challenges Project
The Hackademic Challenges implement realistic scenarios with known in a safe and controllable en. Users can attempt to discover and exploit these in order to learn important concepts of information security through an attacker's perspective.
Web Attack and Exploitation Distro (WAED)
The Web Attack and Exploitation Distro (WAED) is a lightweight machine based on Debian Distribution. WAED is pre-configured with real-world web applications in a sandboxed en. It includes pentesting tools that aid in finding web application . The main moti behind this project is to provide a practical en to learn about web application's without the hassle of dealing with complex configurations. Currently, there are around 18 applications installed in WAED.
Xtreme Web Application (XVWA)
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security. It’s not ad to host this application online as it is designed to be “Xtremely ”. We recommend hosting this application in local/controlled en and sharpening your application security ninja skills with any tools of your own choice. It’s totally legal to break or hack into this. The idea is to e web application security to the community in possibly the easiest and fundamental way. Learn and acquire these skills for good purpose. How you use these skills and knowledge base is not our responsibility.
WebGoat: A deliberately insecure Web Application
WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons.
Audi-1's SQLi-LABS
SQLi-LABS is a comprehensive test bed to Learn and understand nitti gritty of SQL injections and thereby helps professionals understand how to protect.
Capture the Flag
================
#### Hack The Box
This pentester training platform/lab is full of machines (boxes) to hack on the different difficulty level. Majority of the content generated by the community and released on the website after the staff's approval. Besides boxes users also can pick static challenges or work on ad tasks like Fortress or Endgame.
####
We all learn in different ways: in a group, by yourself, reading books, watching/listening to other people, making notes or things out for yourself. Learning the basics & understanding them is essential; this knowledge can be enforced by then putting it into practice.
Over the years people have been creating these resources and a lot of time has been put into them, creating 'hidden gems' of training material. However, unless you know of them, its hard to discover them.
So was born to cover as many as possible, creating a catalogue of 'stuff' that is (legally) 'breakable, hackable & exploitable' - allowing you to learn in a safe en and practice 'stuff' out.
When something is added to 's 数据库 it will be indexed as best as possible, to try and give you the best match possible for what you're wishing to learn or experiment with.
#### CTF Write Ups
A general collection of information, tools, and tips regarding CTFs and similar security competitions.
Wiki-like CTF write-ups repository, maintained by the community. (2015)
Wiki-like CTF write-ups repository, maintained by the community. (2015)
Wiki-like CTF write-ups repository, maintained by the community. (2014)
Wiki-like CTF write-ups repository, maintained by the community. (2013)
CTF Repos
This site is primarily the work of psifertex since he needed a dump site for a of CTF material and since many other public sites documenting the art and sport of Hacking Capture the Flag events have come and gone over the years.
The Jonathan Salwan's little corner.
CTF Courses
Free course designed to teach the fundamentals of Forensics, Cryptography, and Web-Exploitation required to be successful in Capture the Flag competitions. At the end of the course, students compete in the picoCTF event with guidance from instructors. Full text a as a gitbook.
SecurityTube Playlists
======================
Security Tube hosts a large range of video tutorials on IT security including penetration testing , exploit de and reverse engineering.
* SecurityTube Metasploit 框架 Expert (SMFE)<br>
This video series covers basics of Metasploit 框架. We will look at why to use metasploit then go on to how to exploit with help of metasploit and post exploitation techniques with meterpreter.
* Wireless LAN Security and Penetration Testing Megaprimer<br>
This video series will take you through a journey in wireless LAN (in)security and penetration testing. We will start from the very basics of how WLANs work, graduate to packet sniffing and injection attacks, move on to audit infrastructure , learn to break into WLAN clients and finally look at ad hybrid attacks in wireless and applications.
* Exploit Research Megaprimer<br>
In this video series, we will learn how to program exploits for published online. We will also look at how to use tools and techniques to find Zero Day in both open and closed 源码 software.
* Buffer O Exploitation Megaprimer for Linux<br>
In this video series, we will understand the basic of buffer o and understand how to exploit them on linux based systems. In later , we will also look at how to apply the same principles to Windows and other selected operating systems.
Open Security Books
===================
#### Crypto 101 - lvh
Comes with e you need to understand complete systems such as SSL/TLS: block ciphers, stream ciphers, hash functions, message authentication codes, public key encryption, key agreement protocols, and signature algorithms. Learn how to exploit common cryptographic flaws, armed with nothing but a little time and your fa programming language. Forge administrator cookies, reco, and e your own random number generator.
#### A Graduate Course in Applied Cryptography - Dan Boneh & Shoup
This book is about constructing practical cruptosystems for which we can argue security under plausible assumptions. The book covers many constructions for different tasks in cryptography. For each task we define the required goal. To analyze the constructions, we develop a unified 框架 for doing cryptographic proofs. A reader who masters this 框架 will capable of applying it to new constructions that may not be covered in this book. We describe common mistakes to avoid as well as attacks on real-world systems that illustratre the importance of rigor in cryptography. We end every chapter with a fund application that applies the ideas in the chapter in some unexpected way.
#### Security Engineering, A Guide to Building Dependable Distributed Systems - Ross Anderson
The world has changed radically since the first edition of this book was published in 2001. Spammers, virus writers, phishermen, money launderers, and spies now trade busily with each other in a lively online criminal economy and as they specialize, they get better. In this indispensable, fully updated guide, Ross Anderson reveals how to build systems that stay dependable whether faced with error or malice. Here?s straight talk on critical topics such as technical engineering basics, types of attack, specialized protection mechanisms, security psychology, policy, and more.
#### Reverse Engineering for Beginners - Dennis Yurichev
This book offers a primer on re, delving into disassembly 代码-le engineering and explaining how to decipher assembly language for those beginners who would like to learn to understand x86 (which accounts for almost all executable software in the world) and ARM 代码 created by C/C++ compilers.
#### CTF Field Guide - Trail of Bits
The focus areas that CTF competitions tend to measure are discovery, exploit creation, toolkit creation, and operational tradecraft.. Whether you want to succeed at CTF, or as a computer security professional, you'll need to become an expert in at least one of these disciplines. Ideally in all of them.
Challenges
==========
Documentation
=============
#### OWASP - Open Web Application Security Project
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security , so that indi and organizations worldwide can make informed decisions about true software security risks.
#### Applied Crypto Hardening - bettercrypto.org
This guide arose out of the need for system administrators to have an updated, solid, well re-searched and thought-through guide for configuring SSL, PGP,SSH and other cryptographic tools in the post-Snowdenage. Triggered by the NSA leaks in the summer of 2013, many system administrators and IT security officers saw the need to strengthen their encryption settings.This guide is specifically written for these system administrators.
#### PTES - Penetration Testing Execution Standard
The penetration testing execution standard co related to a penetration test - from the initial communication and reasoning behind a pentest, through the intelligence gathering and threat modeling phases where testers are working behind the scenes in order to get a better understanding of the tested organization, through research, exploitation and post exploitation, where the technical security expertise of the testers come to play and combine with the business understanding of the engagement, and finally to the reporting, which captures the entire process, in a manner that makes sense to the customer and provides the most value to it.
#### Whonix Documentation
This is a course in defensi.
Related Awesome Lists
=====================
A collection of awesome penetration testing resources, tools and other shiny things.
A curated list of resources for learning about application security.
A curated list of awesome malware analysis tools and resources.
A collection of android security related resources.
A curated list of CTF frameworks, libraries, resources and softwares.
A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
A curated list of awesome honeypots, tools, components and much more.
A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams.
A curated list of awesome Threat Intelligence resources.
A collection of tools de by other researchers in the Computer Science area to process 网络 traces.
A curated list of awesome forensic analysis tools and resources.
A curated list of awesome Hacking tutorials, tools and resources.
A curated list of resources related to Industrial Control System (ICS) security.
This list is for anyone wishing to learn about web application security but do not have a starting point.
A curated list of awesome Security talks.
A curated list of awesome YARA rules, tools, and people.
SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
Contributing
=====================
Pull requests and issues with suggestions are welcome!
License
=======
![Creati License]()
This work is licensed under a Creati Attribution 4.0 International License.
项目信息
开发语言：未知
Star 数：5755
技术要点
该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕 A curated list of awesome infosec courses and training resources.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。
| 资源标题 | awesome-infosec - 精心策划的信息安全课程和TRA列表 |
| 所属分类 | 黑客技术 |
| 发布作者 | admin |
| 发布时间 | 2026-10-05 22:02:55 |
| 下载权限 | 免费下载 |
| 附件数量 | 2 个下载链接 |
| 浏览次数 | 499 |
| 讨论数量 | 0 |
| 主题状态 | 正常讨论中 |