Infosec_Reference - An Information Security Reference That Doesn't Suc

项目说明

InfoSec Reference

Any communicaitons occuring within the United States should be as compromised and no privacy guaranteed unless E2EE was used and (Not new).

(New: The US gov now has legal authority to compel recording or monitoring by any citizen within the United States, regardless of their proximity or interaction with the supposed crime being monitored. Among the other issues made possible/enabled through passage of the legislation) I have kept this project non-political, but this is absolutely terrible.

Full support by Biden and his administration as well shows that this is not some partisan issue(Those who claim so, don't be a useful idiot).

I understand that people seem to think I'm a clown, so hopefully this entertainment will help keep this in mind when relevant. There is no other clearer sign of the corruption and ownership of state sur apparatus for the haves than this bill.

See

Or - To continue to demonstrate why tools like this are essential to our mission, we need to use them, while also holding oursel for doing so properly and in compliance with legal requirements. - Paul Abbate (FBI Deputy Director 2024)

<di="center">
<img src="images/Markdown-000000.svg">
<img src="./images/v1.svg">
</div>
<di = "center">
<img src="images/10k-xkcd.png" width="600" height="411"><p>From
</div>

“The first question is by no means whether we are content with ourselves, but whether we are content with anything at all. If we affirm one single moment, we thus affirm not only ourselves but all existence. For nothing is self-sufficient, neither in us ourselves nor in things, and if our soul has trembled with happiness and sounded like a harp string just once, all eternity was needed to produce this one event – and in this single moment of affirmation all eternity was called good, redeemed, justified, and affirmed.”

Some Nihilist

----------------------------------------------------------------------

Goal:

The goal of this project is to act as a free resource for anyone interested in learning more about Information Security.

- A list of techinques, tools and tactics to learn from or reference.
- Rich resource of infosec knowledge for anyone to browse through as a jumping off point for niches OR as a reference/recall method for stuff.
- Something like a "Yellow Pages" in the sense of you know something exists, but what was it called....
* 'If you give a man a fish, he is hungry again in an hour. If you teach him to catch a fish, you do him a good turn.'
- To be clear, these aren't personal notes. I keep this repo maintained as a way of having pointers to information that I feel might help build someone's skillset or increase their understanding of attacks/methods/defenses.

This project is not meant to condone illegal or malicious acti.

For a HTML of this reference, check out: not a webdev. Can you tell?).

For latest content updates, check the git history.

Want to contribute a link?

* Anything relevant that isn't already in or covered would be/is appreciated.

If this resource has helped you in any way(and didn't increase your frustration), please consider making a donation to Doctors Without Borders or Amnesty International.

----------------------------------------------------------------------

Index - Table of Contents

* Pre-ATT&CK
* ATT&CK Stuff
* Attacking & Securing Acti
* Anonymity/OpSec/Privacy
* :beginner: Basic Security Information :beginner:
* BIOS/UEFI/Firmware Attacks/Defense
* :hammer:Building a Testing Lab:hammer:
* :car: Car hacking :car:
* :money_with_wings:Career:money_with_wings:
* Cheat Sheets
* Cloud
* :video\_camera:Conferences/Recordings:video\_camera:
* :bento:Containers:bento:
* :star:Courses & Training:star:
* :game\_die:Cryptography & Encryption:game\_die:
* :checkered\_flag: CTFs & Wargames :checkered\_flag:
* Darknets
* Data Anaylsis &
* :sunrise: Defense :sunrise:
* :newspaper: Documentation & Reporting :newspaper:
* Embedded Device Security
* Exfiltration
* :rainbow: Exploit De :rainbow:
* Forensics & Incident Response
* :bug: Fuzzing & Bug Hunting :bug:
* :video\_game: Game Hacking :video\_game:
* :honey\_pot:Honeypots:honey\_pot:
* Interesting Things & Useful Information
* Logging, Monitoring, & Threat Hunting
* :skull:Malware:skull:
* :warning:网络 Attacks & Defense:warning:
* :triangular\_flag\_on\_post:网络 Security Monitoring & Logging:triangular\_flag\_on\_post:
* :telescope:Open 源码 Intelligence Gathering - OSINT:telescope:
* Passwords
* :fishing\_pole\_and\_fish:Phishing:fishing\_pole\_and\_fish:
* :door:Physical Security:door:
* Pri Escalation and Post-Exploitation
* AppSec/Programming Stuff
* :lemon:Rants & Writeups:lemon:
* :izakaya\_lantern: Red Teaming/Penetration Testing Stuff :izakaya\_lantern:
* REMATH Reverse Engineering
* Reverse Engineering
* Rootkits
* :smiley:Social Engineering:smiley:
* :nut\_and\_bolt: System Internals \(Linux/Windows\) :nut\_and\_bolt:
* Threat Modeling
* :fire:UI/UX Design:fire:
* :sunflower: Web :sunflower:
* :signal\_strength: Wireless Networks and RF Devices :signal\_strength:
* Notable Policy Docs
* Insurance Data Security Model Law
* NIST Cyber Security Framework
* PCI-DSS V3.2.1

A Quote:

* "As the Americans learned so painfully in Earth's final century, free flow of information is the only safeguard against tyranny. The once-chained people whose leaders at last lose their grip on information flow will soon burst with freedom and , but the free nation gradually constricting its grip on public discourse has begun its rapid slide into despotism. Beware of he who would deny you access to information, for in his heart he dreams himself your master."
- Commissioner Pravin Lal, Peacekeeping Forces (Alpha Centauri, 1999)

Another Quote:

* "Nowhere does Bokonon warn against a person’s trying to discover the limits of his karass and the nature of the work God Almighty has had it do. Bokonon simply observes that such in are bound to be incomplete. In the autobiographical section of The Books of Bokanon he writes a parable on the folly of pretending to discover, to understand: I once knew an Episcopalian lady in Newport, Rhode Island, who asked me to design and build a doghouse for her Great Dane. The lady claimed to understand God and His Ways of Working perfectly. She could not understand why anyone should be puzzled about what had been or about what was going to be. And yet, when I showed her a blueprint of the doghouse I proposed to build, she said to me, “I’m sorry, but I ne read one of those things.” “Give it to your husband or your minister to pass on to God,” I said, “and, when God finds a minute, I’m sure he’ll explain this doghouse of mine in a way that even you can understand.” She fired me. I shall ne her. She believed that God liked people in sailboats much better than He liked people in motorboats. She could not bear to look at a worm. When she saw a worm, she screamed. She was a fool, and so am I, and so is anyone who thinks he sees what God is Doing, [writes Bokonon].
- Cat's Cradle(The Books of Bokonon), Kurt

Thucydides, The Peloponnesian War - Athenian envoys:

* For ourselves, we shall not trouble you with specious pretences—either of how we have a right to our empire because we o the Mede, or are now attacking you because of wrong that you have done us—and make a long speech which would not be believed; and in return we hope that you, instead of thinking to influence us by saying that you did not join the Lacedaemonians, although their colonists, or that you have done us no wrong, will aim at what is feasible, holding in view the real sentiments of us both; since you know as well as we do that right, as the world goes, is only in question between equals in power, while the strong do what they can and the weak suffer what they must.

项目信息

开发语言：CSS

Star 数：6001

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕An Information Security Reference That Doesn't Suck; for non-MS Git hosted version.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。