Awesome-Cybersecurity-Handbooks - A huge chunk of my personal notes since I started

项目说明

<p align="center">
<img width="450" height="580" src="images/awesome-cybersecurity-handbooks.png">
</p>

Awesome Cybersecurity Handbooks ![Awesome]()

!GitHub stars !GitHub forks !GitHub watchers</br>
!GitHub commit activity (branch) !GitHub contributors

A huge chunk of my personal notes since I started playing CTFs and working as a red teamer. These are living documents and I updated or add to them relatively often.

> [!IMPORTANT]
> Please note that these documents are only provided for legal purposes. Please do not use the content for illigal actions.

If you like the project, give it a :star: or share it on platforms. My goal is to create and to gather resources for people to help them on their career.

> [!NOTE]
> As always, it is pretty hard to point out every source for different tools or payloads. If I used your payload anywhere in my notes and you wanted to be mentioned, feel free to reach out to me on X — or preferably Bluesky — and I will add you asap.

Thank you for reading.

<br>

Table of Contents

| | | | |
| --- | --- | --- | --- |
| 01 Information Gathering | Attack Surface Management | EDR & XDR | Secure Architecture |
| 02 Analysis | Basics | E | Security Operations Center |
| 03 Web Application Analysis | Blockchain | Exploitation | SIEM |
| 04 Database Assessment | Bug Bounty | Frameworks | Simulation & Emulation |
| 05 Password Attacks | Cloud | Hardware | SOAR & SecOps |
| 06 Wireless Attacks | Command and Control | IDS & IPS | Templates |
| 07 Reverse Engineering | Container | IoT | Threat Hunting |
| 08 Exploitation Tools | Cryptography | Malware De | Threat Modeling |
| 09 Sniffing & Spoofing | CVE | Mobile | Wordlists |
| 10 Post Exploitation | Cyber Threat Intelligence | Operations Security | |
| 11 Forensics | Decrypter | OSINT | |
| 12 Reporting Tools | Delivery | Payloads | |
| 13 Social Engineering Tools | Detection Engineering | Persistence | |
| AI & ML | DFIR | Privacy | |

项目信息

开发语言：未知

Star 数：4116

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。