CTF-notes - Everything needed for doing CTFs

项目说明

Project tree

.
* E(./E)
* Checklists(./E/Checklists)
* Linux Post exploitation(./E/Linux Post exploitation)
* Windows buffer o(./E/Windows buffer o)
* Windows Post exploitation(./E/Windows Post exploitation)
* pentestbook(./pentestbook)
* assets(./pentestbook/assets)
* physical_access_to_machine(./pentestbook/physical_access_to_machine)
* styles(./pentestbook/styles)
* writeups(./pentestbook/writeups)
* AwesomeXSS(./AwesomeXSS)
* Database(./AwesomeXSS/Database)
* resource-threat-hunting(./resource-threat-hunting)
* Offensieets(./Offensieets)
* ctfs-walkthroughs(./Offensieets/ctfs-walkthroughs)
* lab(./Offensieets/lab)
* memory-forensics(./Offensieets/memory-forensics)
* offensi(./Offensieets/offensi)
* offensi(./Offensieets/offensi)
* SCADA PLC ICS Pentest PDFs(./SCADA PLC ICS Pentest PDFs)
* awesome-industrial-control-system-security(./SCADA PLC ICS Pentest PDFs/awesome-industrial-control-system-security)
* PayloadsAllTheThings(./PayloadsAllTheThings)
* AWS Amazon Bucket S3(./PayloadsAllTheThings/AWS Amazon Bucket S3)
* Command Injection(./PayloadsAllTheThings/Command Injection)
* CRLF Injection(./PayloadsAllTheThings/CRLF Injection)
* CSRF Injection(./PayloadsAllTheThings/CSRF Injection)
* CS(./PayloadsAllTheThings/CS)
* C(./PayloadsAllTheThings/C)
* Directory Tra(./PayloadsAllTheThings/Directory Tra)
* SAML Injection(./PayloadsAllTheThings/SAML Injection)
* File Inclusion(./PayloadsAllTheThings/File Inclusion)
* GraphQL Injection(./PayloadsAllTheThings/GraphQL Injection)
* Insecure Deserialization(./PayloadsAllTheThings/Insecure Deserialization)
* Insecure Direct Object References(./PayloadsAllTheThings/Insecure Direct Object References)
* Insecure Management Interface(./PayloadsAllTheThings/Insecure Management Interface)
* Insecure Source Code Management(./PayloadsAllTheThings/Insecure Source Code Management)
* JSON Web Token(./PayloadsAllTheThings/JSON Web Token)
* LaTeX Injection(./PayloadsAllTheThings/LaTeX Injection)
* LDAP Injection(./PayloadsAllTheThings/LDAP Injection)
* Methodology and Resources(./PayloadsAllTheThings/Methodology and Resources)
* NoSQL Injection(./PayloadsAllTheThings/NoSQL Injection)
* OAuth(./PayloadsAllTheThings/OAuth)
* Open Redirect(./PayloadsAllTheThings/Open Redirect)
* Server Side Request Forgery(./PayloadsAllTheThings/Server Side Request Forgery)
* Server Side Template Injection(./PayloadsAllTheThings/Server Side Template Injection)
* SQL Injection(./PayloadsAllTheThings/SQL Injection)
* _template_vuln(./PayloadsAllTheThings/_template_vuln)
* Type Juggling(./PayloadsAllTheThings/Type Juggling)
* Upload Insecure Files(./PayloadsAllTheThings/Upload Insecure Files)
* Web Cache Deception(./PayloadsAllTheThings/Web Cache Deception)
* Web Sockets(./PayloadsAllTheThings/Web Sockets)
* XPATH Injection(./PayloadsAllTheThings/XPATH Injection)
* XSS Injection(./PayloadsAllTheThings/XSS Injection)
* XXE Injection(./PayloadsAllTheThings/XXE Injection)
* Bypassing-Web-Application-Firewalls(./Bypassing-Web-Application-Firewalls)
* Hydra-Cheatsheet(./Hydra-Cheatsheet)
* Powershell-Cheatsheet(./Powershell-Cheatsheet)
* Acti(./Acti)
* oscp(./oscp)
* recon_enum(./oscp/recon_enum)
* reports(./oscp/reports)
* templates(./oscp/templates)
* xapax.github.io(./xapax.github.io)
* css(./xapax.github.io/css)
* img(./xapax.github.io/img)
* js(./xapax.github.io/js)
* reveng(./xapax.github.io/reveng)
* Awesome-Hacking-Resources(./Awesome-Hacking-Resources)
* Books(./Books)
* Notes VA(./Notes VA)
* lpeworkshop(./Notes )
* OSCPRepo(./OSCPRepo)
* CheetSheets(./OSCPRepo/CheetSheets)
* Local Info Enum(./OSCPRepo/Local Info Enum)
* PDFs&Documents(./OSCPRepo/PDFs&Documents)
* Priv Esc Checks(./OSCPRepo/Priv Esc Checks)
* Process&Methodology(./OSCPRepo/Process&Methodology)
* Reporting(./OSCPRepo/Reporting)
* Scanning&Recon(./OSCPRepo/Scanning&Recon)
* Tools(./OSCPRepo/Tools)
* KeepNotes(./OSCPRepo/KeepNotes)
* lists(./OSCPRepo/lists)
* scripts(./OSCPRepo/scripts)
* OSCP-Materials-master(./OSCP-Materials-master)
* Cheat Sheets(./OSCP-Materials-master/Cheat Sheets)
* Linux Pri Escalation and Post Exploitation(./OSCP-Materials-master/Linux Pri Escalation and Post Exploitation)
* Metasploit-Meterpreter-Msfvenom(./OSCP-Materials-master/Metasploit-Meterpreter-Msfvenom)
* PASSWORD CRACKING and Usefull TOOLS and Commands(./OSCP-Materials-master/PASSWORD CRACKING and Usefull TOOLS and Commands)
* SHELLCODE and Buffer Over Flow(./OSCP-Materials-master/SHELLCODE and Buffer Over Flow)
* Understand Pri Escalation(./OSCP-Materials-master/Understand Pri Escalation)
* Window Pri Escalation and Post Exploitation(./OSCP-Materials-master/Window Pri Escalation and Post Exploitation)
* ctf(./ctf)
* natas(./ctf/natas)
* metasploit scripts(./metasploit scripts)
* penbook(./penbook)
* assets(./penbook/assets)
* physical_access_to_machine(./penbook/physical_access_to_machine)
* styles(./penbook/styles)
* writeups(./penbook/writeups)
* python-pty-shells-master(./python-pty-shells-master)
* liodeus.github.io(./liodeus.github.io)
* assets(./liodeus.github.io/assets)
* _includes(./liodeus.github.io/_includes)
* _layouts(./liodeus.github.io/_layouts)
* _posts(./liodeus.github.io/_posts)
* OSEP-Code-Snippets(./OSEP-Code-Snippets)
* AppLocker Bypass PowerShell Runspace(./OSEP-Code-Snippets/AppLocker Bypass PowerShell Runspace)
* Fileless Lateral Mo(./OSEP-Code-Snippets/Fileless Lateral Mo)
* Linux Shellcode Encoder(./OSEP-Code-Snippets/Linux Shellcode Encoder)
* Linux Shellcode Loaders(./OSEP-Code-Snippets/Linux Shellcode Loaders)
* MiniDump(./OSEP-Code-Snippets/MiniDump)
* MSSQL(./OSEP-Code-Snippets/MSSQL)
* PrintSpoofer.NET(./OSEP-Code-Snippets/PrintSpoofer.NET)
* ROT Shellcode Encoder(./OSEP-Code-Snippets/ROT Shellcode Encoder)
* Sections Shellcode Process Injector(./OSEP-Code-Snippets/Sections Shellcode Process Injector)
* Shellcode Process Hollowing(./OSEP-Code-Snippets/Shellcode Process Hollowing)
* Shellcode Process Injector(./OSEP-Code-Snippets/Shellcode Process Injector)
* Simple Shellcode Runner(./OSEP-Code-Snippets/Simple Shellcode Runner)
* XOR Shellcode Encoder(./OSEP-Code-Snippets/XOR Shellcode Encoder)
* pentest_notebook(./pentest_notebook)
* Acti(./pentest_notebook/Acti)
* Blue Team(./pentest_notebook/Blue Team)
* Cheatsheets(./pentest_notebook/Cheatsheets)
* Code snippets(./pentest_notebook/Code snippets)
* Consultation(./pentest_notebook/Consultation)
* DFIR(./pentest_notebook/DFIR)
* Metasploit(./pentest_notebook/Metasploit)
* Mind Maps(./pentest_notebook/Mind Maps)
* Mobile Pentest(./pentest_notebook/Mobile Pentest)
* Networking(./pentest_notebook/Networking)
* Network Pentest(./pentest_notebook/Network Pentest)
* Pri Escalation(./pentest_notebook/Pri Escalation)
* SCREENSHOTS(./pentest_notebook/SCREENSHOTS)
* Scripts(./pentest_notebook/Scripts)
* Testing Checklists(./pentest_notebook/Testing Checklists)
* VA SCAN CONFIG(./pentest_notebook/VA SCAN CONFIG)
* Web Pentest(./pentest_notebook/Web Pentest)
* WIFI Pentest(./pentest_notebook/WIFI Pentest)
* Awesome-Adion-References(./Awesome-Adion-References)
* Buffer_O(./Buffer_O)
* Screenshots(./Buffer_O/Screenshots)
* Cheatsheet-God(./Cheatsheet-God)
* Linux-Pri(./Linux-Pri)
* MSF-(./MSF-)
* OSCP-Exam-Report-Template(./OSCP-Exam-Report-Template)
* Red-Team-Infrastructure-Wiki(./Red-Team-Infrastructure-Wiki)
* images(./Red-Team-Infrastructure-Wiki/images)
* security-cheatsheets(./security-cheatsheets)
* Open-Source-Security-List-(./Open-Source-Security-List-)
* awesome-mitre-attack(./awesome-mitre-attack)
* escalationserver(./escalationserver)
* AutoLocalPri(./escalationsercalation)
* BeRoot(./escalationser)
* JAWS(./escalationserver/JAWS)
* kernelpop(./escalationser)
* linux-smart-enumeration(./escalationserion)
* mimikatz(./escalationser)
* Powerless(./escalationser)
* PowerLessShell(./escalationser)
* PowerSploit(./escalationser)
* Privesc(./escalationser)
* PrivEsc(./escalationser)
* pypykatz(./escalationser)
* pentest-book(./pentest-book)
* exploitation(./pentest-book/exploitation)
* enumeration(./pentest-book/enumeration)
* img(./pentest-book/img)
* mobile(./pentest-book/mobile)
* others(./pentest-book/others)
* post-exploitation(./pentest-book/post-exploitation)
* recon(./pentest-book/recon)
* sections(./pentest-book/sections)
* pentest_compilation(./pentest_compilation)
* Phishing(./pentest_compilation/Phishing)
* PostExplotation(./pentest_compilation/PostExplotation)
* Recon(./pentest_compilation/Recon)
* Shells(./pentest_compilation/Shells)
* Web(./pentest_compilation/Web)
* PENTESTING-BIBLE(./PENTESTING-BIBLE)
* 1-part-100-article(./PENTESTING-BIBLE/1-part-100-article)
* 10-part-100-article(./PENTESTING-BIBLE/10-part-100-article)
* 11-part-24-article(./PENTESTING-BIBLE/11-part-24-article)
* 2-part-100-article(./PENTESTING-BIBLE/2-part-100-article)
* 2(./PENTESTING-BIBLE/2)
* 3-part-100-article(./PENTESTING-BIBLE/3-part-100-article)
* 4-part-100-article(./PENTESTING-BIBLE/4-part-100-article)
* 5-part-100-article(./PENTESTING-BIBLE/5-part-100-article)
* 6-part-100-article(./PENTESTING-BIBLE/6-part-100-article)
* 7-part-100-article(./PENTESTING-BIBLE/7-part-100-article)
* 8-part-100-article(./PENTESTING-BIBLE/8-part-100-article)
* 9-part-100-article(./PENTESTING-BIBLE/9-part-100-article)
* latest_articles(./PENTESTING-BIBLE/latest_articles)
* new(./PENTESTING-BIBLE/new)
* amr-git-dot.github.io(./amr-git-dot.github.io)
* _includes(./amr-git-dot.github.io/_includes)
* _layouts(./amr-git-dot.github.io/_layouts)
* _pages(./amr-git-dot.github.io/_pages)
* _sass(./amr-git-dot.github.io/_sass)
* assets(./amr-git-dot.github.io/assets)
* _data(./amr-git-dot.github.io/_data)
* _posts(./amr-git-dot.github.io/_posts)
* zer1t0.gitlab.io(./zer1t0.gitlab.io)
* archetypes(./zer1t0.gitlab.io/archetypes)
* content(./zer1t0.gitlab.io/content)
* layouts(./zer1t0.gitlab.io/layouts)
* static(./zer1t0.gitlab.io/static)
* Actin-Cheat-Sheet(./Actin-Cheat-Sheet)
* OSEP(./OSEP)
* Bypass_Defender(./OSEP/Bypass_Defender)
* Lateral_Mo(./OSEP/Lateral_Mo)
* MSSQL(./OSEP/MSSQL)
* Payloads(./OSEP/Payloads)
* Pentest-E(./Pentest-E)
* to-do-wip(./Pentest-E/to-do-wip)
* writeups(./Pentest-E/writeups)
* e(./Pentest-E/e)
* resources(./Pentest-E/resources)
* wip-osint(./Pentest-E/wip-osint)
* RedTeaming_CheatSheet(./RedTeaming_CheatSheet)
* cloud(./RedTeaming_CheatSheet/cloud)
* coding(./RedTeaming_CheatSheet/coding)
* infrastructure(./RedTeaming_CheatSheet/infrastructure)
* windows-ad(./RedTeaming_CheatSheet/windows-ad)
* tbhm(./tbhm)
* v4(./tbhm/v4)
* pronotes(./pronotes)
* oscp-pre-preparation-plan-and-notes(./oscp-pre-preparation-plan-and-notes)
* acti(./acti)
* AD-Attack-Defense(./AD-Attack-Defense)
* Security-Reference-Guide(./Security-Reference-Guide)
* blue-defense(./Security-Reference-Guide/blue-defense)
* code-tools(./Security-Reference-Guide/code-tools)
* cyber-intelligence(./Security-Reference-Guide/cyber-intelligence)
* dfir-digital-forensics-and-incident-response(./Security-Reference-Guide/dfir-digital-forensics-and-incident-response)
* grey-pri(./Security-Reference-Guide/grey-pri)
* red-offensive(./Security-Reference-Guide/red-offensive)
* security-logging(./Security-Reference-Guide/security-logging)
* training(./Security-Reference-Guide/training)
* web-app-hacking(./Security-Reference-Guide/web-app-hacking)
* port-forwarding(./port-forwarding)
* Checklists(./Checklists)
* Windows-Pri(./Windows-Pri)
* Web-CTF-Cheatsheet(./Web-CTF-Cheatsheet)
* scripts(./Web-CTF-Cheatsheet/scripts)

项目信息

开发语言：HTML

Star 数：796

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Everything needed for doing CTFs展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。