CTF思路
点击放大
Hacking-Resources - This repository contains some resources for ethica
项目说明
Hacking-Resources
This repository contains some resources for ethical hackers penetration tester 😊 This may contain some files, tools, books, and links that need to be used for good purposes only. Do not do any illegal work using these sources.
This is only for keeping some resources and topics in one-place to access easily.
> *Find my 350+ tryhackme rooms' list here*
Sections
* Book List
* E You Need to Know to Become a HACKER
* PART I: THE ESSENTIALS
* PART II: GLOSSARY
* Why is HTML important in pen-testing?
* Why Kali Linux and why in a Machine(VM)??)
* Why learn Debian commands?
* Why use Tor, ProxyChains, Whonix or a VPN?
* Why use nmap, Burp-Suite and SQLMAP?
* Why learn to use the Metasploit Framework?
* Why understand WEP/WPA?
* Why master the air-ng suite (use for wireless hacking)??)
* Why learn how to perform MITM (man in the middle) attacks, sniff networks and tamper data?-attacks,-sniff-networks-and-tamper-data?)
* What is Brute-forcing?
* Why learn XSS, LFI, RFI?
* What is a backdoor in Pen-testing?
* Links of Different Topics
* Course Links
* Free Courses
* MyCollection
* Hack the Box (HTB) machines walkthrough series
* Tools
* Regon-ng
* Intrigue
* SecLists
* Autorize
* ForceSSL
* binwalk
* stegsol text discover tool)
* zardus/ctf-tools
* DidierSte
* Best SQL injection resources
* Capture The Flag
* Capture The Flag Framework
* Hacker101 Syllabus
* Random Collected Topics
* Footprinting and Information Gathering
* PHP and SQL
* System Hacking
* Malware
* Social Engineering
* Denial of Service(DOS))
* SQL Injection
* E IDS, Firewalls, and Honeypots
* Scanning Networks Web Server
* Attack
* Extra
* Exam Preparation
<h1><summary>🔰 Some topics for self Learning 🔰</summary></h1>
<details>
<summary>Topics</summary>
* Attacking HTTPS with Cache Injection
* Bruteforce of PHPSESSID
* Blended Threats and Ja
* Broken Authentication and Session Management
* CAPTCHA Re-Riding Attack
* Chronofeit Phishing
* Click Jacking Attacks
* Cookie E
* Cookie Poisoning
* Cross-Site Port Attacks
* Cross-Site Request Forgery (CSRF)
* Cross-Site Scripting (XSS)
* Cross Site Scripting Attacks
* Bypassing CSRF protections with Click Jacking and
* Denial oF Service Attack
* Direct OS Code Injection
* DNS Cache Poisoning
* E
* Fooling B64_Encode(Payload) on WAFs And Filters
* Generic Cross-Browser Cross-Domain theft
* Hibernate Query Language Injection
* HTTP Parameter Pollution
* Improving HTTPS Side Channel Attacks
* Insecure Direct Object References
* Local file inclusion
* Lost iN Translation
* MitM DNS Rebinding SSL/TLS Wildcards and XSS
* Missing Function Le Control
* MySQL Stacked Queries with SQL Injection.
* NAT Pinning
* Next Generation Click Jacking
* Persistent Cross Interface Attacks
* PHPwn
* Posting Raw XML cross-domain
* Quick Proxy Detection
* Remote Code Execution Attacks
* Remote File inclusion
* Security Misconfiguration
* Sensitive Data Exposure
* Side Channel Attacks in SSL
* Sql Injection Attack
* SQLi Filter E Cheat Sheet (MySQL)
* SSRF
* Stroke Jacking
* Stroke triggered XSS and Stroke Jacking
* Symlinking – An Insider Attack
* Tap Jacking
* Tabnabbing
* Turning XSS into Clickjacking
* UI Redressing
* Un Redirects and Forwards
* URL Hijacking
* Using Components with Known
* XML Entity Injection
* XSHM
* XSS - Track
* XSSing Client-Side Dynamic HTML
</details>
🦚 From Beginner to Expert Tryhackme Walkthrough 🦚
🦚 # Level 1 - Intro
🦚 # Level 2 - Tooling
More introductory CTFs
🦚 # Level 3 - Crypto & Hashes with CTF practice
🦚 # Level 4 - Web
🦚 # Level 5 - Reverse Engineering
🦚 # Level 6 - PrivEsc
🦚 # Level 7 - CTF practice
E You Need to Know to Become a HACKER
Many people are asking me this.
In this section I am regrouping what ethical, black hat and grey hat hackers think are the essential skills and knowledge any pen tester should know.
At the top you will find all the essential tools and knowledge one must learn to become efficient and skilled at penetration testing, and at the bottom, the second part explaining what each of these things are.
PART I: THE ESSENTIALS
Some of these tutorial are simple or PoC but I strongly suggest you find books on each of these subjects before you say you understand how this works.
1. Start by learning how TCP/UDP works (networking): TCP and UDP
You must know the fundamentals of HTTP and how Structured Query Language databases work : HTTP fundamentals and SQL
2. Learn HTML, install a Linux OS preferably KALI Linux on a program like (free) or (paid).
Learn HTML
Download Kali on / Workstation Pro
3. Learn basic Debian commands to feel comfortable using KALI and download the KALI hand-book
4. Learn how to be anonymous using Tor, ProxyChains, Whonix and VPN's that don't keep logs (`Mullvad VPN), MAC spoofing, DNS spoofing.
Tor || ProxyChains || Whonix || Mac Spoofing || DNS Spoofing
5. Learn to use Burp Suite, Nmap, and once you really understand SQL try SQLMap.
Nmap || BurpSuite || SQLMap
6. Learn your way around Metasploit(=)Armitage but before that understand the different OS by searching their CVE.
Metasploit Framework || C
7. Understand WEP/WPA/WPS, watch out for KRACK which will be released soon and we might learn how to crack WPA2.
WPA-WEP info || KRACK
Once you ha these find out about the air-ng suite, aircrack-ng, aireplay-ng and others.
Air-ng suite - How to crack Wireless Networks
8. Learn how to use tamper data, sniff networks and to accomplish MITM attacks.
Tamper Data || Sniff with Wireshark || MITM
9. Learn about wireless adapters and their different modes.
Different modes
10. Learn how to "automate" scanning with Nessus.
Nessus Guide
11. Learn about XSS, RFI, LFI. Don't learn how to DDoS (joking).
XSS-LFI-RFI Tutorial
12. Understand the ins and out of the OSI model.
Layers of OSI Model
13. Learn how to create a backdoor, what shells are and the definition of a 0-day.
Create a backdoor
14. Brute-forcing and Dictionary attacks.
Crack passwords with Hydra
Hash cracking:
Crack with John
15. Learn how to use google dorks (google hacking).
Google Hacking Database
16. Learn what are DNS, how to do whois lookups.
What is a DNS ?
17. Learn the most important port numbers.
Port number list
18. How to spoof a phone number.
Caller ID Spoofing
Research different scripting languages, check Rubber Ducky and these kind of hardware tools e talks about.
Rubber Ducky
19. Learn how to create ja and browser based infection methods.
Ja By [outdated]
20. Understand how AV's work and how to create malwares and how to crypt them.
Basic A methods || Create a Crypter
21. Social Engineering or how to lie. I won't discuss this here but here is a book on persuasion:
Robert Cialdini Influence and Manipulation
Once you ha all that maybe you can start learning the ad stuff. Of course, I hope you will become a white-hat and help people with their security instead of breaching it.
PART II: GLOSSARY
TCP/IP (Networking):
Computers themsel to each other across a network through the use of packets. In essence the base unit of communications in the world of computer networks is the packet. Packets themselves are most commonly built using the TCP/IP stack, which is part of the computer's operating system. Each operating system has some unique coded into its implementation of the TCP/IP stack. This is how OS fingerprinting works, by studying these unique such as MSS and MTU among others. It has been said before that to recognize the abnormal you must first understand what is normal. This is why we need to understand what a normal TCP/IP packet looks like and how TCP/IP itself sets up communications between computers.
Here some answer of some common questions related to Ethical Hacking is listed:
Why is HTML important in pen-testing?
First because e page you see on the web are displayed to some extent using HTML. It is the minimum to know the most basic language which carries the most content on internet. Also HTML injection is an attack that is similar to Cross-site Scripting (XSS). While in the XSS the attacker can inject and execute Ja code, the HTML injection attack only allows the injection of certain HTML tags. When an application does not properly handle user supplied data, an attacker can supply valid HTML code, typically via a parameter value, and inject their own content into the page. This attack is typically used in conjunction with some form of social engineering, as the attack is exploiting a code-based and a user's trust.
Why Kali Linux and why in a Machine(VM)?
First because e page you see on the web are displayed to some extent using HTML. It is the minimum to know the most basic language which carries the most content on internet. Also HTML injection is an attack that is similar to Cross-site Scripting (XSS). While in the XSS the attacker can inject and execute Ja code, the HTML injection attack only allows the injection of certain HTML tags. When an application does not properly handle user supplied data, an attacker can supply valid HTML code, typically via a parameter value, and inject their own content into the page. This attack is typically used in conjunction with some form of social engineering, as the attack is exploiting a code-based and a user's trust.
Why learn Debian commands?
Don't need spoilers for that one, in my opinion it is important to know your way around the system you use and learn the basic terminal commands that are packed within.
Why use Tor, ProxyChains, Whonix or a VPN?
During the penetration testing or assessment or hacking, staying anonymous is one of the important factor.
If you are a black hat, you also don't want to get caught. Without it, the internet connection will reveal your identity. ProxyChains is Proxifier for Linux system. It allows TCP and DNS tunneling through proxies. It supports HTTP, SOCKS4 and SOCKS5 proxy servers. It uses multiple proxies at a time, so it is called Proxy Chaining. In the tutorial you will be taught to use ProxyChains through the Tor network.
Whonix is also a very good way to stay anonymous and makes use of the Tor network with its own gateway.
MAC Spoofing allows you to change your MAC address which is your computer's ID. Your MAC address points to your PC's brand and can lead to you when deep searching.
Why use nmap, Burp-Suite and SQLMAP?
Burp-Suite is a Ja Web Penetration Testing framework. It has become an industry standard suite of tools used by information security professionals to identify and attack for web-based applications.
In its simplest form, Burp-Suite can be classified as an Interception Proxy. A penetration tester configures their Internet browser to route traffic through the proxy which then acts as a sort of Man In The Middle by capturing and analyzing each request and response to and from the target web application. Indi HTTP requests can be paused, manipulated and replayed back to the web server for targeted analysis of parameter specific injection points. Injection points can be specified for manual as well as automated fuzzing attacks to disco unintended application behaviors, crashes and error messages.
Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network in, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are a on the network, what services (application name and ) those hosts are offering, what operating systems (and OS ) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and official binary packages are a for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an ad GUI and results (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), a utility for comparing scan results (Ndiff), and a packet generation and response analysis tool (Nping).
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system connections.
Why learn to use the Metasploit Framework?
Metasploit Framework is a open source penetration tool used for de and executing exploit code against a remote target machine it, Metasploit framework has the world’s largest database of public, tested exploits. In simple words, Metasploit can be used to test the of computer systems in order to protect them and on the other hand it can also be used to break into remote systems. It is the most renown framework used to exploit systems.
Why understand WEP/WPA?
If you want to become a professional pen-tester you will have to learn about WEP/WPA encryption because the whole wireless ecosystem resol these encryption, understand these will give you greater power when cracking wireless networks.
Why master the air-ng suite (use for wireless hacking)?
Most if not every Wi-FI cracking methods invol aircrack-ng. Learning how to use these tools will allow you to crack most wireless network.
Why learn how to perform MITM (man in the middle) attacks, sniff networks and tamper data?
In a sense, a man-in-the-middle attack (MITM) is like ea. Data is sent from point A (computer) to point B (ser), and an attacker can get in-between these transmissions. They then set up tools programmed to “listen in” on transmissions, intercept data that is specifically targeted as , and capture the data. Sometimes this data can be modified in the process of transmission to try to trick the end user to divulge sensiti, such as log in credentials. Once the user has fallen for the bait, the data is collected from the target, and the original data is then forwarded to the intended destination unaltered.
Sniffing and snooping. They refer to listening to a con. For example, if you login to a website that uses no encryption, your username and password can be sniffed off the network by someone who can capture the network traffic between you and the web site.
Spoofing refers to actively introducing network traffic pretending to be someone else. For example, spoofing is sending a command to computer A pretending to be computer B. It is typically used in a scenario where you generate network packets that say they originated by computer B while they really originated by computer C. Spoofing in an email context means sending an email pretending to be someone else.
Tamper Data is an add-on for Firefox that lets you view and modify HTTP requests before they are sent. It shows what information the web browser is sending on your behalf, such as cookies and hidden form fields. Use of this plugin can reveal web applications that trust the client not to misbehave.
What is Brute-forcing?
A brute-force attack consists of an attacker trying many passwords or passphrases with the hope of e guessing correctly. The attacker systematically checks all possible passwords and passphrases until the correct one is found. Alternatively, the attacker can attempt to guess the key which is
typically created from the password using a key deri function. This is known as an exhaustive key search.
Why learn XSS, LFI, RFI?
Cross-site Scripting (XSS) refers to client-side code injection attack wherein an attacker can execute malicious scripts (also commonly referred to as a malicious payload) into a legitimate website or web application. XSS is amongst the most rampant of web application and occurs when a web application makes use of in or unencoded user input within the output it generates.
Remote File inclusion (RFI) refers to an inclusion attack wherein an attacker can cause the web application to include a remote file by exploiting a web application that dynamically includes external files or scripts. The consequences of a successful RFI attack include Information Disclosure and Cross-site Scripting (XSS) to Remote Code Execution.
Remote File Inclusion (RFI) usually occurs, when an application receives the path to the file that has to be included as an input without properly sanitizing it. This would allow an external URL to be supplied to the include statement.
Local File inclusion (LFI), or simply File Inclusion, refers to an inclusion attack through which an attacker can trick the web application in including files on the web server by exploiting functionality that dynamically includes local files or scripts. The consequence of a successful LFI attack includes Directory Tra and Information Disclosure as well as Remote Code Execution.
Typically, Local File Inclusion (LFI) occurs, when an application gets the path to the file that has to be included as an input without treating it as untrusted input. This would allow a local file to be supplied to the include statement.
What is a backdoor in Pen-testing?
Attackers can install their own backdoor on a targeted system. Doing so allows them to come and go as they please and gives them remote access to the system. Malware installed on systems for this purpose is often called a remote access Trojan, or a RAT, and can be used to install other malware on the system or exfiltrate data.
Would lo more. Good luck on your journey and remember white hats shine more then black.
Links of Different Topics
Best SQL injection resources
- PentestMonkey's mySQL injection cheat sheet
- Reiners mySQL injection Filter E Cheatsheet
- E's Error/Union/Blind MSSQL Cheatsheet
- PentestMonkey's MSSQL SQLi injection Cheat Sheet
- PentestMonkey's Oracle SQLi Cheatsheet
- PentestMonkey's Postgres SQLi Cheatsheet
- Access SQLi Cheatsheet
- PentestMonkey's Ingres SQL Injection Cheat Sheet
- Pentestmonkey's DB2 SQL Injection Cheat Sheet
- Pentestmonkey's Informix SQL Injection Cheat Sheet
- SQLite3 Injection Cheat sheet
- Ruby on Rails (Acti) SQL Injection Guide
CTF
*Read my CTF Resources notes which is a simply managed and updated copy of information from ctf/resources repository*
1. Practice:
1. picoCTF
2. catb
3. O
4. Microcorruption
5. Google CTF
6. Crypto Challenges
7. CTFs
8. CTFlearn
9. Attack-Defend Style CTF
10. HSCTF 7
11. 0xRick
2. Read to Learn:
1. CTF Field Guide
2. DEF CON CTF
3. CTFTime
4. Awesome Guide
5. Nightmare
6. CTF Resources
7. Awesome CTF
8. Hacking Articles (walkthroughs)
9. Antifa
10. Competition's Write-ups
11. Pentesting Wiki
12. Practice CTF List
13. bugbounty-cheatsheet
14. Resources
15. Hack the Box (HTB) machines walkthrough series
16. 0xdf
CTF Framework
1.
2. Facebook’s CTF framework
3. iCTF
4. Mellivora
5. NightShade
6. LibreCTF
Hacker101 Syllabus
1. HTTP basics
2. Cookie Security
3. HTML Parsing
4. MIME Sniffing
5. Encoding Sniffing
6. Same-origin
7. Cross-site request forgery (CSRF)
8. Cross-site scripting
1. Reflected
2. Stored
3. DOM
4. Detection, exploitation and Mitigation
9. Authorization bypasses and forced browsing
10. Directory Tra
11. Command Injection
12. SQL Injection
1. Detection, exploitation and mitigation
2. Exploiting blind SQLi
13. Session Fixation
14. Clickjacking
15. File inclusion and upload
16. Null termination
17. Unchecked redirects
18. Secure password storage
19. Crypto crash
1. XOR
- Symmetric ciphers
- Stream
- Block
2. Asymmetric ciphers
3. Hashes
4. MACs
20. Crypto attacks
- Stream cipher reuse
- ECB block reordering
- ECB partial decryption
- Padding oracles
- Hash length extension
21. Crypto tricks
- Detecting ECB
- Determining block sizes
- Determining controllable data
offsets
22. Lightweight Threat Modeling
23. Secure Architecture Review
24. SSRF
25. Source Review Techniques
26. Cookie Tampering Techniques & XML External Entity Attack
27. Burp Suite
- Setting up Burp proxy
- Introduction to Burp Suite
- Intermediate Burp Suite
Techniques
- Ad Burp Hacks for
Bounty Hunters
Random Collected Topics
Footprinting and Information Gathering
1. From Social Media
2. Web server whois
3. Subdomain
4. Reserved IP Location
5. Which platform used for de
6. Ping to identify ser
7. Collecting Information from Email Header
8. Email Tracking Tools
9. Tracking of a target person
10. Website Cookies history
11. Recover any deleted files. [ PC or Mobile]
PHP and SQL
1. Learn Web Attacking Method
2. SQL Injection
3. Session Hijacking
4. Ser
5. Bypass
6. Shell upload
1. private
2. legal
7. Compromising Session
1. using Sniffing
2. predicting Session Token
System Hacking
1. Password cracking method
1. All possible
2. Default
3. Guessing
2. Keylogger
1. Ardamax
2. Hardware
* Binding with real setup file
3. Spyware
Malware
1. Trojan
2. Batch-programming
3. Ser
4. File extension
5. Backdoors virus
Social Engineering
1. Phishing
2. CSRF and XSS
Denial of Service(DOS)
SQL Injection
1. Blind SQL
2. POST base
3. WAF Bypass
4. Error base
E IDS, Firewalls, and Honeypots
1. Remote and Local file inclusion (RFI and LFI)
Malicious File Upload
This is an important and common attack in this type of testing.
A file upload functions need a lot of protections to be adequately secure.
Attacks:
1. Upload unexpected file format to achieve code exec (swf, html, php, php3, aspx, ++) Web shells or...
2. Execute XSS via same types of files. Images as well!
3. Attack the parser to DOS the site or XSS payloads in metadata or file header
4. Bypass security zones and store malware on target site via file polyglots
File upload attacks are a whole presentation. Try this one to get a feel for bypass techniques:
5. content type spoofing
6. extension trickery
- File in the hole! presentaion
As referenced file polyglots can be used to store malware on servers!
See ‘s talk
and research:
2. X-path
3. Cryptography
Scanning Networks Web Server
1. Nmap
2. VEGA
3. Acunetix
Attack
1. Login Page Injection
2. Cross site scripting
3. Bypass it
4. Authentication Bypass
5. Cookie Injection
6. Man-in-the-Middle
Extra
1. HTML and CSS Injection
2. Remote code execution and Directory Tra
3. Android Keylogger
4. Steganography
5. HackTheKeyboard
Exam Preparation
1. OSCP-Prep
Book List
*[Alphabetically Ordered]()*
1. Burp Suite
1. Burp Suite Cookbook by Sunny Wear
2. Cryptography
1. Algorithmic Cryptanalysis by Antoine Joux
2. Handbook of Applied Cryptography by Menezes, Oorschot &
3. Networking
1. Computer Networking Problems and Solutions by Russ White and Ethan Banks
2. Computer Networks by Tanenbaum & Wetherall
3. Guide to Network Programming by Beej
4. Network Scanning Cookbook by Sairam Jetty
5. Networking All in One for Dummies by Doug Lowe
6. Networking Fundamentals by Gordon Davies
7. Se Network Attacks by Prowell, Borkin & Kraus
8. SSH The Secure Shell - The Definiti by Sil & Barrett
9. The Only Ip Book You Will Ever Need Unra The Mysteries Of Ipv4 Ipv6 by Diaz
4. Nmap
1. Mastering Nmap Scripting Engine by Paulino Calderon Pale
2. Nmap - Network Exploration and Security Auditing Cookbook by Paulino Calderon
3. Nmap Essentials by David Shaw
4. Nmap in the Enterprise: Your Guide to Network Scanning by Angela Orebaugh, Becky Pinkard
5. Nmap7 - From Beginner to Pro by Nicholas Brown
6. Quick Start Guide to Penetration Testing With NMAP, OpenVAS and Metasploit
5. Termux
1. Termux Tutorials by Techncyber
项目信息
开发语言：未知
Star 数：576
技术要点
该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕This repository contains some resources for ethical hackers penetration tester 😊 This may contain some files, tools, books, and links that need to be used for good purposes only. Do not do any illegal work using these sources.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。
| 资源标题 | Hacking-Resources - This repository contains some resources for ethica |
| 所属分类 | CTF思路 |
| 发布作者 | admin |
| 发布时间 | 2026-10-05 23:40:37 |
| 下载权限 | 免费下载 |
| 附件数量 | 2 个下载链接 |
| 浏览次数 | 131 |
| 讨论数量 | 0 |
| 主题状态 | 正常讨论中 |