awesome-cybersec - A collection of awesome platforms, blogs, document

项目说明

awesome-cybersec

![Awesome]()
![]()

A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security

While this repository is still a work in progress , the goal is to build a categorized community-dri of very well-known resources.

All the good stuff in one place

![DigitalOcean Referral Badge]()

Training

* Defbox
* Range force
* HTB
* Tryhackme
* Blue team academy
* Blue team labs
* Kali re
* Darkmoon - Open source (GPL-3.0) autonomous AI penetration testing platform co web, API, Acti and Kubernetes, orchestrating 80+ offensi as an MCP host with proof of exploitation and a local privacy gateway (the LLM never sees real IPs or credentials).
* Metasploit Unleashed
* platform.mosse-institute.com
* riptutorial.com/bash
* hackerrank.com/domains/shell
*
*
*
*
* Google doc : oscp like vm's list
* Wordpress boxes on
* CTF writeups
* Linux Pri escalation Cheatsheet
* Pri escalation
* corelan: exploit-writing-tutorial-part-1-stack-based-o
*
* Malware Noob2Ninja course
* n3t2.3c
* Hacking-cisco
* Open security training
* Pentest standard
* Security-tube
* Binary Analysis course
*
* Pwncollege pwn.college is a first-stage education platform for students (and other interested parties) to learn about, and practice, core cybersecurity concepts in a hands-on fashion. It is designed to take a “white belt” in cybersecurity to becoming a “blue belt”, able to approach (simple) CTFs and wargames. The philosophy of pwn.college is “practice makes perfect”.
* CyberPython A hands on platform where you have to do your own research in order to sol using little guidance and tips.

* Web Application Exploits and DefensesThis codelab is built around Gruyere /ɡruːˈjɛər/ - a small, cheesy web application that allows its users to publish snippets of text and store assorted files. "Unfortunately," Gruyere has multiple security bugs ranging from cross-site scripting and cross-site request forgery, to information disclosure, denial of service, and remote code execution. The goal of this codelab is to guide you through disco some of these bugs and learning ways to fix them both in Gruyere and in general.
* Course materials for Modern Binary Exploitation
* professormesser.com
* MCSI free training
* insecure.org/stf/smashstack.html
* Networking fundamentals: CCNA 200-301 certification course, A comprehensive free course to learn fundamentals of networking

WebApp/Bugbounty resources

* Web Security Academy
*
* Mutillidae II
*
*
* hacker101 is a free class for web security. Whether you’re a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you.
*
* awesome-web-hacking

Resources-for-Beginner-Bug-Bounty-Hunters

Resources & Disclosed Reports

Bug-bounty-roadmaps

Bug-hunting-methodologies

Open Source Bug Bounty Guide - Methodology, Tools, Resources

Thug-bounty

Bugbounty-Writeups

The Best Bug Bounty Recon Methodology

Pentesting web checklist

Web-application cheatsheet

Web-pentesting-checklist

OWASP Web Security Testing Guide

OWASP Top Ten

Bugcroud uni

OWASP Web Security Testing Guide

learning how stacks function seems to be an important aspect of bug bounty hunting , so you need to learn at least one of MERN or LAMP or whatever.

You can learn the MERN Stack by building your own Yelp-like restaurant review site. MERN stands for MongoDB + Express + React + Node.js. Then in the second half of the course, you'll learn how to swap out your Node.js/Express back end in favor of Ser Architecture. (3 hour YouTube course):

Resources from the hacker101 discord server

How to get started with hacking and bug bounties?
We' some useful resources to get your started on your bug bounty journey!

Guide to learn hacking

Finding your first bug

Port Swigger Web Security Academy

Nahamsec's Twitch

Nahamsec interviews with top bug bounty hunters

Nahamsec's beginner repo

Stök

InsiderPhD

Series for new bug hunters

Jhaddix

Posts from Hacker101 members on how to get started hacking

- zonduu
- p4nda
- also a blog on subdomain takeovers
- clos2100 on getting started without a technical background
- al-madjus from 0 to bug hunter
- dee-see's resources for Android Hacking
- hacker101

Tools

Pwncat is a post-exploitation platform ~~for Linux targets~~. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target.

Automatic bypass (brute force) waf

DFIR-Tools

Notes , tons of notes

Writehat : A pentest reporting tool written in Python. Free yourself from Microsoft Word.

OSINT4ALL

Shadrak : Shadrak is a script to generate decompression bomb in formats.

Fish: a phishing tool

Owasp Zap, a free and opensource burpsuite alternative

Pimpmykai

Name that hash

Burp Automator(burpa) - A Burp Suite Automation Tool.

The har

Hakrawler

Service Enumeration

Poszo Next.js Security Headers Starter - Dependency-free Next.js security headers baseline with conser defaults and a production .

CTF's

*
*
*
* Hack.me
* Try2Hackme
* Hackthissite
*
*
* Pwnable.tw
* Pwnable.kr
* Root-me
* Smash the stack
* Cryptohack.org
* PicoCTF
* CMDchallenge
* Defend the web
* ChaosVPN
* PentestIT
* O
* CTF Difficulty cheatsheet ()
* hpwnad
* ctf.komodosec
* counterhack.net
* hellboundhackers
* ringzer0ctf.com
* io.netgarage
* pwn0.com
* w3c.com
* hax.tor.hu
* re.kr
* ctflearn.com
* microcorruption.com
* ctf365.com
* codegate.org
* legitbs.net
* ghostintheshellcode
* try2hack
* gameofhacks
* try using this with google translate
*
* Dream hack is Korean cyber security course. it also offer CTF. You can try it out with google translate.
* The cyber institute Free OSINT Courses and Free OSINT Challenges.
* Sans holiday hack challenge - past challenges
* Holidayhackchallenge-2020
* Kringlecon
* Sans cyber-ranges
* CTF-challenge
* 247CTF
* Backdoor ctf
* Cybersecurity.wtf

Github resources

* Malware Analysis Course
* Malware-IR-TH-TI-Resources
* Red Team tactics and techniques
* Red Teaming toolkit
* Red Team
* awesome red teaming
* Powershell red team
* Red Teaming
* Red-team
* Red team diaries
* awesome-web-hacking
* awesome-security
* infosec-resources
* E about web application firewalls (WAFs)
* awesome-hacking
* Awesome-Hacking-2
* BARF: Binary analysis and reverse engineering framework
* Automatic Linux privesc of low-hanging fruit
* CTF-KATANA
* Actin-cheatsheet
* The book of secret knowledge : A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
* PyWhat : identify anything
* OSEE prep resources
* PayloadsAllTheThings
* Thefuck

Blogs

*
* From zero to hero in your first pentest
* So you want to be a hacker in 2021
* netsecfocus
*
*
*
*
*
*
*
*
* The Journey to Try Harder- TJnull's Preparation Guide for PEN-200 PWK OSCP 2.0
*
* What is a block cypher
* freecodecamp blog
* Redhuntlabs blog
* Hackthebox blog
* Tryhackme blog
* Start in infosec
* Ethical Hacking With Hack The Box :A free book for getting started in Ethical Hacking
* Hacking tutorials
* Halls of is a place for sharing knowledge and ideas. Users can submit code, as well as science, technology, and engineering-oriented news and articles.They also have an assortment of fun and educational challenges intended to help users learn more about programming, mathematics, encryption, hacking and more.
* Pentest.blog
*
*
*
* infosec write-ups
* Hacksplained blog
* Get ready to pass the CISSP
* Blackmorerepos

Paid training

* cybersec labs
* Hacking Labs
*
* INE
*
* Red team ops
* Pentester academy - red team labs
* Pentester labs
* KodeKloud

Resources

*
*
* Reverse enginering
*
*
* Learn vim or Emacs i don't care , i'm not trying to start a war
* Python Cybersecurity - Build your own tools
* Osint framework
* Getting started with OSINT
* resources

Programing resources

Learn git

Flight rules for Git

General

Comprehensi to Learn CS Online

What Is Test Automation?

Get Started With TypeScript the Easy Way

Machine Learning with Introduction

freecodecamp

Programiz

Codewars

Code academy

Fullstackopen : Deep Dive Into Modern Web De

Learn {Python,Java,C,Ja,PHP,Shell,C#}

Ja

Learn to build a website with LandChad.net

Scaler

Python

Ultimate Python study guide

A beginner’s guide to data with Python

and Seaborn

Nice Guide on Modern Python Packages

Intro to Python and Programming for non-CS majors

Practicepython.org
Python Tutorial: A Comprehensi for Beginners

Ja

The Modern Ja Tutorial

Ja 101 - & Primitives

Guide To Ja Array Functions: Why you should pick the least powerful tool for the job

Learn and practice modern Ja

Java

A Hitchhiker's Guide to Containerizing (Spring Boot) Java Apps

A beginner’s guide to CDC (Change Data Capture)

Java 15 Programmer's Guide To Text Blocks

Modern Web De in Java - The (Never) Complete Guide

Ja Cheat Sheet

Ja Cheat Sheet

C++

The Definitive C++ Book Guide and List

Linear-cpp

Tony Gaddis Early Objects

PHP

PHP The right way

Miscellaneous links

*

* You'll find majority of the books you're looking for here
* ssh-audit
* Secure your linux install
* Awesome-Linux-Software
* Twitter-geolocate
* Linux training academy
* modern-unix A collection of modern/faster/saner alternatives to common unix commands.
* Linuxzoo
* Snaplabs.io
* shortcutfoo.com

Youtube channels

Pwnfunction

zSecurity

HckerSploit

Nullbyte

Li

John hammond

The cyber mentor

Network Chuck

Ippsec

Insiderphd

Da

Alhz4r3d

Discord servers

the cyber mentor

infosec prep

certification station

network Chuck

nahmsec

bounty hunters

The Alh4z-R3d Team

hack the box

tryhackme

hack this site

PG (proving grounds)

Getting started in security

INE Unofficial server

Offsec official server

ctf learn

Hacker101

➡️ Contributions

You are Welcome to Contribute. You can contribute by:

Translating into other languages

Adding more Tools, and other Resources.

Just adding a star the Github project :)

If you have some new idea about this Repository, issue, feedback or found some tool feel free to open an issue or just DM me on discord #4823

Star History

<a href="
<picture>
<source media="(prefers-color-scheme: dark)" srcset=" />
<source media="(prefers-color-scheme: light)" srcset=" />
<img alt="Star History Chart" src=" />
</picture>
</a>

项目信息

开发语言：未知

Star 数：194

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security 展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。