Infosec-Notes - 来自各种来源的笔记，用于准备

项目说明

---
description: >-
A collection of notes for Penetration Testers and Ethical Hackers. My journey
to OSCP and beyond.
---

Hacker's Rest

These are my publicly accessible notes from sources for penetration testing, red-teaming, OSCP, Capture the Flag (CTF) challenges, and my / Hack the Box machine write-ups.

{% hint style="warning" %}
Warning - These notes are largely unformatted right now. They are based on my way of learning things - by reading, doing, studying, exploring, and taking notes. Cleaning up and formatting comes later.

* Do not assume anything from these notes.
* Do not expect the notes to be exhaustive, or to cover the techniques or the output they produce in full.
* Expect mistakes in the notes.
* Feel free to ask questions!
* Always consult additional resources. If possible I will try to link to outside resources. _If I ha something of yours and you want credit, please let me know!_
{% endhint %}

Contribution

If you would like to add to, modify, or impro in my notes, PLEASE DO!

If you would like to gi or e changes to these pages feel free to head to my GitHub page at:

{% embed url=" %}

How to contribute

1. Create an Issue Request describing your changes/additions.
2. Fork this repository.
3. Push some code to your fork.
4. Come back to this repository and open a pull request.
5. After re your changes, I will merge your pull request to the master repository.
6. Make sure to update your Issue Request so that I can credit you! Thank you so much!

Feel free to also open an issue with any questions, help wanted, or requests! Throughout these notes I have put TODO: notes that indicate that I know a certain section needs work. Focus on these if you can!

Contents

The following sub-pages of these notes will explore some of the common offensive and defensi techniques including gaining shells, code execution, lateral mo, persistence, scripting, tools and much more. I also co for dealing with CTF-type challenges such as cryptography, reverse engineering, steganography and more.

{% hint style="success" %}
Hack Responsibly.

Always ensure you have explicit permission to access any computer system before using any of the techniques contained in these documents. You accept full responsibility for your actions by applying any knowledge gained here.
{% endhint %}

Unix/Linux

* Unix Fundamentals
* Hardening & Configuration Guide
* TMUX/Screen Cheatsheet
* Red Team Notes
* Enumeration
* Getting Access
* Pri Escalation
* Exfiltration
* Persistence
* Vim

Windows

* Windows Fundamentals
* Hardening & Configuration Guide
* Red Team Notes
* Enumeration
* Getting Access
* Pri Escalation
* Persistence
* Acti
* PowerShell

MacOS

* MacOS Basics
* Hardening & Configuration Guide
* Red Team Notes
* Enumeration
* Getting Access
* Pri Escalation
* Persistence

Web

* DNS
* Subdomain/ Host Enumeration
* Web Apps
* Web Application Hacker's Handbook Task Checklist

Mobile

* iOS
* Android

OS Agnostic

* Cryptography & Encryption
* Network Hardware
* OS Agnostic
* OSINT
* Password Cracking
* Gathering the Hashes
* Wordlist Generation
* Cracking the Hashes
* Reverse Engineering & Binary Exploitation
* Buffer O
* Scripting
* Scripting Language Syntax Comparison
* SQL
* SSH & SCP
* Steganography
* Wireless

Unsorted

* Unsorted Notes

OSCP/CTF Tools and Cheatsheets

See my list of outside sources!

If you like this content and would like to see more, please consider buying me a coffee!

项目信息

开发语言：未知

Star 数：98

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Notes from various sources for preparing to take the OSCP, Capture the Flag challenges, and Hack the Box machines.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。