Writeups-and-Walkthroughs - My Writeups and Walkthroughs

项目说明

✍️ Writeups and Walkthroughs

<figure><img src=".gitbook/assets/image (424).png" alt=""><figcaption></figcaption></figure>

Try Hack Me (THM)

<di="left" data-full-width="false"><figure><img src=".gitbook/assets/spaces_EhofjMfYbx3gOUSReXD7_uploads_git-blob-d6717517efcd6cf2abc36234ddf89ae069267bc7_image-515316 (1).webp" alt=""><figcaption><p>tryhackme.com - © TryHackMe</p></figcaption></figure></div>

Rooms

* OWASP

#### Acti

* Acti Basics (This room will introduce the basic concepts and functionality provided by Acti)
* AD: Basic Enumeration (This room covers Acti enumeration techniques, their use cases as well as drawbacks)
* Enumerating Acti (This room covers Acti enumeration techniques, their use cases as well as drawbacks)
* Breaching Acti (This network covers techniques and tools that can be used to acquire that first set of AD credentials that can then be used to enumerate AD)
* Attacking Kerberos (Learn how to abuse the Kerberos Ticket Granting Service inside of a Windows Domain Controller)
* Attackti (99% of Corporate networks run off of AD. But can you exploit a Domain Controller?)
* Exploiting Acti (Learn common AD exploitation techniques that can allow you to reach your goal in an AD en)
* Post-Exploitation Basics (Learn the basics of post-exploitation and maintaining access with mimikatz, bloodhound, powerview and msfvenom)
* Lateral Mo and Pi (Learn about common techniques used to mo across a Windows network).

CTFs

* RootMe
* Simple CTF
* Eternal Blue
*
* Pickle Rick
* Brooklyn Nine Nine
* Kenobi
* Bounty Hacker
* O
* LazyAdmin
* Ignite
* Bolt
* Agent Sudo
* Startup
* Wgel
* Blog
* ColdBox
* Lian\_Yu
* Blaster
* Ice
* The Sticker Shop

***

Hack The Box (HTB)

<di="left"><figure><img src=".gitbook/assets/spaces_EhofjMfYbx3gOUSReXD7_uploads_git-blob-4d6d836c187ed06d910d94a8c98eab79e10bce11_logo-htb2 (1).webp" alt=""><figcaption><p>hackthebox.com - © HACKTHEBOX</p></figcaption></figure></div>

* Devel
* Delivery
* Active
* Analytics
* Bashed
*
* Sau
* Sunday
* Cap
* Bizness
* Chemistry - OnGoing
* Celestial - OnGoing
* Poison - OnGoing

***

<di="left"><figure><img src=".gitbook/assets/image (240).png" alt="" width="330"><figcaption><p><a href="

* Brainpain (BoF)

***

<di="left"><figure><img src=".gitbook/assets/image (4) (1) (1) (1).png" alt="" width="375"><figcaption><p>© </p></figcaption></figure></div>

* Admin

DockerLabs

<di="left"><figure><img src=".gitbook/assets/image (244).png" alt="" width="144"><figcaption><p><a href="

* Trust
* Upload
*

***

HomeMade Labs 🏠🔬

* Acti
* Pi
* Buffer O (BoF)

***

WAPT

Portswigger Web Security Academy

<di="left"><figure><img src=".gitbook/assets/image (13) (1) (1) (1) (1) (1) (1).png" alt=""><figcaption><p> Ltd</p></figcaption></figure></div>

PortSwigger - Web Security Academy (My Walkthrough)

***

DVWA&#x20;

<di="left"><figure><img src=".gitbook/assets/d.png" alt="" width="250"><figcaption><p><a href="

* Install and configure DVWA
* Command Injection
* Cross Site Request Forgery (CSRF)
* File Inclusion (LFI + RFI)
* SQL Injection (SQLi)

***

OWASP - Mutillidae II

<di="left"><figure><img src=".gitbook/assets/image (426).png" alt=""><figcaption><p><a href="

* Install & configure OWASP Mutillidae II
* SQL Injection (SQLi)
* Command Injection
* IDOR & File Inclusion
* Cross-Site Scripting (XSS)

***

OWASP - SecureBank

<di="left"><figure><img src=".gitbook/assets/image (427).png" alt=""><figcaption><p><a href="

* Install and configure OWASP Secure Bank

项目信息

开发语言：未知

Star 数：73

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕My Writeups and Walkthroughs展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。