红队框架列表

Myth丶恋晨 2024-04-06 12:22 14阅读 0赞

## 攻击技战法 ##

*  \[list\] 云上攻击技战法 [https://hackingthe.cloud/][https_hackingthe.cloud]
 *  \[doc\] 红队技术实战 [https://ired.team/][https_ired.team]

### 威胁情报 Threat Intelligence ###

*  \[list\] [https://github.com/hslatman/awesome-threat-intelligence][https_github.com_hslatman_awesome-threat-intelligence]

### 红队框架/工具集 Redteam Framework ###

*  \[tool\] Utilities for MITRE™ ATT&CK [https://github.com/nshalabi/ATTACK-Tools][https_github.com_nshalabi_ATTACK-Tools]
 *  \[tool\] 好用的渗透工具列表 [https://github.com/enaqx/awesome-pentest][https_github.com_enaqx_awesome-pentest]
 *  \[book\] KALI渗透 [https://jobrest.gitbooks.io/kali-linux-cn/content/][https_jobrest.gitbooks.io_kali-linux-cn_content]
 *  \[paper\] ATT&CK 发布了七款安全产品的评估 [https://medium.com/mitre-attack/first-round-of-mitre-att-ck-evaluations-released-15db64ea970d][https_medium.com_mitre-attack_first-round-of-mitre-att-ck-evaluations-released-15db64ea970d]
 *  \[doc\] 红队技术实战 [https://ired.team/][https_ired.team]
 *  \[tool\] 红队框架 [https://ired.team/offensive-security/red-team-infrastructure/automating-red-team-infrastructure-with-terraform][https_ired.team_offensive-security_red-team-infrastructure_automating-red-team-infrastructure-with-terraform]
 *  \[cheatsheet\] 红队手册 [https://github.com/mantvydasb/Offensive-Security-OSCP-Cheatsheets/][https_github.com_mantvydasb_Offensive-Security-OSCP-Cheatsheets]
 *  \[tool\] 渗透、红队工具集 [https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE][https_github.com_blaCCkHatHacEEkr_PENTESTING-BIBLE]
 *  \[tool\] 红队资源集合 [https://github.com/yeyintminthuhtut/Awesome-Red-Teaming/][https_github.com_yeyintminthuhtut_Awesome-Red-Teaming]
 *  \[tool\] APT实战资源 [https://osint-labs.org/apt/][https_osint-labs.org_apt]
 *  \[cheatsheet\] Windows 渗透 [https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html][https_m0chan.github.io_2019_07_30_Windows-Notes-and-Cheatsheet.html]

### MITRE ATT&CK Matrix ###

*  Caldera [https://github.com/mitre/caldera][https_github.com_mitre_caldera] [https://caldera.readthedocs.io/en/latest/index.html][https_caldera.readthedocs.io_en_latest_index.html]
 *  Atomic Red Team [https://github.com/redcanaryco/atomic-red-team][https_github.com_redcanaryco_atomic-red-team] [https://atomicredteam.io][https_atomicredteam.io]
 *  DumpsterFire [https://github.com/TryCatchHCF/DumpsterFire][https_github.com_TryCatchHCF_DumpsterFire]
 *  Metta [https://github.com/uber-common/metta][https_github.com_uber-common_metta] [https://github.com/uber-common/metta/wiki][https_github.com_uber-common_metta_wiki]
 *  RTA [https://github.com/endgameinc/RTA][https_github.com_endgameinc_RTA]

### 业内红队 Industry ###

*  [https://specterops.io/][https_specterops.io]
 *  [https://www.synack.com/red-team/][https_www.synack.com_red-team]

## 攻击杀伤链 ##

### 信息搜集 Reconnaissance ###

#### OSINT 在线工具 ####

*  \[tool\] 信息搜集和渗透工具集 [https://github.com/projectdiscovery/][https_github.com_projectdiscovery]
 *  \[tool\] 企业邮箱搜索工具 [http://www.skymem.info/][http_www.skymem.info]
 *  \[tool\] 子域名和DNS历史记录Dnstrails [https://securitytrails.com/dns-trails][https_securitytrails.com_dns-trails]
 *  \[tool\] 全网证书搜索 [http://crt.sh][http_crt.sh]
 *  \[tool\] 多种域名/IP信息工具 [https://viewdns.info/][https_viewdns.info]
 *  \[tool\] [https://pentest-tools.com][https_pentest-tools.com]
 *  \[tool\] 全网资产搜索 Shodan [https://www.shodan.io/][https_www.shodan.io]
 *  \[tool\] 全网资产搜索 Censys [https://censys.io][https_censys.io]
 *  \[tool\] 全网资产搜索 Fofa [https://fofa.so/][https_fofa.so]
 *  \[tool\] 全网资产搜索 Zoomeye [https://www.zoomeye.org/][https_www.zoomeye.org]
 *  \[tool\] DNS查询 [https://dnsdumpster.com/][https_dnsdumpster.com]
 *  \[tool\] 文件在线监测 VirusTotal [https://www.virustotal.com/][https_www.virustotal.com]
 *  \[tool\] DNS查询 [http://www.dnsgoodies.com/][http_www.dnsgoodies.com]
 *  \[tool\] Google ASE aka Google Dorking \[Most effective in some cases\]
 *  \[tool\] Spiderfoot \[Currently Free, just request for a Spiderfoot instance\]
 *  \[tool\] Binaryedge \[Paid/Rate-Limited\]
 *  \[tool\] onyphe.io \[Free mostly\]
 *  \[tool\] Github用户历史记录API https://api.github.com/users/\{username\}/events

#### 信息搜集工具 ####

*  \[tool\] BigBountyRecon [https://github.com/Viralmaniar/BigBountyRecon][https_github.com_Viralmaniar_BigBountyRecon]

#### 指纹识别 ####

*  \[tool\] WAF识别 [https://github.com/stamparm/identYwaf][https_github.com_stamparm_identYwaf]

### 入口突破 Entry ###

#### 钓鱼 Phishing ####

*  \[tool\] [https://github.com/klionsec/PhishingExploit][https_github.com_klionsec_PhishingExploit]
 *  \[tool\] [https://github.com/gophish/gophish][https_github.com_gophish_gophish]
 *  \[cases\] 利用谷歌开放平台OAuth授权，伪装成Google Doc使用GMail传播钓鱼 [https://www.reddit.com/r/google/comments/692cr4/new\_google\_docs\_phishing\_scam\_almost\_undetectable/][https_www.reddit.com_r_google_comments_692cr4_new_google_docs_phishing_scam_almost_undetectable]
 *  \[blog\] Office在线视频钓鱼 [https://blog.cymulate.com/abusing-microsoft-office-online-video][https_blog.cymulate.com_abusing-microsoft-office-online-video]
 *  \[tool\] 邮件钓鱼工具 [https://www.mailsploit.com/index][https_www.mailsploit.com_index]
 *  \[trick\] 利用DOCX文档远程模板注入执行宏[https://xz.aliyun.com/t/2496][https_xz.aliyun.com_t_2496]
 *  \[trick\] 浏览器窗口伪造 [https://github.com/openworldoperations/FISHY][https_github.com_openworldoperations_FISHY]
 *  \[trick\] 鼠标光标伪造 [https://jameshfisher.github.io/cursory-hack/][https_jameshfisher.github.io_cursory-hack]

#### 硬件交互设备 HID Attack ####

*  \[paper\] 打印机利用 [http://archive.hack.lu/2010/Costin-HackingPrintersForFunAndProfit-slides.pdf][http_archive.hack.lu_2010_Costin-HackingPrintersForFunAndProfit-slides.pdf]
 *  \[tool\] BadUSB [https://mp.weixin.qq.com/s/mIcRNcf5HmZ4axe8N92S7Q][https_mp.weixin.qq.com_s_mIcRNcf5HmZ4axe8N92S7Q]

#### 无线入侵 Wireless Attack ####

*  \[tool\] 无需四次握手包破解WPA&WPA2密码 [http://www.freebuf.com/articles/wireless/179953.html][http_www.freebuf.com_articles_wireless_179953.html]

#### 服务器带外管理BMC、IPMI**供应链攻击** ####

*  \[blog\] 针对目标企业开源项目的针对性软件供应链攻击 [https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610][https_medium.com_alex.birsan_dependency-confusion-4a5d60fec610]

### Exploitation ###

*  \[tool\] PE文件转为Shellcode / [https://github.com/hasherezade/pe\_to\_shellcode][https_github.com_hasherezade_pe_to_shellcode]
 *  \[blog\] Java Runtime.exec(String)执行任意命令 [https://www.anquanke.com/post/id/159554][https_www.anquanke.com_post_id_159554][https://mp.weixin.qq.com/s/pzpc44-xH932M4eCJ8LxYg][https_mp.weixin.qq.com_s_pzpc44-xH932M4eCJ8LxYg][http://jackson.thuraisamy.me/runtime-exec-payloads.html][http_jackson.thuraisamy.me_runtime-exec-payloads.html]
 *  \[paper\] 利用 Java JDBC 驱动利用反序列化漏洞 [https://xz.aliyun.com/t/7067][https_xz.aliyun.com_t_7067]
 *  \[blog\] 关于Jackson的CVEs [https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062][https_medium.com_cowtowncoder_on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062]
 *  \[paper\] FastJson漏洞历史 [https://github.com/miaochiahao/slides/tree/master/fastjson][https_github.com_miaochiahao_slides_tree_master_fastjson]
 *  \[tool\] 一键日Jira [https://github.com/0x48piraj/Jiraffe][https_github.com_0x48piraj_Jiraffe]
 *  \[tool\] 很全的JNDI内存马利用工具 [https://github.com/feihong-cs/JNDIExploit][https_github.com_feihong-cs_JNDIExploit]

### 权限提升 Privilege Escalation ###

*  \[cheatsheet\] Windows提权笔记 [https://xz.aliyun.com/t/2519][https_xz.aliyun.com_t_2519]
 *  \[cheatsheet\] Windows提权小抄 [https://guif.re/windowseop][https_guif.re_windowseop]
 *  \[cheatsheet\] Windows本地提权技巧 [http://payloads.online/archivers/2018-10-08/1][http_payloads.online_archivers_2018-10-08_1]
 *  \[cheatsheet\] Linux提权小抄 [https://guif.re/linuxeop][https_guif.re_linuxeop]
 *  \[exploit\] Windows-Exploit-Suggester [https://github.com/GDSSecurity/Windows-Exploit-Suggester/blob/master/windows-exploit-suggester.py][https_github.com_GDSSecurity_Windows-Exploit-Suggester_blob_master_windows-exploit-suggester.py]
 *  \[exploit\] Linux-Exploit-Suggester [https://github.com/PenturaLabs/Linux\_Exploit\_Suggester/][https_github.com_PenturaLabs_Linux_Exploit_Suggester]
 *  \[exploit\] Windows Exploits [https://github.com/abatchy17/WindowsExploits][https_github.com_abatchy17_WindowsExploits]
 *  \[exploit\] Windows Sherlock本地提权漏洞检查 [https://github.com/rasta-mouse/Sherlock][https_github.com_rasta-mouse_Sherlock]
 *  \[cheatsheet\] Linux sudo滥用提权 [http://touhidshaikh.com/blog/?p=790][http_touhidshaikh.com_blog_p_790]
 *  \[blog\] 深入解读MS14-068漏洞：微软精心策划的后门？[http://www.freebuf.com/vuls/56081.html][http_www.freebuf.com_vuls_56081.html]
 *  \[paper\] Windows特权提升 [https://www.exploit-db.com/docs/english/46131-windows-privilege-escalations.pdf][https_www.exploit-db.com_docs_english_46131-windows-privilege-escalations.pdf]
 *  \[tool\] juicy-potato本地提权 [https://github.com/ohpe/juicy-potato][https_github.com_ohpe_juicy-potato] [https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/][https_foxglovesecurity.com_2016_09_26_rotten-potato-privilege-escalation-from-service-accounts-to-system]
 *  \[exploit\] hh.exe提权 [https://twitter.com/FlatL1ne/status/1194208167976165376][https_twitter.com_FlatL1ne_status_1194208167976165376]
 *  \[tool\] Linux本地信息搜集 [https://github.com/rebootuser/LinEnum/blob/master/LinEnum.sh][https_github.com_rebootuser_LinEnum_blob_master_LinEnum.sh]
 *  \[tool\] Linux进程监控 [https://github.com/DominicBreuker/pspy][https_github.com_DominicBreuker_pspy]
 *  \[cheatsheet\] Linux Privilege Escalation [https://book.hacktricks.xyz/linux-unix/privilege-escalation][https_book.hacktricks.xyz_linux-unix_privilege-escalation]

### 持久化后门 Persistent ###

*  \[tool\] Gray Dragon .NET应用Runtime注入工具 / [https://www.digitalbodyguard.com/graydragon.html][https_www.digitalbodyguard.com_graydragon.html]
 *  \[trick\] 利用环境变量，在任意.Net应用DLL注入 / [https://mobile.twitter.com/subTee/status/864903111952875521][https_mobile.twitter.com_subTee_status_864903111952875521] [https://docs.microsoft.com/en-us/previous-versions/dotnet/netframework-4.0/bb384689(v=vs.100)][https_docs.microsoft.com_en-us_previous-versions_dotnet_netframework-4.0_bb384689_v_vs.100]
 *  \[tool\] PHP-FPM无文件后门Webshell [https://www.anquanke.com/post/id/163197][https_www.anquanke.com_post_id_163197]
 *  \[tool\] 利用PrintDialog持久化+执行命令 http://www.hexacorn.com/blog/2018/08/11/printdialog-exe-yet-another-lolbin-for-loading-dlls/
 *  \[tool\] SystemSettings [http://www.hexacorn.com/blog/2018/08/12/systemsettings-exe-yet-another-lolbin-for-loading-dlls/][http_www.hexacorn.com_blog_2018_08_12_systemsettings-exe-yet-another-lolbin-for-loading-dlls]
 *  \[tool\] 二进制加密Webshell [https://xz.aliyun.com/t/2744][https_xz.aliyun.com_t_2744][https://github.com/rebeyond/Behinder][https_github.com_rebeyond_Behinder]
 *  \[cheatsheet\] Linux权限维持 [https://xz.aliyun.com/t/7338][https_xz.aliyun.com_t_7338]
 *  \[tool\] Linux eBPF backdoor [https://github.com/kris-nova/boopkit][https_github.com_kris-nova_boopkit]
 *  \[tool\] 5行代码编译 PAM 后门 [https://infosecwriteups.com/creating-a-backdoor-in-pam-in-5-line-of-code-e23e99579cd9][https_infosecwriteups.com_creating-a-backdoor-in-pam-in-5-line-of-code-e23e99579cd9]

### Post Exploitation ###

#### Windows ####

*  无Powershell.exe的Powershell工具 / [https://github.com/Ben0xA/nps][https_github.com_Ben0xA_nps]
 *  全阶段的Powershell渗透测试脚本 / [https://github.com/samratashok/nishang][https_github.com_samratashok_nishang]
 *  命令执行 Living off the Land [https://github.com/api0cradle/LOLBAS][https_github.com_api0cradle_LOLBAS]
 *  C\# 后渗透测试库 SharpSploit 介绍 [https://posts.specterops.io/introducing-sharpsploit-a-c-post-exploitation-library-5c7be5f16c51][https_posts.specterops.io_introducing-sharpsploit-a-c-post-exploitation-library-5c7be5f16c51]
 *  \[blog\] Windows执行命令和下载文件总结 [https://www.cnblogs.com/17bdw/p/8550189.html][https_www.cnblogs.com_17bdw_p_8550189.html]
 *  \[trick\] 使用Rundll32运行.Net程序 [https://blog.xpnsec.com/rundll32-your-dotnet/][https_blog.xpnsec.com_rundll32-your-dotnet]
 *  \[tool\] .NET DllExport [https://github.com/3F/DllExport][https_github.com_3F_DllExport]

#### Linux ####

*  纯Bash实现的后渗透工具 / [https://github.com/TheSecondSun/Bashark/][https_github.com_TheSecondSun_Bashark]

### 凭据窃取 Credentials ###

*  \[tool\] SafetyKatz [https://github.com/GhostPack/SafetyKatz][https_github.com_GhostPack_SafetyKatz]
 *  \[tool\] Shellcode Dump LSASS [https://osandamalith.com/2019/05/11/shellcode-to-dump-the-lsass-process/][https_osandamalith.com_2019_05_11_shellcode-to-dump-the-lsass-process]
 *  \[tool\] 内网密码搜集和解密工具 [https://github.com/klionsec/Decryption-tool][https_github.com_klionsec_Decryption-tool]

### 横向移动 Letaral Movement ###

*  \[tool\] 端口扫描 wrriten in GO [https://github.com/ffuf/ffuf/tree/master][https_github.com_ffuf_ffuf_tree_master]
 *  \[tool\] 域信息搜集，域管理员的六度空间 [https://github.com/BloodHoundAD/SharpHound][https_github.com_BloodHoundAD_SharpHound]
 *  \[usage\] NMap空闲隐蔽扫描 https://nmap.org/book/idlescan.html
 *  \[blog\] 使用meterpreter进行NTLM中继攻击 [https://diablohorn.com/2018/08/25/remote-ntlm-relaying-through-meterpreter-on-windows-port-445/][https_diablohorn.com_2018_08_25_remote-ntlm-relaying-through-meterpreter-on-windows-port-445]
 *  \[tool\] Responder NetBIOS名称欺骗和LLMNR欺骗 [https://github.com/SpiderLabs/Responder][https_github.com_SpiderLabs_Responder]
 *  \[tool\] NTLM Relay 攻击 Exchange Web Services [https://github.com/Arno0x/NtlmRelayToEWS][https_github.com_Arno0x_NtlmRelayToEWS]
 *  \[tool\] SMB中间人劫持 [https://github.com/quickbreach/SMBetray][https_github.com_quickbreach_SMBetray]
 *  \[tool\] 代理隧道 https://github.com/txthinking/brook
 *  \[tool\] 代理隧道 https://github.com/Dliv3/Venom

### 绕过检测 Defense Evasion ###

*  \[book\] [效果不错的免杀，使用C\#绕过杀毒软件][C]
 *  \[tool\] 生成免杀的Metasploit Payload / [https://github.com/Veil-Framework/Veil][https_github.com_Veil-Framework_Veil]
 *  \[code\] 自定义Meterpreter加载 / [http://www.freebuf.com/articles/system/53818.html][http_www.freebuf.com_articles_system_53818.html]
 *  \[blog\] [九种姿势执行Mimikaz][Mimikaz]
 *  \[blog\] [使用.Net可执行程序进行渗透][.Net]
 *  \[blog\] [ATT&CK 攻击矩阵 躲避防御][ATT_CK _]
 *  \[blog\] [绕过下一代杀软][Link 1]
 *  \[blog\] [Windows NTFS特殊文件夹绕过检测][Windows NTFS]
 *  \[paper\] Winnti Bootkit [http://williamshowalter.com/a-universal-windows-bootkit/][http_williamshowalter.com_a-universal-windows-bootkit]
 *  \[paper\] UEFI Rootkit [https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/][https_www.welivesecurity.com_2018_09_27_lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group]
 *  \[twitter\] Linux Bash 混淆 [https://twitter.com/DissectMalware/status/1025580967384305664][https_twitter.com_DissectMalware_status_1025580967384305664]
 *  \[tool\] 免杀工具 AVET[https://github.com/govolution/avet][https_github.com_govolution_avet]
 *  \[blog\] 绕过CrowdStrike检测 [https://0x00sec.org/t/bypassing-crowdstrike-falcon-detection-from-phishing-email-to-reverse-shell/10802][https_0x00sec.org_t_bypassing-crowdstrike-falcon-detection-from-phishing-email-to-reverse-shell_10802]
 *  \[blog\] 10 种绕过杀毒软件的方式 [https://blog.netspi.com/10-evil-user-tricks-for-bypassing-anti-virus/][https_blog.netspi.com_10-evil-user-tricks-for-bypassing-anti-virus]
 *  \[tool\] DLL Side Loding Attack Gen [https://github.com/Mr-Un1k0d3r/MaliciousDLLGenerator][https_github.com_Mr-Un1k0d3r_MaliciousDLLGenerator]
 *  \[tool\] BypassAV ShellCode Loader [https://github.com/k8gege/scrun][https_github.com_k8gege_scrun]
 *  \[blog\] Protecting Your Malware with blockdlls and ACG 利用微软自身提供的安全机制来反EDR [https://blog.xpnsec.com/protecting-your-malware/][https_blog.xpnsec.com_protecting-your-malware]
 *  \[blog\] Detecting Parent PID Spoofing [https://blog.f-secure.com/detecting-parent-pid-spoofing/][https_blog.f-secure.com_detecting-parent-pid-spoofing]
 *  \[tips\] 对抗EDR的三个重要特征： 1. Process Relationship / 2. Suspicious Network / 3. Command Line.
 *  \[blog\] Antivirus Evasion with Python [https://medium.com/bugbountywriteup/antivirus-evasion-with-python-49185295caf1][https_medium.com_bugbountywriteup_antivirus-evasion-with-python-49185295caf1]
 *  \[tool\] JS免杀Shellcode [https://github.com/Hzllaga/JsLoader][https_github.com_Hzllaga_JsLoader]
 *  \[tool\] 利用杀毒软件销毁自身 [https://www.rack911labs.com/research/exploiting-almost-every-antivirus-software/][https_www.rack911labs.com_research_exploiting-almost-every-antivirus-software]
 *  \[tool\] 免杀合集 [https://github.com/TideSec/BypassAntiVirus][https_github.com_TideSec_BypassAntiVirus]
 *  \[tool\] Apache/Nginx端口转发，隐藏TeamServer [https://github.com/threatexpress/cs2modrewrite][https_github.com_threatexpress_cs2modrewrite]
 *  \[tool\] 《使用C＃编写自定义后门负载》学习笔记及免杀尝试 [https://xz.aliyun.com/t/6222][https_xz.aliyun.com_t_6222]
 *  \[tool\] 杀软进程名检查 [https://github.com/gh0stkey/avList/][https_github.com_gh0stkey_avList]
 *  \[blog\] Windows免杀新技术 Process Herpaderping [https://jxy-s.github.io/herpaderping/][https_jxy-s.github.io_herpaderping]
 *  \[blog\] Domain Borrowing: 一种基于CDN的新型隐蔽通信方法 [https://xlab.tencent.com/cn/2021/05/14/domain-borrowing/][https_xlab.tencent.com_cn_2021_05_14_domain-borrowing]

### C&C ###

*  \[tool\] ICMP后门 [https://github.com/inquisb/icmpsh][https_github.com_inquisb_icmpsh]
 *  \[tool\] Windows远控 in C\# [https://github.com/quasar/QuasarRAT][https_github.com_quasar_QuasarRAT]
 *  \[tool\] Defcon后渗透工具,大宝剑 [https://github.com/zerosum0x0/koadic][https_github.com_zerosum0x0_koadic]
 *  \[tool\] Custom Command and Control [https://labs.mwrinfosecurity.com/tools/c3][https_labs.mwrinfosecurity.com_tools_c3]
 *  \[paper\] CobaltStrike教程文档 [https://wbglil.gitbooks.io/cobalt-strike/][https_wbglil.gitbooks.io_cobalt-strike]
 *  \[blog\] PowerGhost挖矿病毒分析 [https://www.freebuf.com/articles/system/219715.html][https_www.freebuf.com_articles_system_219715.html]
 *  \[tool\] 隐藏网络连接的后门 [https://github.com/BeetleChunks/redsails][https_github.com_BeetleChunks_redsails]
 *  \[tool\] Powershell反连后门 [https://github.com/ZHacker13/ReverseTCPShell][https_github.com_ZHacker13_ReverseTCPShell]
 *  \[tool\] JS VBS Payload生成器 [https://github.com/mdsecactivebreach/CACTUSTORCH][https_github.com_mdsecactivebreach_CACTUSTORCH]
 *  \[tool\] 基于Golang的C2，DeimosC2 [https://github.com/DeimosC2/DeimosC2][https_github.com_DeimosC2_DeimosC2]
 *  \[tool\] 基于Golang的反弹Shell管理程序 [https://github.com/WangYihang/Platypus][https_github.com_WangYihang_Platypus]
 *  \[tool\] 基于.Net框架的开源C2，[https://github.com/cobbr/Covenant][https_github.com_cobbr_Covenant]
 *  \[tool\] 基于Rust的开源C2 Link，支持 Windows、Linux、MacOS [https://github.com/postrequest/link][https_github.com_postrequest_link]
 *  \[tool\] C语言编写的小巧精悍后门 [https://github.com/MarioVilas/thetick][https_github.com_MarioVilas_thetick]
 *  \[tool\] C2 Silver [https://github.com/BishopFox/sliver][https_github.com_BishopFox_sliver]

### 数据外传 Data Exfiltration ###

*  \[blog\] 数据外传技术 [https://www.pentestpartners.com/security-blog/data-exfiltration-techniques/][https_www.pentestpartners.com_security-blog_data-exfiltration-techniques]

### 杂项 & 辅助工具 Misc ###

*  \[forum\] Hack the box [https://www.hackthebox.eu/][https_www.hackthebox.eu]
 *  \[tool\] 代码生成手绘图 [https://www.websequencediagrams.com/][https_www.websequencediagrams.com]
 *  \[tool\] 本地代码生成ascii文本绘图 graph::easy
 *  \[tricks\] 技巧汇总 [https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet\#lbwh-anchor][https_github.com_hackerschoice_thc-tips-tricks-hacks-cheat-sheet_lbwh-anchor]

#### 匿名邮箱和短信接收平台 ####

*  [https://lcx.cc/post/4594/][https_lcx.cc_post_4594]
 *  复用Gmail邮箱的技巧 [https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-more-from-your.html][https_gmail.googleblog.com_2008_03_2-hidden-ways-to-get-more-from-your.html]

### 中间人 MITM ###

*  \[tool\] [https://github.com/LionSec/xerosploit][https_github.com_LionSec_xerosploit]
 *  \[tool\] 钓鱼反向代理中间人工具 [https://github.com/hash3liZer/evilginx2][https_github.com_hash3liZer_evilginx2]

### 安卓安全 Android ###

*  \[paper\] Frida操作手册 [https://github.com/hookmaster/frida-all-in-one][https_github.com_hookmaster_frida-all-in-one]

### 逆向分析 Reverse ###

*  \[tool\] NSA发布逆向分析框架Ghidra [https://www.nsa.gov/resources/everyone/ghidra/][https_www.nsa.gov_resources_everyone_ghidra]
 *  \[tool\] Modern Java Bytecode Editor [https://github.com/Col-E/Recaf][https_github.com_Col-E_Recaf]

### 爆破 & 字典 Wordlist ###

*  常见服务的暴力破解 [https://github.com/lanjelot/patator][https_github.com_lanjelot_patator]
 *  看起来很强的弱密码 [https://github.com/r35tart/RW\_Password][https_github.com_r35tart_RW_Password]
 *  超全Payload [https://github.com/swisskyrepo/PayloadsAllTheThings][https_github.com_swisskyrepo_PayloadsAllTheThings]
 *  社工字典生成工具 [https://github.com/Saferman/cupper][https_github.com_Saferman_cupper]

### 渗透辅助 & OOB工具 ###

*  \[tool\] nuclei 的 dnslog [https://github.com/projectdiscovery/interactsh][https_github.com_projectdiscovery_interactsh]
 *  \[tool\] lijiejie 基于 bugscan dnslog 二开的 dnslog [https://github.com/lijiejie/eyes.sh][https_github.com_lijiejie_eyes.sh]

### 自动化扫描 & 巡检 ###

*  \[tool\] 分布式扫描器WDScanner [https://www.freebuf.com/sectool/203772.html][https_www.freebuf.com_sectool_203772.html]
 *  \[tool\] 灯塔资产巡检 [https://github.com/TophantTechnology/ARL][https_github.com_TophantTechnology_ARL]

### 云安全 & 云原生 ###

*  \[book\] K8S指南 [https://feisky.gitbooks.io/kubernetes/introduction/101.html][https_feisky.gitbooks.io_kubernetes_introduction_101.html]
 *  \[list\] 云上攻击技战法 [https://hackingthe.cloud/][https_hackingthe.cloud]

### Web安全 ###

*  \[collections\] Web安全项目合集 [https://github.com/qazbnm456/awesome-web-security][https_github.com_qazbnm456_awesome-web-security]
 *  \[tool\] Web扫描通用辅助函数集 [https://wsltools.readthedocs.io/en/latest/][https_wsltools.readthedocs.io_en_latest]
 *  \[tool\] Web爬虫，基于Chrome Headless [https://github.com/chaitin/rad][https_github.com_chaitin_rad]
 *  \[tool\] Burpsuite插件，敏感信息识别和提取 [https://github.com/gh0stkey/HaE][https_github.com_gh0stkey_HaE]
 *  \[tool\] MLoger - HTTP(S)/TCP/WS 抓包测试工具 [https://github.com/momosecurity/Mloger][https_github.com_momosecurity_Mloger]
 *  \[tool\] Web扫描器 nuclei，支持POC扫描 [https://github.com/projectdiscovery/nuclei][https_github.com_projectdiscovery_nuclei]

### 软件包/组件/依赖安全 ###

*  \[tool\] 开源漏洞库，组件安全，依赖安全 [https://security.snyk.io/][https_security.snyk.io]
 *  \[tool\] 组件依赖安全检测 [https://github.com/jeremylong/DependencyCheck][https_github.com_jeremylong_DependencyCheck]

#### XXE ####

*  \[tool\] XXE盲打外传工具 [https://github.com/TheTwitchy/xxer][https_github.com_TheTwitchy_xxer]
 *  \[tool\] 攻击Java RMI [https://github.com/NickstaDB/BaRMIe][https_github.com_NickstaDB_BaRMIe]

### Java安全 ###

*  \[book\] Java安全 [https://github.com/anbai-inc/javaweb-sec][https_github.com_anbai-inc_javaweb-sec]
 *  \[tool\] 优化版本yso [https://github.com/zema1/ysoserial][https_github.com_zema1_ysoserial]

### 前端黑魔法 ###

*  paper 反爬虫JS破解与混淆还原手册 [https://github.com/LoseNine/Restore-JS][https_github.com_LoseNine_Restore-JS]

## Defense ##

### 入侵检测 Detection ###

*  \[blog\] 针对微软活动目录(AD)的七大高级攻击技术及相应检测方法 [https://www.anquanke.com/post/id/161815][https_www.anquanke.com_post_id_161815]
 *  \[blog\] 攻防对抗：活动目录中的欺骗技术 [https://www.anquanke.com/post/id/162210][https_www.anquanke.com_post_id_162210]
 *  \[tool\] Webshell查杀 [http://www.shellpub.com/][http_www.shellpub.com]
 *  \[paper\] eBPF进程阻断 [https://www.cnxct.com/linux-kernel-hotfix-with-ebpf-lsm/][https_www.cnxct.com_linux-kernel-hotfix-with-ebpf-lsm]
 *  \[paper\] Tetragon进程阻断原理 [https://www.cnxct.com/how-tetragon-preventing-attacks/][https_www.cnxct.com_how-tetragon-preventing-attacks]

### 溯源反制 ###

*  \[tool\] 利用JetBrains来进行RCE反制 [https://github.com/CC11001100/idea-project-fish-exploit][https_github.com_CC11001100_idea-project-fish-exploit]

### 主机加固 ###

*  \[blog\] 隐藏其他用户的进程信息 [https://linux-audit.com/linux-system-hardening-adding-hidepid-to-proc/][https_linux-audit.com_linux-system-hardening-adding-hidepid-to-proc]

### 法律法规 Laws ###

*  美国信息泄露通知法 [https://en.wikipedia.org/wiki/Security\_breach\_notification\_laws][https_en.wikipedia.org_wiki_Security_breach_notification_laws]

转自文章来源： [https://kingx.me/pentest-tools/][https_kingx.me_pentest-tools]

[https_hackingthe.cloud]: https://hackingthe.cloud/
[https_ired.team]: https://ired.team/
[https_github.com_hslatman_awesome-threat-intelligence]: https://github.com/hslatman/awesome-threat-intelligence
[https_github.com_nshalabi_ATTACK-Tools]: https://github.com/nshalabi/ATTACK-Tools
[https_github.com_enaqx_awesome-pentest]: https://github.com/enaqx/awesome-pentest
[https_jobrest.gitbooks.io_kali-linux-cn_content]: https://jobrest.gitbooks.io/kali-linux-cn/content/
[https_medium.com_mitre-attack_first-round-of-mitre-att-ck-evaluations-released-15db64ea970d]: https://medium.com/mitre-attack/first-round-of-mitre-att-ck-evaluations-released-15db64ea970d
[https_ired.team_offensive-security_red-team-infrastructure_automating-red-team-infrastructure-with-terraform]: https://ired.team/offensive-security/red-team-infrastructure/automating-red-team-infrastructure-with-terraform
[https_github.com_mantvydasb_Offensive-Security-OSCP-Cheatsheets]: https://github.com/mantvydasb/Offensive-Security-OSCP-Cheatsheets/
[https_github.com_blaCCkHatHacEEkr_PENTESTING-BIBLE]: https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
[https_github.com_yeyintminthuhtut_Awesome-Red-Teaming]: https://github.com/yeyintminthuhtut/Awesome-Red-Teaming/
[https_osint-labs.org_apt]: https://osint-labs.org/apt/
[https_m0chan.github.io_2019_07_30_Windows-Notes-and-Cheatsheet.html]: https://m0chan.github.io/2019/07/30/Windows-Notes-and-Cheatsheet.html
[https_github.com_mitre_caldera]: https://github.com/mitre/caldera
[https_caldera.readthedocs.io_en_latest_index.html]: https://caldera.readthedocs.io/en/latest/index.html
[https_github.com_redcanaryco_atomic-red-team]: https://github.com/redcanaryco/atomic-red-team
[https_atomicredteam.io]: https://atomicredteam.io/
[https_github.com_TryCatchHCF_DumpsterFire]: https://github.com/TryCatchHCF/DumpsterFire
[https_github.com_uber-common_metta]: https://github.com/uber-common/metta
[https_github.com_uber-common_metta_wiki]: https://github.com/uber-common/metta/wiki
[https_github.com_endgameinc_RTA]: https://github.com/endgameinc/RTA
[https_specterops.io]: https://specterops.io/
[https_www.synack.com_red-team]: https://www.synack.com/red-team/
[https_github.com_projectdiscovery]: https://github.com/projectdiscovery/
[http_www.skymem.info]: http://www.skymem.info/
[https_securitytrails.com_dns-trails]: https://securitytrails.com/dns-trails
[http_crt.sh]: https://crt.sh/
[https_viewdns.info]: https://viewdns.info/
[https_pentest-tools.com]: https://pentest-tools.com/
[https_www.shodan.io]: https://www.shodan.io/
[https_censys.io]: https://censys.io/
[https_fofa.so]: https://fofa.so/
[https_www.zoomeye.org]: https://www.zoomeye.org/
[https_dnsdumpster.com]: https://dnsdumpster.com/
[https_www.virustotal.com]: https://www.virustotal.com/
[http_www.dnsgoodies.com]: http://www.dnsgoodies.com/
[https_github.com_Viralmaniar_BigBountyRecon]: https://github.com/Viralmaniar/BigBountyRecon
[https_github.com_stamparm_identYwaf]: https://github.com/stamparm/identYwaf
[https_github.com_klionsec_PhishingExploit]: https://github.com/klionsec/PhishingExploit
[https_github.com_gophish_gophish]: https://github.com/gophish/gophish
[https_www.reddit.com_r_google_comments_692cr4_new_google_docs_phishing_scam_almost_undetectable]: https://www.reddit.com/r/google/comments/692cr4/new_google_docs_phishing_scam_almost_undetectable/
[https_blog.cymulate.com_abusing-microsoft-office-online-video]: https://blog.cymulate.com/abusing-microsoft-office-online-video
[https_www.mailsploit.com_index]: https://www.mailsploit.com/index
[https_xz.aliyun.com_t_2496]: https://xz.aliyun.com/t/2496
[https_github.com_openworldoperations_FISHY]: https://github.com/openworldoperations/FISHY
[https_jameshfisher.github.io_cursory-hack]: https://jameshfisher.github.io/cursory-hack/
[http_archive.hack.lu_2010_Costin-HackingPrintersForFunAndProfit-slides.pdf]: http://archive.hack.lu/2010/Costin-HackingPrintersForFunAndProfit-slides.pdf
[https_mp.weixin.qq.com_s_mIcRNcf5HmZ4axe8N92S7Q]: https://mp.weixin.qq.com/s/mIcRNcf5HmZ4axe8N92S7Q
[http_www.freebuf.com_articles_wireless_179953.html]: http://www.freebuf.com/articles/wireless/179953.html
[https_medium.com_alex.birsan_dependency-confusion-4a5d60fec610]: https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610
[https_github.com_hasherezade_pe_to_shellcode]: https://github.com/hasherezade/pe_to_shellcode
[https_www.anquanke.com_post_id_159554]: https://www.anquanke.com/post/id/159554
[https_mp.weixin.qq.com_s_pzpc44-xH932M4eCJ8LxYg]: https://mp.weixin.qq.com/s/pzpc44-xH932M4eCJ8LxYg
[http_jackson.thuraisamy.me_runtime-exec-payloads.html]: http://jackson.thuraisamy.me/runtime-exec-payloads.html
[https_xz.aliyun.com_t_7067]: https://xz.aliyun.com/t/7067
[https_medium.com_cowtowncoder_on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062]: https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
[https_github.com_miaochiahao_slides_tree_master_fastjson]: https://github.com/miaochiahao/slides/tree/master/fastjson
[https_github.com_0x48piraj_Jiraffe]: https://github.com/0x48piraj/Jiraffe
[https_github.com_feihong-cs_JNDIExploit]: https://github.com/feihong-cs/JNDIExploit
[https_xz.aliyun.com_t_2519]: https://xz.aliyun.com/t/2519
[https_guif.re_windowseop]: https://guif.re/windowseop
[http_payloads.online_archivers_2018-10-08_1]: http://payloads.online/archivers/2018-10-08/1
[https_guif.re_linuxeop]: https://guif.re/linuxeop
[https_github.com_GDSSecurity_Windows-Exploit-Suggester_blob_master_windows-exploit-suggester.py]: https://github.com/GDSSecurity/Windows-Exploit-Suggester/blob/master/windows-exploit-suggester.py
[https_github.com_PenturaLabs_Linux_Exploit_Suggester]: https://github.com/PenturaLabs/Linux_Exploit_Suggester/
[https_github.com_abatchy17_WindowsExploits]: https://github.com/abatchy17/WindowsExploits
[https_github.com_rasta-mouse_Sherlock]: https://github.com/rasta-mouse/Sherlock
[http_touhidshaikh.com_blog_p_790]: http://touhidshaikh.com/blog/?p=790
[http_www.freebuf.com_vuls_56081.html]: http://www.freebuf.com/vuls/56081.html
[https_www.exploit-db.com_docs_english_46131-windows-privilege-escalations.pdf]: https://www.exploit-db.com/docs/english/46131-windows-privilege-escalations.pdf
[https_github.com_ohpe_juicy-potato]: https://github.com/ohpe/juicy-potato
[https_foxglovesecurity.com_2016_09_26_rotten-potato-privilege-escalation-from-service-accounts-to-system]: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/
[https_twitter.com_FlatL1ne_status_1194208167976165376]: https://twitter.com/FlatL1ne/status/1194208167976165376
[https_github.com_rebootuser_LinEnum_blob_master_LinEnum.sh]: https://github.com/rebootuser/LinEnum/blob/master/LinEnum.sh
[https_github.com_DominicBreuker_pspy]: https://github.com/DominicBreuker/pspy
[https_book.hacktricks.xyz_linux-unix_privilege-escalation]: https://book.hacktricks.xyz/linux-unix/privilege-escalation
[https_www.digitalbodyguard.com_graydragon.html]: https://www.digitalbodyguard.com/graydragon.html
[https_mobile.twitter.com_subTee_status_864903111952875521]: https://mobile.twitter.com/subTee/status/864903111952875521
[https_docs.microsoft.com_en-us_previous-versions_dotnet_netframework-4.0_bb384689_v_vs.100]: https://docs.microsoft.com/en-us/previous-versions/dotnet/netframework-4.0/bb384689%28v=vs.100%29
[https_www.anquanke.com_post_id_163197]: https://www.anquanke.com/post/id/163197
[http_www.hexacorn.com_blog_2018_08_12_systemsettings-exe-yet-another-lolbin-for-loading-dlls]: http://www.hexacorn.com/blog/2018/08/12/systemsettings-exe-yet-another-lolbin-for-loading-dlls/
[https_xz.aliyun.com_t_2744]: https://xz.aliyun.com/t/2744
[https_github.com_rebeyond_Behinder]: https://github.com/rebeyond/Behinder
[https_xz.aliyun.com_t_7338]: https://xz.aliyun.com/t/7338
[https_github.com_kris-nova_boopkit]: https://github.com/kris-nova/boopkit
[https_infosecwriteups.com_creating-a-backdoor-in-pam-in-5-line-of-code-e23e99579cd9]: https://infosecwriteups.com/creating-a-backdoor-in-pam-in-5-line-of-code-e23e99579cd9
[https_github.com_Ben0xA_nps]: https://github.com/Ben0xA/nps
[https_github.com_samratashok_nishang]: https://github.com/samratashok/nishang
[https_github.com_api0cradle_LOLBAS]: https://github.com/api0cradle/LOLBAS
[https_posts.specterops.io_introducing-sharpsploit-a-c-post-exploitation-library-5c7be5f16c51]: https://posts.specterops.io/introducing-sharpsploit-a-c-post-exploitation-library-5c7be5f16c51
[https_www.cnblogs.com_17bdw_p_8550189.html]: https://www.cnblogs.com/17bdw/p/8550189.html
[https_blog.xpnsec.com_rundll32-your-dotnet]: https://blog.xpnsec.com/rundll32-your-dotnet/
[https_github.com_3F_DllExport]: https://github.com/3F/DllExport
[https_github.com_TheSecondSun_Bashark]: https://github.com/TheSecondSun/Bashark/
[https_github.com_GhostPack_SafetyKatz]: https://github.com/GhostPack/SafetyKatz
[https_osandamalith.com_2019_05_11_shellcode-to-dump-the-lsass-process]: https://osandamalith.com/2019/05/11/shellcode-to-dump-the-lsass-process/
[https_github.com_klionsec_Decryption-tool]: https://github.com/klionsec/Decryption-tool
[https_github.com_ffuf_ffuf_tree_master]: https://github.com/ffuf/ffuf/tree/master
[https_github.com_BloodHoundAD_SharpHound]: https://github.com/BloodHoundAD/SharpHound
[https_diablohorn.com_2018_08_25_remote-ntlm-relaying-through-meterpreter-on-windows-port-445]: https://diablohorn.com/2018/08/25/remote-ntlm-relaying-through-meterpreter-on-windows-port-445/
[https_github.com_SpiderLabs_Responder]: https://github.com/SpiderLabs/Responder
[https_github.com_Arno0x_NtlmRelayToEWS]: https://github.com/Arno0x/NtlmRelayToEWS
[https_github.com_quickbreach_SMBetray]: https://github.com/quickbreach/SMBetray
[C]: https://github.com/DamonMohammadbagher/eBook-BypassingAVsByCSharp
[https_github.com_Veil-Framework_Veil]: https://github.com/Veil-Framework/Veil
[http_www.freebuf.com_articles_system_53818.html]: http://www.freebuf.com/articles/system/53818.html
[Mimikaz]: http://www.freebuf.com/articles/web/176796.html
[.Net]: https://www.peew.pw/blog/2017/12/4/writing-net-executables-for-penteters-part-2
[ATT_CK _]: https://www.redcanary.com/blog/active-breach-evading-defenses/
[Link 1]: https://curtbraz.blogspot.com/2018/08/bypassing-next-gen-av-during-pentest.html
[Windows NTFS]: https://xz.aliyun.com/t/2539
[http_williamshowalter.com_a-universal-windows-bootkit]: http://williamshowalter.com/a-universal-windows-bootkit/
[https_www.welivesecurity.com_2018_09_27_lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group]: https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
[https_twitter.com_DissectMalware_status_1025580967384305664]: https://twitter.com/DissectMalware/status/1025580967384305664
[https_github.com_govolution_avet]: https://github.com/govolution/avet
[https_0x00sec.org_t_bypassing-crowdstrike-falcon-detection-from-phishing-email-to-reverse-shell_10802]: https://0x00sec.org/t/bypassing-crowdstrike-falcon-detection-from-phishing-email-to-reverse-shell/10802
[https_blog.netspi.com_10-evil-user-tricks-for-bypassing-anti-virus]: https://blog.netspi.com/10-evil-user-tricks-for-bypassing-anti-virus/
[https_github.com_Mr-Un1k0d3r_MaliciousDLLGenerator]: https://github.com/Mr-Un1k0d3r/MaliciousDLLGenerator
[https_github.com_k8gege_scrun]: https://github.com/k8gege/scrun
[https_blog.xpnsec.com_protecting-your-malware]: https://blog.xpnsec.com/protecting-your-malware/
[https_blog.f-secure.com_detecting-parent-pid-spoofing]: https://blog.f-secure.com/detecting-parent-pid-spoofing/
[https_medium.com_bugbountywriteup_antivirus-evasion-with-python-49185295caf1]: https://medium.com/bugbountywriteup/antivirus-evasion-with-python-49185295caf1
[https_github.com_Hzllaga_JsLoader]: https://github.com/Hzllaga/JsLoader
[https_www.rack911labs.com_research_exploiting-almost-every-antivirus-software]: https://www.rack911labs.com/research/exploiting-almost-every-antivirus-software/
[https_github.com_TideSec_BypassAntiVirus]: https://github.com/TideSec/BypassAntiVirus
[https_github.com_threatexpress_cs2modrewrite]: https://github.com/threatexpress/cs2modrewrite
[https_xz.aliyun.com_t_6222]: https://xz.aliyun.com/t/6222
[https_github.com_gh0stkey_avList]: https://github.com/gh0stkey/avList/
[https_jxy-s.github.io_herpaderping]: https://jxy-s.github.io/herpaderping/
[https_xlab.tencent.com_cn_2021_05_14_domain-borrowing]: https://xlab.tencent.com/cn/2021/05/14/domain-borrowing/
[https_github.com_inquisb_icmpsh]: https://github.com/inquisb/icmpsh
[https_github.com_quasar_QuasarRAT]: https://github.com/quasar/QuasarRAT
[https_github.com_zerosum0x0_koadic]: https://github.com/zerosum0x0/koadic
[https_labs.mwrinfosecurity.com_tools_c3]: https://labs.mwrinfosecurity.com/tools/c3
[https_wbglil.gitbooks.io_cobalt-strike]: https://wbglil.gitbooks.io/cobalt-strike/
[https_www.freebuf.com_articles_system_219715.html]: https://www.freebuf.com/articles/system/219715.html
[https_github.com_BeetleChunks_redsails]: https://github.com/BeetleChunks/redsails
[https_github.com_ZHacker13_ReverseTCPShell]: https://github.com/ZHacker13/ReverseTCPShell
[https_github.com_mdsecactivebreach_CACTUSTORCH]: https://github.com/mdsecactivebreach/CACTUSTORCH
[https_github.com_DeimosC2_DeimosC2]: https://github.com/DeimosC2/DeimosC2
[https_github.com_WangYihang_Platypus]: https://github.com/WangYihang/Platypus
[https_github.com_cobbr_Covenant]: https://github.com/cobbr/Covenant
[https_github.com_postrequest_link]: https://github.com/postrequest/link
[https_github.com_MarioVilas_thetick]: https://github.com/MarioVilas/thetick
[https_github.com_BishopFox_sliver]: https://github.com/BishopFox/sliver
[https_www.pentestpartners.com_security-blog_data-exfiltration-techniques]: https://www.pentestpartners.com/security-blog/data-exfiltration-techniques/
[https_www.hackthebox.eu]: https://www.hackthebox.eu/
[https_www.websequencediagrams.com]: https://www.websequencediagrams.com/
[https_github.com_hackerschoice_thc-tips-tricks-hacks-cheat-sheet_lbwh-anchor]: https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet#lbwh-anchor
[https_lcx.cc_post_4594]: https://lcx.cc/post/4594/
[https_gmail.googleblog.com_2008_03_2-hidden-ways-to-get-more-from-your.html]: https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-more-from-your.html
[https_github.com_LionSec_xerosploit]: https://github.com/LionSec/xerosploit
[https_github.com_hash3liZer_evilginx2]: https://github.com/hash3liZer/evilginx2
[https_github.com_hookmaster_frida-all-in-one]: https://github.com/hookmaster/frida-all-in-one
[https_www.nsa.gov_resources_everyone_ghidra]: https://www.nsa.gov/resources/everyone/ghidra/
[https_github.com_Col-E_Recaf]: https://github.com/Col-E/Recaf
[https_github.com_lanjelot_patator]: https://github.com/lanjelot/patator
[https_github.com_r35tart_RW_Password]: https://github.com/r35tart/RW_Password
[https_github.com_swisskyrepo_PayloadsAllTheThings]: https://github.com/swisskyrepo/PayloadsAllTheThings
[https_github.com_Saferman_cupper]: https://github.com/Saferman/cupper
[https_github.com_projectdiscovery_interactsh]: https://github.com/projectdiscovery/interactsh
[https_github.com_lijiejie_eyes.sh]: https://github.com/lijiejie/eyes.sh
[https_www.freebuf.com_sectool_203772.html]: https://www.freebuf.com/sectool/203772.html
[https_github.com_TophantTechnology_ARL]: https://github.com/TophantTechnology/ARL
[https_feisky.gitbooks.io_kubernetes_introduction_101.html]: https://feisky.gitbooks.io/kubernetes/introduction/101.html
[https_github.com_qazbnm456_awesome-web-security]: https://github.com/qazbnm456/awesome-web-security
[https_wsltools.readthedocs.io_en_latest]: https://wsltools.readthedocs.io/en/latest/
[https_github.com_chaitin_rad]: https://github.com/chaitin/rad
[https_github.com_gh0stkey_HaE]: https://github.com/gh0stkey/HaE
[https_github.com_momosecurity_Mloger]: https://github.com/momosecurity/Mloger
[https_github.com_projectdiscovery_nuclei]: https://github.com/projectdiscovery/nuclei
[https_security.snyk.io]: https://security.snyk.io/
[https_github.com_jeremylong_DependencyCheck]: https://github.com/jeremylong/DependencyCheck
[https_github.com_TheTwitchy_xxer]: https://github.com/TheTwitchy/xxer
[https_github.com_NickstaDB_BaRMIe]: https://github.com/NickstaDB/BaRMIe
[https_github.com_anbai-inc_javaweb-sec]: https://github.com/anbai-inc/javaweb-sec
[https_github.com_zema1_ysoserial]: https://github.com/zema1/ysoserial
[https_github.com_LoseNine_Restore-JS]: https://github.com/LoseNine/Restore-JS
[https_www.anquanke.com_post_id_161815]: https://www.anquanke.com/post/id/161815
[https_www.anquanke.com_post_id_162210]: https://www.anquanke.com/post/id/162210
[http_www.shellpub.com]: http://www.shellpub.com/
[https_www.cnxct.com_linux-kernel-hotfix-with-ebpf-lsm]: https://www.cnxct.com/linux-kernel-hotfix-with-ebpf-lsm/
[https_www.cnxct.com_how-tetragon-preventing-attacks]: https://www.cnxct.com/how-tetragon-preventing-attacks/
[https_github.com_CC11001100_idea-project-fish-exploit]: https://github.com/CC11001100/idea-project-fish-exploit
[https_linux-audit.com_linux-system-hardening-adding-hidepid-to-proc]: https://linux-audit.com/linux-system-hardening-adding-hidepid-to-proc/
[https_en.wikipedia.org_wiki_Security_breach_notification_laws]: https://en.wikipedia.org/wiki/Security_breach_notification_laws
[https_kingx.me_pentest-tools]: https://kingx.me/pentest-tools/