目录
如果文章对你有帮助,欢迎关注、点赞、收藏一键三连支持以下哦!
想要一起交流学习的小伙伴可以关注【黑客菌】,后台领取资料,私信拉群。共同学习进步
个人技术博客:
国内:
If you can take it, you can make it._qq_27446553_CSDN博客 (qq_27446553博客)
LoRexxar's Blog(lorexxar博客)
http://www.test404.com/(test404博客)
Evi1cg's blog(evilcg博客)
http://ver007.com/(ver007博客)
http://cciezsm.lofter.com/(颖奇博客)
http://www.secsky.cn/(安全天空博客)
Hackfun - | Secblog | Pentest | Auditing | Sectool | CTF Write-up(4ido1on博客)
http://www.7kb.org/(7kb论坛)
http://lu4n.com/(lun博客)
OD体育平台-首页(cnbiraid博客)
http://blog.neargle.com(neargle博客)
https://lightrains.org(lightrains博客)
首页 - imlonghao(imlonghao博客)
ZeroKeeper(zerokeeper博客)
http://www.thinkings.org/(thinkings博客)
0h1in9e' s Blog | 林歌博客 (ohlinge博客)
https://www.virzz.com (virzz博客)
https://www.jisec.com/ (jisec博客)
http://www.hfhuge.com/(hfhuge博客)
http://www.91ri.org/(91ri博客)
http://www.codersec.net (codersec博客)
Venenof7'Page(venenof博客)
http://linux.im/(im博客)
随风'S Blog(飓风博客)
shentou.org (安全渗透军火库博客)
http://joychou.org (joychou博客)
http://0cx.cc/ (0cx博客)
http://hacktech.cn/(hacketech博客)
http://www.lucien116.com(lucien博客)
http://www.hack1990.com(hack1990博客)
Xman21'Blog | 巨侠的博客(xmanblog博客)
小屿(xia0yu博客)
郑瀚Andrew.Hann - 博客园 (littlehann博客)
http://lonelyrain.me/(lonelyrain博客)
http://www.hack-gov.com(hack-gov博客)
http://xdxd.love/(xdxd博客)
https://www.lynahex.com/(lynahex博客)
S4b0r - 博客园(S4b0r博客)
Leesec's Blog(leesce博客)
Home(b14ck博客)
http://www.hksafe.cn.com (hksafe博客)
3gstudent-Blog(三好学生博客)
http://www.nxadmin.com/( nxadmin博客 )
首页 | 离别歌( p牛代码审计博客 )
http://www.code521.com/(code521博客)
PHP & Java( 园长博客)
http://le4f.net/(le4f博客)
http://www.polaris-lab.com/ (polaris-lab实验室)
程序人生(程序人生博客)
EVILCOS – //:alert(/Hacking Symbol/)//余弦(余玄博客)
DarkRay's Blog (blackh4t博客)
http://www.bugsec.org/tools (bugsec博客)
The domain name ecma.io is for sale(ecma博客)
http://www.meijj.org/ (meijj博客)
https://ricterz.me/(ricterz博客)
http://yaseng.org(yaseng博客)
安全小飞侠的窝 | 私人的专属技术博客(安全小飞侠博客)
http://www.0xmh.com/(0xmh博客)
李劼杰的博客(lijiejie博客)
Security Off(secoff博客)
http://twi1ight.com/(twi1ight博客)
https://rinige.com (ringige博客)
http://www.bystudent.com/(bystudent博客)
http://o0xmuhe.me/page/2/ (o0xmuhe博客)
http://www.blue-lotus.net/ (蓝莲花战队博客)
WebShell'S Blog( webshell博客)
AppLeU0's Blog »( appleu0博客)
lsh4ck's Blog - Hacking is endless! Focus on network security! (lshack博客)
Lcy’s Blog ( phpinfo博客)
Sky's自留地 (03sec博客)
OD体育平台-首页(cnbradid博客)
杀死比特 - 博客园(killbit博客)
http://blog.nuptzj.cn/ (nuptzj博客)
Ox9A82 - 博客园(Ox9A82博客 )
lsh4ck's Blog - Hacking is endless! Focus on network security! (lshack博客)
sevck - 博客园 (sevck博客)
https://tom0li.github.io(tom0li博客)
独自等待'S Blog - 关注信息安全(独自等待博客)
wujunze`s Blog(wujunze博客)
https://ht-sec.org(昊天博客)
HackingDocs(hackinglab博客)
http://www.milw0rm.cn(milw0rm博客)
https://www.sitedirsec.com/(非安全中国博客 )
http://www.arvinhk.com/(arivn博客)
Hacker/象哥's Blog(hk-xg博客 )
http://www.hackblog.cn/( hackblog博客)
http://piaoyu.org/(piaoyu博客)
http://defcon.cn/script(defcon博客)
http://www.jeehsu.com/(几许博客)
http://www.cnseay.com/(法师博客)
exehack.net(小残博客)
知道创宇(知道创宇博客)
http://www.keen8.com/(kee8博客 )
http://0ke.org/( 0ke博客 )
ror体育-官网(影风's Blog)
http://www.weixianmanbu.com/(黑客技术博客)
14x security Team-Official memorial station (14xhack博客)
RcoIl的窝(rcoil博客)
https://perseus.codes/(perseus博客)
http://www.legendsec.org/ (legendsec博客)
http://xiao106347.blog.163.com/(小刘kali博客)
SycloverSecurity | Focus on Cyber Security(三叶草博客)
http://www.cnnetsec.com/(cnnetsec博客)
http://iscc.gxu.edu.cn/index.php/Index/start (iscc博客)
http://www.joychou.org/(joychou博客)
EarthWorm(rootkiter博客)
TotoroLMva's Blog (lmva博客)
没有找到站点 (十六进制)
https://ha.cker.in/(cker博客)
http://3xp10it.cc/(3xp10it博客)
http://wolvez.club/(lostwolf博客)
http://thief.one(thief博客)
http://simeon.blog.51cto.com/(simeon博客)
PHP & Java(javaweb博客)
http://qqhack8.blog.163.com/(k8博客)
http://das.scusec.org/(scusec博客)
草泥马之家-Windows与.Net.....(草泥马之家博客)
http://www.webbaozi.com/(包子博客)
http://blog.safebuff.com/(x17dev博客)
http://k1p4ss.sinaapp.com/(k1p4ss博客)
http://www.daokers.com/(金刀客博客)
https://www.i0day.com/(小马博客)
范世强 - 博客园(范世强博客)
国外:
lanmaster53.com(lanmaster53博客)
Offensive Operations Training & Resources | SANS Institute(sans渗透测试博客)
DigiNinja - DigiNinja(digi渗透测试博客)
Home - Coding towards chaotic good and blogging about it - harmj0y(harmj0y渗透测试博客)
nullsecurity(nullsecurity渗透工具博客)
Home - Ehacking(ehacking渗透测试博客)
KitPloit - PenTest & Hacking Tools(kitploit.渗透测试博客)
http://www.commonexploits.com/(commonexploits渗透测试博客)
https://adsecurity.org/(AD域渗透测试博客)
Welcome to SecurityTube.net(securitytube渗透视频教程博客)
Directory Services Internals(AD域渗透测试博客)
https://adsecurity.org/(AD域渗透博客)
Blog de Gentil Kiwi | L'aide mémoire d'un kiwi(mimikazhi博客)
Sign In - Gogs(汽车安全博客)
Web vulnerability scanners – SecTools Top Network Security Tools/(安全工具下载博客)
Technical Blog - NetSPI(SQL注入技能博客)
sqlinjectionwiki.com(注入技能表博客)
The SQL Injection Knowledge Base (sql注入大全)
https://wn.com/httpheaderinjectionds(http头注入博客)
http://www.devttys0.com/blog/(路由安全博客)
fail0verflow :: Blogs(硬件大牛博客)
Black Hat | Home(黑帽大赛官方博客)
The Official Social Engineering Hub - Security Through Education(社会工程学博客)
Security - TechGenix(window安全博客)
https://www.blackmoreops.com/(linux安全博客)
HTTPTunnel - Tunnel Connections Through Restrictive Proxies (http-tunnel反向代理博客)
The ZMap Project(zmap博客)
Checking your browser...(thc博客)
Download Free Windows Password, Network, Security Tools | www.SecurityXploded.com(国外密码工具大全)
Pentest Blog – Inn for security folks(渗透测试博客)
Loading...(rekings博客)
http://www.hackingarticles.in(黑客文章知识库)
FuzzySecurity | Windows Privilege Escalation Fundamentals(fuzzysecurity博客)
A Red Teamer's guide to pivoting(artkond博客)
http://www.hacking-tutorial.com(haking博客)
Legal/ethical hacking. Information security.(legalhackers博客)
Quarkslab's blog(quarkslab博客)
(no title) (foxglovesecurity博客)
Carnal0wnage Blog(attackresearch博客)
Darknet - Hacking Tools, Hacker News & Cyber Security
malicious.link — welcome(room362博客)
Web Security Blog - PortSwigger(burpsuit博客)
https://blog.skullsecurity.org/(关于CTF)
https://community.rapid7.com/community/metasploit/blog(MSF官方博客)
http://www.tssci-security.com/(tssci博客)
GDS - Blog(gdssecurity博客)
https://websec.wordpress.com(websec博客)
http://bernardodamele.blogspot.com/(blogspot博客)
http://laramies.blogspot.com/(blogspot博客)
https://clymb3r.wordpress.com/ (clymb3r博客)
spylogic.net(spylogic博客)
Blog | pentestmonkey(pentestmonkey博客)
https://www.commonexploits.com/(commonexploits博客)
SensePost | Blog(sensepost博客)
http://exploit.co.il/blog/(exploit博客)
http://sirdarckcat.blogspot.com/(sirdarckcat博客)
http://reusablesec.blogspot.com/(reusablesec博客)
Leading Managed Detection and Response | Trustwave(trustwave博客)
..:: Corelan Cybersecurity Research ::..Corelan Cybersecurity Research(corelan博客)
Blog - NotSoSecure(notsosecure博客)
Security Reliks | Tips, Tools, and Research for Penetration Testers and Incident Handlers(securityreliks博客)
http://ihazomgsecurityskillz.blogspot.com/(linux内核)
memset's blog | Yet another computer science blog(memset博客)
gynvael.coldwind//vx.log(gynvael博客)
g0tmi1k(g0tmi1k博客)
DigiNinja - DigiNinja(digi博客)
http://pentestit.com/(pentestit博客)
#_shellntel(shellntel博客)
Irongeek.com(irongeek博客)
The Magic of Learning — tech.bitvijays.com(bitvijays博客)
https://pentestlab.blog(渗透检测实验室博客)
Hack This Site Forum • Index page(国外黑客论坛)
在线知识:
Sec-News 安全文摘(安全文库)
安全知识 - 安全客,安全资讯平台(安全客知识库)
https://www.hackfun.org/kali-tools/kali-tools-zh.html( KALI工具使用说明)
GitBook - Where software teams break knowledge silos. (burpsuit中文指南)
http://www.w3school.com.cn/( w3school在线学习 )
菜鸟教程 - 学的不仅是技术,更是梦想! (it脚本学习)
Django 2.2 基础教程 - 自强学堂 (djiango之python学习)
SecWiki-安全维基,汇集国内外优秀安全资讯、工具和网站(安全技能库)
OSCHINA - 中文开源技术交流社区(源代码)
Paper (seebug安全知识库)
网络安全博客 NaviSec.it – 纳威安全导航 | 网络安全导航(安全文库)
exp库-打造中文最大exploit库(国内exp搜索大全)
http://www.exploitsearch.net(exp搜索)
论坛与导航:
http://www.hegouvip.com/(合购资源网)
安全圈info - 做接地气的信息安全导航(安全圈导航)
http://navisec.it/ (navisec导航)
http://cmcc.ml/(cmcc网址安全导航)
看雪-安全培训|安全招聘|www.kanxue.com(看雪论坛 )
http://www.52pojie.cn/(吾爱破解 )
http://www.metasploit.cn/(metasploit论坛)
淘宝网 - 淘!我喜欢 (先知社区)
逆向未来 - Powered by Discuz!(安卓逆向论坛)
i春秋论坛|白帽黑客论坛|网络渗透技术|网站安全|移动安全|通信安全(爱春秋论坛)
网络安全实验室|网络信息安全攻防学习平台(hack实验室)
T00LS | 低调求发展 - 潜心习安全 - T00ls(t00ls论坛 )
搜索 - 九零(90sec论坛)
https://www.70sec.com/(70sec论坛)
https://forum.exploit.in/(exploit论坛)
Exetools - Powered by vBulletin(explotools论坛)
https://www.v2ex.com/(v2ex程序员社区)
安全资讯:
FreeBuf网络安全行业门户(freebuf安全媒体)
漏洞银行( 漏洞银行安全资讯)
安全脉搏 | 分享技术,悦享品质(安全脉搏安全资讯)
http://www.secbox.cn/(安全盒子资讯)
http://www.secist.com/(即刻安全资讯)
SecWiki-安全维基,汇集国内外优秀安全资讯、工具和网站(wiki安全资讯)
http://www.mottoin.com/(猫眼安全媒体)
嘶吼 RoarTalk – 回归最本质的信息安全,互联网安全新媒体,4hou.com(嘶吼安全媒体)
漏洞预警和exp查询:
http://wy.hx99.net/(乌云搜索)
https://loudong.sjtu.edu.cn/(教育行业安全漏洞)
http://webscan.360.cn/vul(网站常见漏洞)
CXBugtraq Site 1 - cxsecurity.com(国外漏洞)
http://blogs.360.cn/(360漏洞技术博客)
http://xteam.baidu.com/(百度实验室 )
绿盟科技技术博客(绿盟漏洞预警博客)
https://www.seebug.org/(seebug漏洞预警)
http://www.cnvd.org.cn/(cnvd漏洞平台)
Vulnerable By Design ~ VulnHub(漏洞测试平台)
Exploit Database Papers(exploit-db漏洞库)
MSRC - Microsoft Security Response Center(微软exp版本号列表)
https://bugs.chromium.org/p/project-zero/issues/list(微软漏洞下载搜索)
https://www.kernel-exploits.com/(linxu内核exp查询)
http://exploit.linuxnote.org/(国内linux内核EXP查询)
Packet Storm(packetstormsecurity 的exp查询)
CVE -CVE(漏洞编号查询)
http://www.securiteam.com/(安全团队)
Bugtraq(安全焦点)
http://www.securitytracker.com(securitytracker)
Georgi Guninski(guninski的exp查询)
CXSECURITY.COM Free Security List(漏洞库)
Routerpwn - One click exploits, generators, tools, news, vulnerabilities, poc, alerts(路由漏洞查询)
http://www.sebug.net/vuldb/vulnerabilities(WEB漏洞库查询)
漏洞时代 - 最新漏洞_0DaY5.CoM(WEB漏洞时代)
http://www.ussrback.com/(ussrback的exp查询)
http://cn.0day.today/(oday)
XSS'OR - Hack with JavaScript (xss poc大全)
在线web扫描器:
360Webscan网站安全检测 | 漏洞扫描工具_网站漏洞修复_网站后门检测
http://site.safedog.cn/index.html
CTF训练:
实验吧平台升级维护中(CTF训练营)
alert(1)(xss闯关)
http://oj.xctf.org.cn/web/login/?next=/(xctf)
安全客 - 安全资讯平台(360CTF训练营 )
网络安全实验室|网络信息安全攻防学习平台(网络安全对抗平台 )
pwnhub | Beta(CTF比赛)
XCTF社区 | XCTF联赛对外发布及交流平台(xctf社区)
安全客 - 安全资讯平台(360CTF社区)
CTFtime.org / All about CTF (Capture The Flag)(ctftime社区)
github项目:
https://github.com/ctfs/(CTFwrite )
https://github.com/powershellempire/empire(powershllempire项目)
https://github.com/adaptivethreat/EmPyre(EmPyre项目)
https://github.com/HarmJ0y/Malleable-C2-Profiles(Malleable-C2-Profiles项目)
https://github.com/Veil-Framework/Veil-Evasion(Veil-Evasion免杀项目)
https://github.com/offensive-security(offensive-security项目)
https://github.com/secretsquirrel/the-backdoor-factory/(the-backdoor-factory项目)
https://github.com/Veil-Framework/Veil-Evasion/(Veil-Evasion免杀项目)
https://github.com/x3omdax/PenBox(安全测试框架)
https://github.com/SecWiki(安全文库)
在线常用工具:
http://ip.fbisb.com/(真实IP地址查询地址)
在线子域名查询(子域名在线爆破)
漏洞银行(BUGBANK) 官方网站 | 全球领先的漏洞发现平台(在线子域名爆破)
https://phpinfo.me/bing.php(在线c段查询)
DNSDB/(在线C段查询2)
http://www.yopmail.com/zh/(一次性使用邮箱)
Objectif Sécurité - Accueil(LM破解)
https://www.mailinator.com/(一次性使用邮箱)
http://tools88.com/safe/vnc.php(在线VNC破解)
https://www.hashkiller.co.uk/(在线hash破解)
http://tool.chacuo.net/cryptdes(在线解密加密)
XSSed | Cross Site Scripting (XSS) attacks information and archive(xssed平台)
http://xss.cnit.pro/(cnitxss平台)
Objectif Sécurité - Accueil(在线LMHASH破解)
http://toolbar.netcraft.com(很好的域名搜索引擎)
http://who.is ( 域名解析记录很好使)
Default Passwords | CIRT.net(常用设备密码字典)
DB Inject Tests entry point(web在线测试练习)
http://www.pinchins.cn/Tools.aspx?ch=Tools(勒索病毒解密工具)
大数据以及端口服务查询:
ZoomEye - Cyberspace Search Engine(钟道之眼)
Shodan Search Engine(shodan查询)
网络安全监测系统(osshadan查询)
Home - Censys(censys查询)
必应 (必应查询)
searchcode | source code search engine(代码泄露)
联合账号查询:
http://reg007.com (查询邮箱已注册过的网址)
http://www.zhaohuini.com/(找回密码)
http://toolsapp.duapp.com/randpw.html(反社工随机密码)
OpenSSL CCS 检测 (css漏洞检查)
在线JSON校验格式化工具(Be JSON) (json在线验证)
大数据以及端口服务查询:
ZoomEye - Cyberspace Search Engine(钟道之眼)
Shodan Search Engine(shodan查询)
网络安全监测系统(osshadan查询)
Home - Censys(censys查询)
必应 (必应查询)
searchcode | source code search engine(代码泄露)
CDN查找真实的多ping:
What's that site running? | Netcraft
http://viewdns.info/iphistory/?domain=
http://www.hosterstats.com/historicaldns.php
http://crimeflare.com(查cloudflare真实ip百试不爽)
常用web在线工具:
站长工具 - 站长之家(站长工具)
WhatWeb - Next generation web scanner.(网站指纹查询)
whois,whois查询,whois信息查询,whois查询工具,whois实时查询,域名查询工具,域名注册信息查询 - T00ls(t00ls工具)
MD5在线检查:
MD5在线解密|md5在线破解|批量破解md5网站 - ChaMd5.Org
CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.
http://hashchecker.de/find.html
http://www.objectif-securite.ch/ophcrack.php
MD5 Decrypter.com, MD5 Decryption, Free MD5 Decrypter, Security, MD5 Hash, MD5 Security.
http://www.md5this.com/latest.html
http://cracker.offensive-security.com/index.php
http://freerainbowtables.mirror.garr.it/mirrors/freerainbowtables/md5/(彩虹表)
MD5 conversion and MD5 reverse lookup
MD5 Online | Free and fast MD5 encryption
免費MD5解密,免費MD5,免費MD5工具, MD5加密, MD5破解MD5查詢,檢查MD5 ,SHA1
https://hashkiller.co.uk/md5-decrypter.aspx
http://neeao.com/tools/decode/index_eval.php(gzinflate解密)
在线病毒检测:
http://appscan.360.cn/ (安卓检测)
https://b-chao.com/ (安卓检测)
https://malwr.com/submission/ (病毒分析)
https://www.virustotal.com/ (病毒分析2)
http://virusview.net/search/inde(病毒查询 )
最后,我还整理了很多适合小白的学习文档,有需要的自取:
对网络安全感兴趣的同学也可关注公众号【黑客菌】,可以在公众号里私聊并标明来自CSDN,会拉你进入技术交流群,大家一起相互学习,共同进步
如果文章对你有帮助的话,还请点赞+收藏+关注一键三连支持以下哦!