安全資訊
https://www.freebuf.com/ Freebuf
https://www.t00ls.net/ t00ls
https://nosec.org/ NOSEC
綜合
https://github.com/SecWiki 安全信息集合
https://github.com/QAX-A-Team/LuWu 紅隊基礎設施自動化部署
https://github.com/aleenzz/MYSQL_SQL_BYPASS_WIKI 攻擊心得
能力提升
學習平台
https://www.ctfhub.com/#/index CTFHub（Chamd5）
https://www.linkedbyx.com/home X計划平台（安恆）
https://www.kanxue.com/ 看雪（逆向破解）
https://www.ichunqiu.com/ i春秋（綜合）
https://www.bugbank.cn/live/ 漏洞銀行直播（綜合）
https://fishc.com.cn/forum.php 魚c（編程）
漏洞平台
https://butian.360.cn/ 補天漏洞響應平台
https://sobug.com/ Sobug眾測
http://xianzhi.aliyun.com/ 阿里雲盾先知計划
學習資料
https://_thorns.gitbooks.io/sec/content/
https://www.lshack.cn/772/ 紅隊和藍隊資料集錦
https://bypass007.github.io/Emergency-Response-Notes/ 應急響應實戰筆記
https://github.com/Bypass007/Emergency-Response-Notes
http://safebooks.ms08067.com/ 安全書籍導航
CTF比賽
https://ctf.0ops.sjtu.cn/login Tencent CTF
https://cgctf.nuptsast.com/login CG-CTF
https://www.xctf.org.cn/ XCTF社區（賽寧）
https://www.ichunqiu.com/game-gyctf 春秋杯
信息泄露
https://github.com/BugScanTeam/GitHack Git 信息泄露
https://github.com/kost/dvcs-ripper 常規信息泄露
工具
掃描
主機存活掃描
nbtscan.exe：nbtscan 192.168.1.1/20
arp-scan.exe：arp-scan.exe -t 192.168.1.1/24 https://github.com/QbsuranAlang/arp-scan-windows-
ping：for /L %I in (1,1, 254) do @ping -w 1 -n 1 192.168.1.%I | findstr “TTL=”
Invoke-ARPScan.ps1： powershell.exe -exec bypass -Command “& {Import-Module c:\Invoke-ARPScan.ps1;Invoke-ARPScan -CIDR 192.168.1.1/24}” >> c:\log.txt
Powershell 滲透測試工具-Nishang https://github.com/samratashok/nishang
cping：cping scan smbvul 10.33.93.1 10.33.93.1
qs.exe：qs alive 192.168.1.1/24
dnsbrute：
F-NAScan.py
Hscan
端口掃描
s.exe： s.exe tcp 192.168.1.1 192.168.1.254 445,1433,3389,7001 256 /Banner /save
scanline： scanline -h -t 20,80-89,110,389,445,3389,1099,7001,3306,1433,8080,1521 -u 53,161 -O c:\log.txt -p 192.168.1.1-254 /b
Invoke-Portscan.ps1：Invoke-PortScan -StartAddress 192.168.1.1 -EndAddress 192.168.1.254 -ScanPort [探測存活 -ResolveHost]
K8PortScan.exe
F-NAScan.py
nmap
前
https://github.com/k8gege/K8CScan k8gege掃描器
https://github.com/chaitin/xray 長亭Xray
https://github.com/maurosoria/dirsearch Dirsearch（掃目錄）
https://github.com/H4ckForJob/dirmap Dirmap（掃目錄）
https://github.com/lijiejie/subDomainsBrute subdomainsbtute（子域）
https://github.com/chenjj/CORScanner 掃描CORS配置漏洞
https://github.com/BugScanTeam/GitHack Git泄露
https://github.com/Macr0phag3/email_hack 釣魚郵件
https://emkei.cz/ 偽造郵件
https://github.com/TheKingOfDuck/fuzzDicts fuzzdb
https://github.com/1N3/IntruderPayloads fuzzdb
https://github.com/dionach/CMSmap CMS漏洞檢測工具
https://github.com/deathmarine/Luyten/releases/ Luyten反編譯工具（jar包）
后
https://github.com/BloodHoundAD/BloodHound 域用戶
https://ngrok.com/ 內網穿透
逆向
IOS
Frida 12.7.22
https://frida.re
HopperDisassembler v4
https://www.hopperapp.com
iOS13.3.1 checkra1n越獄
https://checkra.in
sslkill switch
https://github.com/nabla-c0d3/ssl-kill-switch2
應急工具
webshell查殺
威脅情報
https://www.virustotal.com/ VirusTotal
https://ti.qianxin.com/ 奇安信威脅情報