{"id":13562716,"url":"https://github.com/shmilylty/awesome-hacking","last_synced_at":"2025-08-08T14:24:52.018Z","repository":{"id":54528915,"uuid":"87511768","full_name":"shmilylty/awesome-hacking","owner":"shmilylty","description":"awesome hacking chinese version","archived":false,"fork":false,"pushed_at":"2020-04-20T06:39:43.000Z","size":6,"stargazers_count":1172,"open_issues_count":2,"forks_count":281,"subscribers_count":71,"default_branch":"master","last_synced_at":"2025-07-26T03:53:08.584Z","etag":null,"topics":["awesome-hacking"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/shmilylty.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-04-07T06:18:25.000Z","updated_at":"2025-07-23T16:08:32.000Z","dependencies_parsed_at":"2022-08-13T18:50:17.673Z","dependency_job_id":null,"html_url":"https://github.com/shmilylty/awesome-hacking","commit_stats":null,"previous_names":["sunnyelf/awesome-hacking"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/shmilylty/awesome-hacking","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shmilylty%2Fawesome-hacking","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shmilylty%2Fawesome-hacking/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shmilylty%2Fawesome-hacking/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shmilylty%2Fawesome-hacking/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/shmilylty","download_url":"https://codeload.github.com/shmilylty/awesome-hacking/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shmilylty%2Fawesome-hacking/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":267784952,"owners_count":24144082,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-29T02:00:12.549Z","response_time":2574,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["awesome-hacking"],"created_at":"2024-08-01T13:01:11.518Z","updated_at":"2025-08-08T14:24:51.961Z","avatar_url":"https://github.com/shmilylty.png","language":null,"funding_links":[],"categories":["Others","Others (1002)","Other Lists","\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集","others"],"sub_categories":["TeX Lists"],"readme":"# 超棒黑客必备表单 [![Awesome](https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg)](https://github.com/sindresorhus/awesome)\n\n[English Version](https://github.com/carpedm20/awesome-hacking)\n\n一份精美的黑客必备表单,灵感来自于[超棒的机器学习](https://github.com/josephmisiti/awesome-machine-learning/)，如果您想为此列表做出贡献（欢迎），请在github给我一个pull或联系我[@carpedm20](https://twitter.com/carpedm20)，有关可供下载的免费黑客书籍列表，请点击[此处](https://github.com/Hack-with-Github/Free-Security-eBooks)。\n\n\n## 目录\n\n\u003c!-- MarkdownTOC depth=4 --\u003e\n\n- [系统方面](#系统方面)\n    - [教程](#教程)\n    - [工具](#工具)\n    - [Docker](#docker)\n    - [常用](#常用)\n- [逆向方面](#逆向方面)\n    - [教程](#教程)\n    - [工具](#工具)\n    - [常用](#常用)\n- [Web方面](#web)\n    - [教程](#教程)\n    - [工具](#工具)\n- [网络方面](#网络方面)\n    - [教程](#教程)\n    - [工具](#工具)\n- [取证方面](#取证方面)\n    - [教程](#教程)\n    - [工具](#工具)\n- [密码方面](#密码方面)\n    - [教程](#教程)\n    - [工具](#工具)\n- [Wargame方面](#wargame方面)\n    - [系统](#系统)\n    - [逆向工程](#逆向工程)\n    - [Web](#web)\n    - [网络](#网络)\n    - [取证](#取证)\n    - [密码学](#密码学)\n- [CTF方面](#ctf)\n    - [比赛](#比赛)\n    - [常用](#常用)\n- [OS安全方面](#os安全方面)\n    - [在线资源](#在线资源)\n- [其他](#其他)\n\n\u003c!-- /MarkdownTOC --\u003e\n\n# 系统方面\n\n## 教程\n * [Corelan团队的Exploit写作教程](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/)\n * [为渗透测试员开发的Exploit写作教程](http://www.punter-infosec.com/exploit-writing-tutorials-for-pentesters/)\n\n## 工具\n * [Metasploit](https://github.com/rapid7/metasploit-framework) - 一个计算机安全项目，提供有关安全漏洞的信息，并帮助进行渗透测试和入侵检测系统开发。\n * [mimikatz](https://github.com/gentilkiwi/mimikatz) - 一个玩Windows安全有用的工具\n\n### 有关渗透测试和安全方面的Docker镜像\n * `docker pull kalilinux/kali-linux-docker` [official Kali Linux](https://hub.docker.com/r/kalilinux/kali-linux-docker/)\n * `docker pull owasp/zap2docker-stable` - [official OWASP ZAP](https://github.com/zaproxy/zaproxy)\n * `docker pull wpscanteam/wpscan` - [official WPScan](https://hub.docker.com/r/wpscanteam/wpscan/)\n * `docker pull pandrew/metasploit` - [docker-metasploit](https://hub.docker.com/r/pandrew/metasploit/)\n * `docker pull citizenstig/dvwa` - [Damn Vulnerable Web Application (DVWA)](https://hub.docker.com/r/citizenstig/dvwa/)\n * `docker pull wpscanteam/vulnerablewordpress` - [Vulnerable WordPress Installation](https://hub.docker.com/r/wpscanteam/vulnerablewordpress/)\n * `docker pull hmlio/vaas-cve-2014-6271` - [Vulnerability as a service: Shellshock](https://hub.docker.com/r/hmlio/vaas-cve-2014-6271/)\n * `docker pull hmlio/vaas-cve-2014-0160` - [Vulnerability as a service: Heartbleed](https://hub.docker.com/r/hmlio/vaas-cve-2014-0160/)\n * `docker pull opendns/security-ninjas` - [Security Ninjas](https://hub.docker.com/r/opendns/security-ninjas/)\n * `docker pull usertaken/archlinux-pentest-lxde` - [Arch Linux Penetration Tester](https://hub.docker.com/r/usertaken/archlinux-pentest-lxde/)\n * `docker pull diogomonica/docker-bench-security` - [Docker Bench for Security](https://hub.docker.com/r/diogomonica/docker-bench-security/)\n * `docker pull ismisepaul/securityshepherd` - [OWASP Security Shepherd](https://hub.docker.com/r/ismisepaul/securityshepherd/)\n * `docker pull danmx/docker-owasp-webgoat` - [OWASP WebGoat Project docker image](https://hub.docker.com/r/danmx/docker-owasp-webgoat/)\n * `docker-compose build \u0026\u0026 docker-compose up` - [OWASP NodeGoat](https://github.com/owasp/nodegoat#option-3---run-nodegoat-on-docker)\n * `docker pull citizenstig/nowasp` - [OWASP Mutillidae II Web Pen-Test Practice Application](https://hub.docker.com/r/citizenstig/nowasp/)\n * `docker pull bkimminich/juice-shop` - [OWASP Juice Shop](https://github.com/bkimminich/juice-shop#docker-container--)\n\n## 常用\n * [Exploit database](https://www.exploit-db.com/) - 漏洞利用和易受攻击软件的终极存档库\n\n\n# 逆向方面\n\n## 教程\n\n* [逆转新手](https://tuts4you.com/download.php?list.17)\n* [恶意软件分析教程：逆向工程](http://fumalwareanalysis.blogspot.kr/p/malware-analysis-tutorials-reverse.html)\n\n## 工具\n * [nudge4j](https://github.com/lorenzoongithub/nudge4j) - 让浏览器与JVM交互的Java工具\n * [IDA](https://www.hex-rays.com/products/ida/) - IDA是可以工作在Windows，Linux或Mac OS X的多处理反汇编和调试工具\n * [OllyDbg](http://www.ollydbg.de/) - Windows 32位汇编程序级别调试工具\n * [x64dbg](http://x64dbg.com/) - Windows上开源x64/x32调试工具\n * [dex2jar](https://github.com/pxb1988/dex2jar) - 用于处理用于处理Android .dex和Java .class文件的工具\n * [JD-GUI](http://jd.benow.ca/) - 显示Java源代码“.class”文件的独立图形实用工具\n * [procyon](https://bitbucket.org/mstrobel/procyon/wiki/Java%20Decompiler) - 现代化开源Java反编译工具\n * [androguard](https://code.google.com/p/androguard/) - 用于Android应用程序的逆向工程，恶意软件分析工具\n * [JAD](http://varaneckas.com/jad/) - JAD Java反编译工具(闭源, 不常更新)\n * [dotPeek](https://www.jetbrains.com/decompiler/) - JetBrains公司开发的免费的.NET反编译工具\n * [ILSpy](https://github.com/icsharpcode/ILSpy/) - 开源的集浏览和反编译.NET程序工具\n * [dnSpy](https://github.com/0xd4d/dnSpy) - 集编辑，反编译和调试.NET程序工具\n * [de4dot](https://github.com/0xd4d/de4dot) - 破解.NET程序工具\n * [antinet](https://github.com/0xd4d/antinet) - 用于反编译和混淆代码的.NET程序工具\n * [UPX](http://upx.sourceforge.net/) - 终极封装可执行文件工具\n * [radare2](https://github.com/radare/radare2) - 便携式的逆向工程框架工具\n * [plasma](https://github.com/joelpx/plasma) - 适用于x86/ARM/MIPS交互式反汇编，使用花指令语法代码生成伪代码。\n * [Hopper](https://www.hopperapp.com) - 适用于OS X和Linux反汇编/反编译32/64位Windows/MAC/LINUX/iOS的可执行文件工具\n * [ScratchABit](https://github.com/pfalcon/ScratchABit) - 使用IDAPython兼容插件API轻松重新定位和可攻击的交互式反汇编工具\n\n\n\n## 常用\n * [开放的恶意软件查询](http://www.offensivecomputing.net/)\n\n\n# Web方面\n\n## 工具\n * [sqlmap](https://github.com/sqlmapproject/sqlmap) - 自动SQL注入和数据库入侵工具\n * [tools.web-max.ca](http://tools.web-max.ca/encode_decode.php) - base64，base85编码/解码\n\n\n# 网络方面\n\n## 工具\n * [Wireshark](https://www.wireshark.org/) - 免费开源的流量包分析工具\n * [NetworkMiner](http://www.netresec.com/?page=NetworkMiner) - 网络取证分析工具\n * [tcpdump](http://www.tcpdump.org/) - 功能强大的命令行流量包分析工具，自带的libpcap用于网络流量捕获的便携式C/C++库\n * [Paros](http://sourceforge.net/projects/paros/) - 基于Java的HTTP/HTTPS代理用于评估Web应用程序漏洞工具\n * [pig](https://github.com/rafael-santiago/pig) - Linux下伪造流量包工具\n * [ZAP](https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project) - ZAP是用于发现Web应用程序中漏洞易于使用的集成式渗透测试工具\n * [mitmproxy](https://mitmproxy.org/) - 基于HTTP具有交互式控制界面并支持SSL中间代理的工具\n * [mitmsocks4j](https://github.com/Akdeniz/mitmsocks4j) - 基于Java支持中间SOCKS代理工具\n * [nmap](https://nmap.org/) - Nmap安全扫描工具\n * [Aircrack-ng](http://www.aircrack-ng.org/) - 用于破解802.11 WEP和WPA-PSK密钥工具\n * [Charles Proxy](https://charlesproxy.com) - 用于查看截获的HTTP和HTTPS/SSL实时流量的跨平台图形化用户界面Web调试代理工具\n * [Nipe](https://github.com/GouveaHeitor/nipe) - 使Tor网络成为默认网关的脚本\n\n\n# 取证方面\n\n## 工具\n * [Autospy](http://www.sleuthkit.org/autopsy/) - 数字取证平台，[The Sleuth Kit](http://www.sleuthkit.org/sleuthkit/index.php)的图形界面，还包含其他数字取证工具。\n * [sleuthkit](https://github.com/sleuthkit/sleuthkit) - 收集各种命令行数字取证工具库\n * [EnCase](https://www.guidancesoftware.com/products/Pages/encase-forensic/overview.aspx) - Guidance Software开发的一套使用共享技术数字取证工具\n * [malzilla](http://malzilla.sourceforge.net/) - 恶意软件抓捕工具\n * [PEview](http://wjradburn.com/software/) - 快速简便查看程序结构和32位可移植可执行文件（PE）以及组件对象文件格式（COFF）文件的内容\n * [HxD](http://mh-nexus.de/en/hxd/) - 十六进制编辑器，除了主存储器（RAM）的原始磁盘编辑和修改之外，可以处理任何大小的文件。\n * [WinHex](http://www.winhex.com/winhex/) - 十六进制编辑器，有助于计算机取证，数据恢复，低级数据处理和IT安全领域。\n * [BinText](http://www.mcafee.com/kr/downloads/free-tools/bintext.aspx) - 一个小而快强大的文本提取器，程序员特别感兴趣。\n\n\n# 密码方面\n\n### 工具\n * [xortool](https://github.com/hellman/xortool) - 一种分析多字节XOR密码工具\n * [John the Ripper](http://www.openwall.com/john/) - 快速密码破解工具\n * [Aircrack](http://www.aircrack-ng.org/) - 802.11 WEP和WPA-PSK密钥破解工具\n\n\n# Wargame方面\n\n## 系统\n * [OverTheWire - Semtex](http://overthewire.org/wargames/semtex/)\n * [OverTheWire - Vortex](http://overthewire.org/wargames/vortex/)\n * [OverTheWire - Drifter](http://overthewire.org/wargames/drifter/)\n * [pwnable.kr](http://pwnable.kr/) - 提供有关系统安全性的各种pwn挑战\n * [Exploit Exercises - Nebula](https://exploit-exercises.com/nebula/)\n * [SmashTheStack](http://smashthestack.org/)\n\n## 逆向工程\n * [Reversing.kr](http://www.reversing.kr/)\n * [CodeEngn](http://codeengn.com/challenges/)\n * [simples.kr](http://simples.kr/)\n * [Crackmes.de](http://crackmes.de/)\n\n## Web\n * [Hack This Site!](https://www.hackthissite.org/)\n * [Webhacking.kr](http://webhacking.kr/)\n * [0xf.at](https://0xf.at/)\n\n\n## 密码\n * [OverTheWire - Krypton](http://overthewire.org/wargames/krypton/)\n\n\n# CTF方面\n\n## 比赛\n * [DEF CON](https://legitbs.net/)\n * [CSAW CTF](https://ctf.isis.poly.edu/)\n * [hack.lu CTF](http://hack.lu/)\n * [Pliad CTF](http://www.plaidctf.com/)\n * [RuCTFe](http://ructf.org/e/)\n * [Ghost in the Shellcode](http://ghostintheshellcode.com/)\n * [PHD CTF](http://www.phdays.com/)\n * [SECUINSIDE CTF](http://secuinside.com/)\n * [Codegate CTF](http://ctf.codegate.org/html/Main.html?lang=eng)\n * [Boston Key Party CTF](http://bostonkeyparty.net/)\n * [HackTheBox](https://www.hackthebox.eu/)\n\n## 常用\n * [CTFtime.org](https://ctftime.org/)\n * [WeChall](http://www.wechall.net/)\n * [CTF archives (shell-storm)](http://shell-storm.org/repo/CTF/)\n * [Rookit Arsenal](https://amzn.com/144962636X)\n * [Pentest Cheat Sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) - 渗透测试方面的干货\n * [Movies For Hacker](https://github.com/k4m4/movies-for-hackers) - 每个黑客必须看的电影清单\n\n# OS安全方面\n\n## 在线资源\n * [Security related Operating Systems @ Rawsec](http://rawsec.ml/en/security-related-os/) - 完整的有关操作系统安全表单\n * [Best Linux Penetration Testing Distributions @ CyberPunk](https://n0where.net/best-linux-penetration-testing-distributions/) - 渗透测试分工说明\n * [Security @ Distrowatch](http://distrowatch.com/search.php?category=Security) - 致力于讨论，审核和保持更新开源操作系统的网站\n\n# 其他\n * [SecTools](http://sectools.org/) - 前125名网络安全工具\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshmilylty%2Fawesome-hacking","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fshmilylty%2Fawesome-hacking","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshmilylty%2Fawesome-hacking/lists"}