推薦課程

• 全新2016小迪渗透培训第12期  百度網盤密碼:：92c6  文件密碼：www.mukedaba.com_Xd2016

• Metasploit Unleashed – 免费的metasploit教程
   

推薦书籍:

​

推薦文章：

• Pentester Study Guide

​

推薦網站：

• Awesome Windows Exploitation ​

• Awesome Exploit Development

• Awesome Fuzzing

• Awesome Pentest

• It-Security Catalog

• Fuzzy Security Tutorials

• Live Overflow

• Pentest Wiki by Nixawk

• Penteter Lab Bootcamp

• Webec Ca

• 國外整理的一套在線外渗透資源合集

• Active Directory Security

• SecList

• PTES – 渗透測試執行標準

• OWASP – 開放式Web應用程序安全项目

• OSSTMM – 開源安全測試方法手冊

​

推薦視頻：

• Reverse Engineering 101

​

等待分類

• Introduction to PowerShell

• Cmdlets

• Scripting, Variables and Syntax

• Flow Control

• Practical Uses & Conclusion

• No Tools No Problem Building a PowerShell Botnet – Christopher Cambell

• Grey Hat Powershell – Ben0xA

• Practical PowerShell Programming for Professional People – Ben0xA

• Powershell Fu with Metasploit – Ben Turner & Dave Hardy

• Building an empire with Powershell -Will Schroeder & Justin Warner

• http://www.cnblogs.com/xuanhun/tag/Kali%20Linux/

• Information Gathering

• Penetration Testing Information Gathering

• https://en.wikipedia.org/wiki/Open-sourceintelligence

• http://www.spylogic.net/2009/10/enterprise-open-source-intelligence-gathering-part-1-social-networks/

• http://www.spylogic.net/2009/10/enterprise-open-source-intelligence-gathering-%E2%80%93-part-2-blogs-message-boards-and-metadata/

• http://www.spylogic.net/2009/10/enterprise-open-source-intelligence-gathering-part-3-monitoring/

• http://www.slideshare.net/Laramies/tactical-information-gathering

• http://www.infond.fr/2010/05/toturial-footprinting.html

•  

• Phase 1.1 - People and Organizational

• http://www.spokeo.com/

• http://www.spoke.com/

• https://www.xing.com/

• http://www.zoominfo.com/

• https://pipl.com/

• http://www.zabasearch.com/

• http://www.searchbug.com/

• http://skipease.com/

• http://addictomatic.com/

• http://socialmention.com/

• http://entitycube.research.microsoft.com/

• http://www.yasni.com/

• http://www.glassdoor.com/index.htm

• https://connect.data.com/

• https://searchwww.sec.gov/EDGARFSClient/jsp/EDGAR_MainAccess.jsp

• https://www.tineye.com/

• http://www.peekyou.com/_

• EDGAR

•  

• Phase 1.2 - Infrastructure

• http://uptime.netcraft.com/

• http://www.shodanhq.com/

• http://www.domaintools.com/

• http://centralops.net/co/

• http://whois.webhosting.info/

• https://www.ssllabs.com/ssltest/analyze.html

• https://www.exploit-db.com/google-hacking-database/

• http://www.my-ip-neighbors.com/

• https://tools.digitalpoint.com/

• ​

​