Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
1earn — ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup | Kitploit
Tools/GitHubGitHub/ffffffff0x/1earn
IoT SecurityReverse EngineeringForensicsWeb SecurityCTFPenetration TestingLearning & EducationRed TeamingIncident ResponseCurated Resources
GitHubffffffff0x/1earn

1earn

5.7k1.3k42 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

View RepositoryWebsite

Everything is hard at the beginning, and then it stays hard...

  • Introduction: The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be errors and references. If you have any questions or suggestions about the content, please submit an issue.
  • Positioning: Security knowledge framework maintained by the ffffffff0x team
  • Project URL: https://github.com/ffffffff0x/1earn
  • Learning Roadmap: Beginners or those who want to quickly build a knowledge structure, please visit roadmap

Project File Overview

  • Security

    • Security Tools - Introduction to various security tools

    • Security Resources

      • Target Machines
        • HTB
        • VulnHub
          • DC Serial - DC series range, difficulty simple to medium, you can learn various privilege escalation and CMS exploitation, recommended for beginners
          • It’s_October
          • Kioptrix Serial - Kioptrix series range, difficulty simple to medium, recommended for beginners
          • Mission-Pumpkin - Moderate difficulty, more focused on encryption/decryption, less on exploitation
          • symfonos Serial - Quite challenging range, rich content, medium difficulty, a lot of exploitation content, recommended for those with some experience
        • Wargames
          • Bandit
    • BlueTeam

      • Analysis - Analysis tools and analysis cases
      • Hardening - Methods and tool resources for system and application hardening
      • - Resources related to detection, monitoring, and honeypots

Three Axes

Collect, Organize, Share — I believe these are the "three axes" of knowledge learning.

Collecting is easy to understand, such as collecting various learning resources, papers and articles you've read, and various tools.

Organizing, or summarizing and categorizing, involves recording insights from the learning process, writing notes and articles, and sorting and categorizing collected resources.

Sharing, whether it's posting an article on a blog or helping a friend in a QQ group solve a problem, is all sharing.

Without the ability to collect and organize, the whole learning process is like using a vegetable basket to fetch water — nothing stays. Similarly, if you are unwilling to share, it's like working behind closed doors, unable to reach different perspectives, no one points out your problems, and over time you may become stubborn and stagnant.


Reading Suggestions

All documents in this project are written in the VScode editor, so only markdown syntax compatible with VScode's side preview is supported. Compatibility with other editors' markdown syntax is not considered.

Because GitHub's markdown engine kramdown does not support [TOC] links and various incompatible formatting issues, the reading experience is highly unfriendly. Therefore It is recommended to download/clone the repository for local reading.

root@kitploit:~
git clone --depth 1 https://github.com/ffffffff0x/1earn.git

Recommended reading experience

  • VScode + FiraCode (Recommended, the entire project is written in VScode environment, basically no formatting issues)
  • Typora

If the clone speed is too slow, you can first import it into Gitee (choose import from URL), then clone: https://blog.gitee.com/2018/06/05/github_to_gitee/?from=homepage

To improve release speed, you can refer to these articles: https://jinfeijie.cn/post-805.html , https://blog.csdn.net/weixin_44821644/article/details/107574297?utm_source=app

Now you can simply press the period (.) key to enable the web version of VScode to browse this project.


The following are the sources of inspiration for this project

  • Micro8-Penetration Meditations
  • Teach Yourself Programming in Ten Years
  • To Find a Better Solution, Ask a Better Question Member Feature Stories Medium
  • The Magpie Developer

CONTRIBUTORS & Thanks

  • CONTRIBUTORS

Contact Me

  • If you have any other questions or suggestions, you can submit an issue or send an email to [email protected]

Disclaimer & License

  • This project is licensed under CC BY 4.0.
    • Share — copy and redistribute the material in any medium or format
    • Adapt — remix, transform, and build upon the material for any purpose, even commercially.
    • Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
    • No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
  • Note: All files in this project are for learning and research purposes only. Do not use the technical source code in the project for illegal purposes. Anyone who causes any negative impact is unrelated to me.

create by ffffffff0x

Download Tool
Security Construction
  • Forensics - Content involving operating system forensics, web forensics, and file forensics
  • Incident Response - Incident response resources and traceability cases
  • Notes - Involving disk forensics, memory forensics, USB forensics, etc.
  • Labs - Involving traffic analysis practice, security facility setup, etc.
  • Crypto

    • Crypto - Introduces various encoding and encryption algorithms and related tools
  • CTF

    • CTF - Collects CTF-related tools and writeup resources
    • writeup - Records of competitions I participated in
  • ICS

    • Industrial Control Protocols - Summarizes knowledge points of various industrial control protocols
    • Upper Computer Security - Summarizes knowledge points related to upper computer security
    • PLC Attacks - Summarizes knowledge points related to PLC attacks
    • S7comm Related - Records S7comm related error types, function codes, and related parameters
    • Labs - Simulation environment setup and PLC attack experiments
  • IOT

    • Firmware Security
      • Firmware Security - Records knowledge points of IOT firmware analysis, including firmware extraction, firmware analysis, firmware decryption, etc.
      • Labs - Firmware analysis experiments
    • Radio Security
      • Labs - Radio security experiments
    • Hardware Security
      • Device-Exploits - Embedded device vulnerability exploitation, not very familiar with this area, limited content
      • HID - HID physical records made with team members
  • MobileSec

    • Android Security - Records some Android security-related content, limited knowledge in this area
  • RedTeam

    • Security Devices
      • Bypass Techniques - Records WAF bypass methods
      • SecDevice-Exploits - Vulnerability exploitation methods of common security devices
    • Post-Exploitation
      • Post-Exploitation - Outline of post-exploitation knowledge points
      • Privilege Escalation - Privilege escalation methods for operating systems and databases
      • Persistence - Various methods and resources for persistence
      • Labs
    • Software Service Security
      • CS-Exploits - Collects penetration methods and CVE vulnerabilities for software and business application services
      • DesktopApps-Exploits - Collects penetration methods and CVE vulnerabilities for desktop software
    • Protocol Security
      • Protocol-Exploits - Categorizes various vulnerabilities and attack methods by protocol
    • Information Gathering
      • Port Security - Records methods and ideas for port penetration
      • Spatial Mapping - Collects search engine syntax resources
      • Information Gathering - Records various techniques in information gathering, such as vulnerability scanning, IP scanning, port scanning, DNS enumeration, directory enumeration, fingerprinting, etc.
    • Language Security
      • Language Security
    • Cloud Security
      • Public Cloud Security - Cloud host exploitation tools, penetration cases, related knowledge points
    • OS Security
      • Linux Security - Includes Linux password cracking, vulnerability exploitation, getting shells
      • OS-Exploits - Collects CVE vulnerabilities of operating systems
      • Windows Security - Includes Windows PTH, PTT, vulnerability exploitation, privilege escalation, remote command execution
      • Labs
    • Web Security
      • Frontend Attack & Defense - Frontend decryption, bypassing access
      • BS-Exploits - Comprehensive collection of web vulnerability POC | Payload | exp
      • IDOR - Most of the structure is based on several articles about password recovery and logical vulnerabilities from WooYun, recorded and summarized on that basis
      • Ranges
      • Web_Generic
      • Web_Tricks
  • Reverse

    • Reverse
    • Labs
    • FILE
  • Develop

    • Version Control

      • Git Study Notes - Records usage of git and problems encountered when using GitHub
    • Markup Languages

      • HTML
      • JSON
      • XML
    • Visualization

      • gnuplot
    • Regular Expressions

      • regex - Common regular expressions and related resources
    • Web

      • Speed-Web
      • HTTP
      • Notes
  • Integrated

    • Databases

      • Power-SQL
      • Speed-SQL
      • Notes
      • Labs
    • Virtualization

      • Docker
    • Linux

      • God-Linux - Records cool Linux operations, limited collection so far, will be added gradually
      • Power-Linux - Configuration guide, records the process of setting up various services and configurations
      • Secure-Linux - Linux hardening + maintenance + incident response reference
      • Speed-Linux - Quick command reference, records various basic command operations
      • Notes
      • Labs - Setup processes and cases of various Linux services
    • Network

      • Speed-Net - Various frame formats, packet formats, masks, etc.
      • Power-Net - Records protocols of the TCP/IP stack
    • Windows

      • Secure-Win - Windows hardening + maintenance + incident response reference
      • Speed-Win - Records common CMD commands in Windows
      • Notes
      • Labs - Involving domain environment setup, basic service setup
      • Powershell
  • Plan

    • Misc-Plan - Various tips
    • Team-Plan - Team collaboration solutions
    • Thinking-Plan - Records and learning of problem-solving methods
    • VM-Plan - Common VMWare problem records