1earn

Everything is hard at the beginning, and then it stays hard...

• Introduction: The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be errors and references. If you have any questions or suggestions about the content, please submit an issue.
• Positioning: Security knowledge framework maintained by the ffffffff0x team
• Project URL: https://github.com/ffffffff0x/1earn
• Learning Roadmap: Beginners or those who want to quickly build a knowledge structure, please visit roadmap

---

Project File Overview

• Security

  • Security Tools - Introduction to various security tools

  • Security Resources

    • Target Machines
      • HTB
      • VulnHub
        • DC Serial - DC series range, difficulty simple to medium, you can learn various privilege escalation and CMS exploitation, recommended for beginners
        • It’s_October
        • Kioptrix Serial - Kioptrix series range, difficulty simple to medium, recommended for beginners
        • Mission-Pumpkin - Moderate difficulty, more focused on encryption/decryption, less on exploitation
        • symfonos Serial - Quite challenging range, rich content, medium difficulty, a lot of exploitation content, recommended for those with some experience
      • Wargames
        • Bandit

  • BlueTeam

    • Analysis - Analysis tools and analysis cases
    • Hardening - Methods and tool resources for system and application hardening
    • Security Construction - Resources related to detection, monitoring, and honeypots
    • Forensics - Content involving operating system forensics, web forensics, and file forensics
    • Incident Response - Incident response resources and traceability cases
    • Notes - Involving disk forensics, memory forensics, USB forensics, etc.
    • Labs - Involving traffic analysis practice, security facility setup, etc.

  • Crypto

    • Crypto - Introduces various encoding and encryption algorithms and related tools

  • CTF

    • CTF - Collects CTF-related tools and writeup resources
    • writeup - Records of competitions I participated in

  • ICS

    • Industrial Control Protocols - Summarizes knowledge points of various industrial control protocols
    • Upper Computer Security - Summarizes knowledge points related to upper computer security
    • PLC Attacks - Summarizes knowledge points related to PLC attacks
    • S7comm Related - Records S7comm related error types, function codes, and related parameters
    • Labs - Simulation environment setup and PLC attack experiments

  • IOT

    • Firmware Security
      • Firmware Security - Records knowledge points of IOT firmware analysis, including firmware extraction, firmware analysis, firmware decryption, etc.
      • Labs - Firmware analysis experiments
    • Radio Security
      • Labs - Radio security experiments
    • Hardware Security
      • Device-Exploits - Embedded device vulnerability exploitation, not very familiar with this area, limited content
      • HID - HID physical records made with team members

  • MobileSec

    • Android Security - Records some Android security-related content, limited knowledge in this area