Project Description

Collection of quality safety articles(To be rebuilt)``` Some are inconvenient to release.
Some forget update,can see me star.
collection-document awesome 以前的链接中大多不是优质的
渗透测试部分不再更新
因精力有限，缓慢更新
Author: [tom0li]
Blog: https://tom0li.github.io

- [Project Description](#project-description)
  - [Github-list](#github-list)
    - [Awesome-list](#awesome-list)
    - [Development](#开发)
    - [Others](#其它)
  - [Security](#安全)
    - [Security list](#安全list)
    - [Security Market Insights](#安全市场洞察)
    - [Cloud Security](#云安全)
      - [Cloud Basics](#云基础知识)
      - [Cloud Native Security](#云原生安全)
      - [Cloud Attack and Defense](#云上攻防)
      - [VM](#vm)
        - [vCenter](#vcenter)
        - [SLP](#slp)
    - [AI Security](#ai安全)
    - [New Security Solutions](#新安全方案)
      - [Building Next-Generation Security](#构建下一代安全)
      - [Zero Trust](#零信任)
      - [DevSecOps](#devsecops)
    - [Threat Detection](#威胁检测)
      - [RASP](#rasp)
      - [HIDS](#hids)
      - [WAF](#waf)
        - [WAF Construction Guide](#waf建设指南)
        - [BypassWAF](#bypasswaf)
      - [Webshell Detection](#webshell检测)
      - [Reverse Shell Detection](#反弹shell检测)
      - [EDR](#edr)
      - [AV](#av)
      - [Lateral Movement Detection - Honeypot Approach](#横向移动检测-蜜罐思路)
      - [Malicious Traffic Detection](#恶意流量检测)
      - [IDS](#ids)
      - [Text Detection](#文本检测)
    - [Security Operations](#安全运营)
    - [Data Security](#数据安全)
      - [Network Mapping](#网络测绘)
    - [Communication Security](#通信安全)
      - [End-to-End Communication (First Edition)](#端对端通信初版)
      - [SNI](#sni)
    - [Personal Security](#个人安全)
    - [APT Research](#apt研究)
      - [Advanced Threat List](#高级威胁-list)
      - [Threat Intelligence](#威胁情报)
      - [Phishing](#钓鱼)
      - [C2-RAT](#c2-rat)
  - [Warning & Research](#预警研究)
    - [ImageMagick](#imagemagick)
    - [Exchange](#exchange)
    - [Privilege-Escalation](#privilege-escalation)
    - [VPN](#vpn)
      - [Sangfor](#sangfor)
      - [Pulse](#pulse)
      - [Palo](#palo)
      - [Fortigate](#fortigate)
      - [Citrix Gateway/ADC](#citrix-gatewayadc)
    - [Tomcat](#tomcat)
    - [FUZZING](#fuzzing)
  - [Code Audit - JAVA](#代码审计-java)
    - [Deserialization - Others](#反序列化-其他)
    - [RMI](#rmi)
    - [Shiro](#shiro)
    - [Fastjson](#fastjson)
    - [Dubbo](#dubbo)
    - [CAS](#cas)
    - [Solr Template Injection](#solr模版注入)
    - [Apache Skywalking](#apache-skywalking)
    - [Spring](#spring)
      - [Spring-boot](#spring-boot)
      - [Spring-cloud](#spring-cloud)
      - [Spring-data](#spring-data)
  - [Blockchain](#区块链)
  - [Penetration](#渗透)
    - [Perimeter Penetration](#边界渗透)
      - [Penetration Records and Summary](#渗透记录和总结)
      - [Information Gathering](#信息收集)
      - [Ranges](#靶场)
      - [Penetration Techniques](#渗透技巧)
    - [Intranet Penetration](#内网渗透)
      - [Exchange Exploitation (Old)](#exchange利用旧)
      - [hash ticket Credential](#hash-ticket-credential)
      - [Proxy Forwarding and Port Reuse](#代理转发与端口复用)
      - [Intranet Platform](#内网平台)
      - [Intranet Techniques](#内网技巧)
      - [Privilege Escalation Exploitation](#提权利用)
  - [Bug_Bounty](#bug_bounty)
  - [Web](#web)
    - [XXE](#xxe)
    - [XSS](#xss)
    - [Jsonp](#jsonp)
    - [CORS](#cors)
    - [CSRF](#csrf)
    - [SSRF](#ssrf)
    - [SQL](#sql)
    - [File Inclusion](#文件包含)
    - [Upload](#上传)
    - [Arbitrary File Read](#任意文件读取)
    - [Web Cache Deception](#web缓存欺骗)
    - [Web Cache Poisoning](#web缓存投毒)
    - [SSI](#ssi)
    - [SSTI](#ssti)
    - [JS](#js)
    - [DNS](#dns)
  - [Others](#其他)
      - [Git](#git)
      - [QR Code](#二维码)
      - [Crawler](#爬虫)
      - [Efficiency](#效率)
      - [Popular Science](#科普)
  - [Contribute](#contribute)
  - [Acknowledgments](#acknowledgments)
  - [Star](#star)

## Github-list
### Awesome-list

* [awesome-web-security](https://github.com/qazbnm456/awesome-web-security) 
* [Awesome-Hacking](https://github.com/Hack-with-Github/Awesome-Hacking) - 10k-star list 
* [awesome-malware-analysis](https://github.com/rshipp/awesome-malware-analysis)
* [Android Security](https://github.com/ashishb/android-security-awesome) - Collection of Android security related resources.
* [Security](https://github.com/sbilly/awesome-security) - Software, libraries, documents, and other resources.
* [An Information Security Reference That Doesn't Suck](https://github.com/rmusser01/Infosec_Reference)
* [Security Talks](https://github.com/PaulSec/awesome-sec-talks) - Curated list of security conferences.
* [OSINT](https://github.com/jivoi/awesome-osint) - Awesome OSINT list containing great resources.
* [The toolbox of open source scanners](https://github.com/We5ter/Scanners-Box) - The toolbox of open source scanners
* [blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) - Official Black Hat Arsenal Security Tools Repository
* [awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks)
* [awesome-awesome](https://github.com/emijrp/awesome-awesome)
* [Curated list of awesome lists](https://github.com/sindresorhus/awesome)
* [Awesome Awesomness](https://github.com/bayandin/awesome-awesomeness) - The List of the Lists.
* [PENTESTING-BIBLE](https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE) - Security related content
* [Web-Security-Learning](https://github.com/CHYbeta/Web-Security-Learning) - by CHYbeta
* [Software-Security-Learning](https://github.com/CHYbeta/Software-Security-Learning) - by CHYbeta
* [MiscSecNotes](https://github.com/JnuSimba/MiscSecNotes) - by JnuSimba notes 
* [AndroidSecNotes](https://github.com/JnuSimba/AndroidSecNotes) - notes
* [LinuxSecNotes](https://github.com/JnuSimba/LinuxSecNotes) - notes
* [resource collection of python security and code review](https://github.com/bit4woo/python_sec)
* [Pentest_Interview](https://github.com/Leezj9671/Pentest_Interview)
* [tanjiti info source](https://github.com/tanjiti/sec_profile) - by Baidu tanjiti, daily crawled security information sources
* [CVE-Flow](https://github.com/404notf0und/CVE-Flow) - by 404notf0und, monitoring CVE incremental updates, CVE EXP prediction based on deep learning and automated push
* [security_w1k1](https://github.com/euphrat1ca/security_w1k1/) euphrat1ca's repository constantly updated with security-related content

### Development

* [Complete Guide to Advanced Java Knowledge for Internet Java Engineers](https://github.com/doocs/advanced-java)
* [Java Learning + Interview Guide: A guide covering the core knowledge that most Java programmers need to master](https://github.com/Snailclimb/JavaGuide)
* [Python Cheat Sheet ](https://github.com/crazyguitar/pysheeet)
* [A collection of full-stack resources for programmers.](https://github.com/charlax/professional-programming)
* [web, frontend, javascript, nodejs, electron, babel, webpack, rollup, react, vue ...](https://github.com/senntyou/blogs)
* [Python interview questions](https://github.com/taizilongxu/interview_python)
* [Python-100-Days](https://github.com/jackfrued/Python-100-Days)
* [python3-source-code-analysis](https://github.com/flaggo/python3-source-code-analysis)
* [Coding Interview University](https://github.com/jwasham/coding-interview-university)
* [tech-interview-handbook](https://github.com/yangshun/tech-interview-handbook) - good
* [Essential Basics for Interviews](https://github.com/CyC2018/CS-Notes)
* [CS Basics](https://github.com/selfboot/CS_Offer/)
* [Algorithm/Deep Learning/NLP Interview Notes](https://github.com/imhuay/Algorithm_Interview_Notes-Chinese)
* [Algorithm Handbook](https://github.com/labuladong/fucking-algorithm)
* [50 Code Implementations for Data Structures and Algorithms](https://github.com/wangzheng0822/algo)
* [interview_internal_reference](https://github.com/0voice/interview_internal_reference) 
* [reverse-interview](https://github.com/yifeikong/reverse-interview-zh) - Questions to ask the interviewer at the end of a technical interview

### Others