Skip to content
KitploitKITPLOIT
工具博客
提交
工具博客
提交

黑客、渗透测试和网络安全工具，武装您的安全武器库！

Kitploit 是一个黑客、网络安全和渗透测试工具的目录。发现最新的项目更新，查找漏洞、分析系统、自动化测试并加强你的安全。

··订阅源·联系·隐私·© 2026 Kitploit

工具目录

分类

查看所有分类
Loading categories
awesome-exploit-development — 精选资源列表（书籍、教程、课程、工具和存在漏洞的应用程序），用于学习漏洞利用开发。 | Kitploit
工具/GitHubGitHub/fabiobaroni/awesome-exploit-development
漏洞分析漏洞利用逆向工程调试器学习与教育精选资源Payload 开发学习路径与课程二进制利用

最受欢迎

查看全部 →

发现我们社区最常用的工具。

探索所有工具

浏览我们的工具集合

查看所有工具 →
实验室与实践
GitHubfabiobaroni/awesome-exploit-development

awesome-exploit-development

精选资源列表（书籍、教程、课程、工具和存在漏洞的应用程序），用于学习漏洞利用开发。

查看仓库
2.1k34444年前Kitploit 审核通过
分享

awesome-exploit-development

一份关于学习漏洞利用开发的精选资源列表（书籍、教程、课程、工具和易受攻击的应用程序）

由 Fabio Baroni 发起的一个项目。

点击此处阅读完整文章！ http://www.pentest.guru/index.php/2016/01/28/best-books-tutorials-and-courses-to-learn-about-exploit-development/

书籍

  • 《黑客：攻击的艺术》

  • 《漏洞猎人日记：软件安全荒野之旅》

  • 《Shellcoder 手册：发现并利用安全漏洞》

  • 《套接字、Shellcode、移植与编码：面向安全专业人员的漏洞利用逆向工程与工具编码》

  • 《编写安全工具与漏洞利用》

  • 《缓冲区溢出攻击：检测、利用与防范》

  • 《用于渗透测试、漏洞利用开发与漏洞研究的 Metasploit 工具包》

教程

Corelan.be

  • https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/

  • https://www.corelan.be/index.php/2009/07/23/writing-buffer-overflow-exploits-a-quick-and-basic-tutorial-part-2/

  • https://www.corelan.be/index.php/2009/07/25/writing-buffer-overflow-exploits-a-quick-and-basic-tutorial-part-3-seh/

https://www.corelan.be/index.php/2009/07/28/seh-based-exploit-writing-tutorial-continued-just-another-example-part-3b/

  • https://www.corelan.be/index.php/2009/08/12/exploit-writing-tutorials-part-4-from-exploit-to-metasploit-the-basics/

  • https://www.corelan.be/index.php/2009/09/05/exploit-writing-tutorial-part-5-how-debugger-modules-plugins-can-speed-up-basic-exploit-development/

  • https://www.corelan.be/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/

  • https://www.corelan.be/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/

  • https://www.corelan.be/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/

  • https://www.corelan.be/index.php/2010/02/25/exploit-writing-tutorial-part-9-introduction-to-win32-shellcoding/

  • https://www.corelan.be/index.php/2010/06/16/exploit-writing-tutorial-part-10-chaining-dep-with-rop-the-rubikstm-cube/

  • https://www.corelan.be/index.php/2011/12/31/exploit-writing-tutorial-part-11-heap-spraying-demystified/

  • https://www.corelan.be/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/

  • https://www.corelan.be/index.php/2010/03/22/ken-ward-zipper-exploit-write-up-on-abysssec-com/

  • https://www.corelan.be/index.php/2010/03/27/exploiting-ken-ward-zipper-taking-advantage-of-payload-conversion/

  • https://www.corelan.be/index.php/2011/01/30/hack-notes-rop-retnoffset-and-impact-on-stack-setup/

  • https://www.corelan.be/index.php/2011/05/12/hack-notes-ropping-eggs-for-breakfast/

  • https://www.corelan.be/index.php/2011/07/03/universal-depaslr-bypass-with-msvcr71-dll-and-mona-py/

  • https://www.corelan.be/index.php/2011/11/18/wow64-egghunter/

  • https://www.corelan.be/index.php/2012/02/29/debugging-fun-putting-a-process-to-sleep/

  • https://www.corelan.be/index.php/2012/12/31/jingle-bofs-jingle-rops-sploiting-all-the-things-with-mona-v2/

  • https://www.corelan.be/index.php/2013/02/26/root-cause-analysis-memory-corruption-vulnerabilities/

  • https://www.corelan.be/index.php/2013/01/18/heap-layout-visualization-with-mona-py-and-windbg/

  • https://www.corelan.be/index.php/2013/02/19/deps-precise-heap-spray-on-firefox-and-ie10/

  • https://www.corelan.be/index.php/2013/07/02/root-cause-analysis-integer-overflows/

    • Opensecuritytraining.info

    • http://opensecuritytraining.info/Exploits1.html

    • http://opensecuritytraining.info/Exploits2.html

    Securitytube.net

    • http://www.securitytube.net/groups?operation=view&groupId=7 漏洞利用研究 megaprimer

    • http://www.securitytube.net/groups?operation=view&groupId=4 Linux 缓冲区溢出利用 megaprimer

    • http://www.securitytube.net/groups?operation=view&groupId=3 格式化字符串漏洞 megaprimer

    Massimiliano Tomassoli 的博客

    • http://expdev-kiuhnm.rhcloud.com/2015/05/11/contents/

    Samsclass.info

    • https://samsclass.info/127/127_F15.shtml

    Securitysift.com

    • http://www.securitysift.com/windows-exploit-development-part-1-basics/

    • http://www.securitysift.com/windows-exploit-development-part-2-intro-stack-overflow/

    • http://www.securitysift.com/windows-exploit-development-part-3-changing-offsets-and-rebased-modules/

    • http://www.securitysift.com/windows-exploit-development-part-4-locating-shellcode-jumps/

    • http://www.securitysift.com/windows-exploit-development-part-5-locating-shellcode-egghunting

    • http://www.securitysift.com/windows-exploit-development-part-6-seh-exploits

    • http://www.securitysift.com/windows-exploit-development-part-7-unicode-buffer-overflows

    课程

    Corelan

    • https://www.corelan-training.com

    Offensive Security

    • https://www.offensive-security.com/information-security-training/advanced-windows-exploitation/ AWE（高级 Windows 漏洞利用）

    SANS

    • https://www.sans.org/course/advance-exploit-development-pentetration-testers SANS SEC760：面向渗透测试人员的高级漏洞利用开发

    Udemy

    • https://www.udemy.com/windows-exploit-development-megaprimer/learn/#/ Windows 漏洞利用开发 Megaprimer，作者 Ajin Abraham

    工具

    • IDA Pro

    • OllyDbg

    • WinDbg

    • Mona.py

    易受攻击的应用程序

    Exploit-exercises.com

    • https://exploit-exercises.com/protostar/ Protostar

    • https://exploit-exercises.com/fusion/ Fusion

    漏洞利用数据库

    • https://www.exploit-db.com

    • https://www.milw00rm.com

    • http://0day.today

    • https://packetstormsecurity.com

    • http://www.windowsexploits.com

    • http://iedb.ir

    • http://www.macexploit.com

    下载工具