在线练习靶场

一、靶场

https://www.mozhe.cn/
https://ctf.bugku.com/challenges BUGKU
https://www.ctfhub.com/#/index
https://buuoj.cn/
https://github.com/Audi-1/sqli-labs.git?utm_source=testingpai.com
https://github.com/digininja/DVWA
https://adworld.xctf.org.cn/home/index
https://ctf.kanxue.com/
https://www.52pojie.cn/index.php
https://github.com/zhuifengshaonianhanlu/pikachu
https://tryhackme.com/
https://gitee.com/iloveasd/pikachu
https://gitee.com/iloveasd/sqli-labs
-----------------
http://dnslog.cn/
https://github.com/thickforest/xss_platform

 二、安全网站

https://www.freebuf.com/author/zero1234
https://www.cnblogs.com/yoyo1216/category/1362787.html
https://juejin.cn/

三、技术文章

https://www.cnblogs.com/zhengna/p/15814420.html

四、技术书籍

1.逆向工程权威指南
2、加密与解密
3、0day漏洞

五、实践工具

1、IDA Pro: https://hex-rays.com/ida-pro/
Ghidra: https://ghidra-sre.org/
Radare2: https://rada.re/n/radare2.html
Radare2 的 GUI：Cutter https://cutter.re/
Binary Ninja： https://binary.ninja/Jadx
Jadx-GUI (Android DEX)： https://github.com/skylot/jadx
JEB 反编译器 (Android): https://www.pnfsoftware.com/
ILSpy (.NET): https://github.com/icsharpcode/ILSpy
dnSpyEx (.NET): https://github.com/dnSpyEx/dnSpy
JD-GUI (Java): http://java-decompiler.github.io/
2. 调试器:
x64dbg/x32dbg: https://x64dbg.com/
WinDbg:
GDB : https://www.gnu.org/software/gdb/
GEF (GDB 增强功能): https://github.com/hugsy/gef
Pwndbg: https://github.com/pwndbg/pwndbg
OllyDbg: http://www.ollydbg.de/
3. 十六进制编辑器:
010 Editor: https://www.sweetscape.com/010editor/
UltraEdit Professional:https://www.ultraedit.com/zh-hans/ultraedit/
4. 文件格式分析器:
CFF 探索器 (Windows PE): http://www.ntcore.com/exsuite.php
PE-bear (Windows PE): https://hshrzd.wordpress.com/pe-bear/
Detect It Easy (DIE): https://github.com/horsicq/Detect-It-Easy
Binwalk : https://github.com/ReFirmLabs/binwalk
5. 系统与网络监控:
Process Monitor (ProcMon) (Windows): https://docs.microsoft.com/en-us/sysinternals/
Process Explorer (Windows):
Wireshark (跨平台): https://www.wireshark.org/
6. 动态插桩与Hooking框架:
Frida: https://frida.re/
Intel Pin: https://www.intel.com/content/www/us/en/developer/articles/tool/pin-a-dynamic-binary-instrumentation-tool.html
DynamoRIO: https://dynamorio.org/
7. Fuzzing工具:
AFL++ : https://github.com/AFLplusplus/AFLplusplus
libFuzzer: https://llvm.org/docs/LibFuzzer.html
WinAFL: https://github.com/googleprojectzero/winafl
Honggfuzz: https://honggfuzz.dev/
8. YARA:
YARA 工具与文档: https://virustotal.github.io/yara/

参考链接

https://www.cnblogs.com/GKLBB/p/18875197