# Black Front Security Team

## Black Front Security Team

- [渗透测试文库](https://wiki.iredteam.cn/master.md): 灵感来源于ired.team。其中框架为PTES，风格为ATT&\&CK。
- [安全思维导图](https://wiki.iredteam.cn/prophase-interaction/mind-mapping.md)
- [安全思维导图](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping.md): 来源自MITRE | ATT\&CK 中文站https://huntingday.github.io/
- [红队 \[ 蓝军 \] 完整战术 生命周期](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/redteamtactics.md)
- [工作组 渗透入门 \[ 内网搜集实战 \]](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/workgroup.md)
- [常规域渗透入门 实战细则 \[ 单域 \]](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/adsec.md)
- [内网通道构建入门 实战](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/tunnel.md)
- [系统提权入门 实战](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/localprivilege.md)
- [内网横向渗透入门 实战](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/lateralmovement.md)
- [单机持久化控制入门 实战](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/persistence.md)
- [内网入口搜集 实战](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/attck-mind-mapping/network.md)
- [渗透思维导图](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/permeable-mind-maps.md): 持续更新开发中
- [信息收集思维导图](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/permeable-mind-maps/information-collection-mind-maps.md)
- [文件上传绕过思维导图](https://wiki.iredteam.cn/prophase-interaction/mind-mapping/permeable-mind-maps/wen-jian-shang-chuan-rao-guo-si-wei-dao-tu.md)
- [C2前期准备](https://wiki.iredteam.cn/prophase-interaction/c2-preparation.md)
- [C2汇总](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/c2-summary.md)
- [C2内网穿透策略](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/c2-summary/c2-nei-wang-chuan-tou-ce-lve.md): 简单画个图哈，莫笑
- [红队之外网定向打点](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/c2-summary/hong-dui-zhi-wai-wang-ding-xiang-da-dian.md): 来源自2019北京网络安全大会
- [钓鱼平台搭建及应用](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/fishing.md)
- [搭建属于自己的个人邮件服务器 --EwoMai](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/fishing/set-up.md)
- [XSS平台](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/xss-platform.md)
- [社工方案](https://wiki.iredteam.cn/prophase-interaction/c2-preparation/plan.md)
- [武器库](https://wiki.iredteam.cn/prophase-interaction/tools.md)
- [漏扫爬虫](https://wiki.iredteam.cn/prophase-interaction/tools/leakage-and-crawler.md)
- [漏扫选择](https://wiki.iredteam.cn/prophase-interaction/tools/leakage-and-choose.md)
- [渗透备忘录](https://wiki.iredteam.cn/prophase-interaction/the-red-team-quick.md): Convenient commands for your pentesting / red-teaming engagements, OSCP and CTFs.
- [基础信息收集](https://wiki.iredteam.cn/information-gathering-stage/basic-information-collection-2.md)
- [OSINT Web信息收集](https://wiki.iredteam.cn/information-gathering-stage/osint-information-collection.md)
- [OSINT情报框架](https://wiki.iredteam.cn/information-gathering-stage/osint-intelligence-framework.md)
- [Nmap效率最大化](https://wiki.iredteam.cn/information-gathering-stage/nmap-maximum-efficiency.md): 来源自Capt. Meelo https://captmeelo.com/pentest/2019/07/29/port-scanning.html
- [在线信息收集汇总](https://wiki.iredteam.cn/information-gathering-stage/online-information-collection.md): 来源自https://gitbook.se7ensec.cn/
- [ATT\&CK威胁建模](https://wiki.iredteam.cn/threat-modeling-phase/threat-modeling.md): 尊重原创，转载自安全牛https://www.aqniu.com/learn/67034.html
- [APP分析](https://wiki.iredteam.cn/vulnerability-analysis-stage/analysis-of-the-app.md)
- [Android&\&IOS APP渗透测试方法checklist](https://wiki.iredteam.cn/vulnerability-analysis-stage/analysis-of-the-app/app-penetration-test-method.md)
- [Android APP渗透测试方法大全](https://wiki.iredteam.cn/vulnerability-analysis-stage/analysis-of-the-app/app-penetration-test-method2.md)
- [CMS POC](https://wiki.iredteam.cn/vulnerability-analysis-stage/cms-poc.md): 持续更新中，目前最方便的是零组
- [0-SEC---除要查询最好别打开](https://wiki.iredteam.cn/vulnerability-analysis-stage/cms-poc/0-sec.md): 零组资料文库
- [代码审计](https://wiki.iredteam.cn/vulnerability-analysis-stage/code-audit.md): 古风正抓紧开发中
- [WEB安全拓展](https://wiki.iredteam.cn/vulnerability-analysis-stage/code-audit/web-expand.md)
- [PHP代码审计笔记](https://wiki.iredteam.cn/vulnerability-analysis-stage/code-audit/php-dai-ma-shen-ji-bi-ji.md): 留在这先不更
- [JAVA代码审计笔记](https://wiki.iredteam.cn/vulnerability-analysis-stage/code-audit/java-dai-ma-shen-ji-bi-ji.md): 留在这先不更
- [加密解密](https://wiki.iredteam.cn/vulnerability-analysis-stage/encryption-to-decrypt.md)
- [Scan Script](https://wiki.iredteam.cn/vulnerability-analysis-stage/scan-script.md)
- [awvs\_script\_decode](https://wiki.iredteam.cn/vulnerability-analysis-stage/scan-script/awvs_script_decode.md)
- [Web安全](https://wiki.iredteam.cn/vulnerability-attack-stage/web-security.md)
- [Web安全](https://wiki.iredteam.cn/vulnerability-attack-stage/web-security/web-an-quan.md)
- [未授权访问汇总](https://wiki.iredteam.cn/vulnerability-attack-stage/web-security/wei-shou-quan-fang-wen-hui-zong.md): 暂时先放这些
- [Bypass Waf&\&Webshell免杀](https://wiki.iredteam.cn/vulnerability-attack-stage/bypass-waf.md)
- [Bypass Waf](https://wiki.iredteam.cn/vulnerability-attack-stage/bypass-waf/bypass-waf.md)
- [PHPWebshell免杀](https://wiki.iredteam.cn/vulnerability-attack-stage/bypass-waf/webshell-mian-sha-zhi-php.md)
- [JSPWebshell免杀](https://wiki.iredteam.cn/vulnerability-attack-stage/bypass-waf/webshell-mian-sha-zhi-jsp.md)
- [ASPWebshell免杀](https://wiki.iredteam.cn/vulnerability-attack-stage/bypass-waf/webshell-mian-sha-zhi-asp.md)
- [Fuzzing-Dicts](https://wiki.iredteam.cn/vulnerability-attack-stage/fuzzing-dicts.md)
- [Webshell](https://wiki.iredteam.cn/vulnerability-attack-stage/webshell.md): Webshell全部收集与网络
- [一句话&&小马](https://wiki.iredteam.cn/vulnerability-attack-stage/webshell/yi-ju-hua-xiao-ma.md): 详情见各个菜刀生成
- [大马](https://wiki.iredteam.cn/vulnerability-attack-stage/webshell/da-ma.md): 来源于github最高星
- [AV探测](https://wiki.iredteam.cn/post-infiltration-attack-phase/av.md)
- [免杀](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill.md)
- [PowerShell混淆](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/powershell-hun-xiao.md)
- [Shellcode混淆](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/shellcode-hun-xiao.md)
- [免杀技巧](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/mian-sha-ji-qiao.md)
- [免杀综合](https://wiki.iredteam.cn/post-infiltration-attack-phase/free-to-kill/mian-sha-zong-he.md)
- [权限提升](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges.md)
- [提权辅助](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/ti-quan-fu-zhu.md)
- [Bypass AV](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/bypass-av.md)
- [Linux提权](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/linux-ti-quan.md)
- [Windows提权](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/windows-ti-quan.md)
- [第三方提权](https://wiki.iredteam.cn/post-infiltration-attack-phase/elevated-privileges/di-san-fang-ti-quan.md)
- [单域信息收集](https://wiki.iredteam.cn/post-infiltration-attack-phase/single-domain-information-collection.md)
- [密码抓取](https://wiki.iredteam.cn/post-infiltration-attack-phase/single-domain-information-collection/hashdump.md): 先引用一下哈，有时间会自己写出来
- [C2上线&&反弹Shell](https://wiki.iredteam.cn/post-infiltration-attack-phase/rebound-shell.md)
- [C2上线姿势合集](https://wiki.iredteam.cn/post-infiltration-attack-phase/rebound-shell/c2-shang-xian-zi-shi-he-ji.md)
- [反弹shell的总结](https://wiki.iredteam.cn/post-infiltration-attack-phase/rebound-shell/fan-tan-shell-de-zong-jie.md): 更多请看工具篇--->代理工具&&国外
- [持久化控制](https://wiki.iredteam.cn/post-infiltration-attack-phase/persistence-control.md)
- [DLL Proxying for Persistence](https://wiki.iredteam.cn/post-infiltration-attack-phase/persistence-control/dll-hijacked.md)
- [工具篇](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools.md)
- [代理工具](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/proxy-tool.md)
- [国内](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/domestic-tool.md)
- [国外](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool.md)
- [Cobalt Strike](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/cobalt-strike.md)
- [dnscat2](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/dnscat2.md)
- [Merlin](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/merlin.md)
- [Metasploit](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/metasploit.md): 来源自https://www.cnblogs.com/LyShark/p/12189163.html
- [ngrok内网穿透](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/ngrok-nei-wang-chuan-tou.md)
- [Nishang](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/nishang.md)
- [p0wnedShell](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/p0wnedshell.md)
- [PoshC2](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/poshc2.md)
- [PowerShell Empire](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/powershell-empire.md)
- [Pupy Shell](https://wiki.iredteam.cn/post-infiltration-attack-phase/tools/foreign-tool/pupy-shell.md)
- [日志清理](https://wiki.iredteam.cn/the-report-stage/log-cleaning.md)
- [报告模板](https://wiki.iredteam.cn/the-report-stage/report-template.md)
- [关于我们](https://wiki.iredteam.cn/about.md): 黑锋安全小组(www.iredteam.cn)成立于2018年11月，经过两年的发展，已经形成完整的ATT\&CK红队安全体系，目前团队上线第一个开源项目(wiki.iredteam.cn)。
- [友情链接](https://wiki.iredteam.cn/links.md)