SilentN0va-Offensive-Security

KO | EN

gitlite — search

#markdown #security #llm #git #electron #pytorch #redis #dotnet #codex #awesome-list

SilentN0va-Offensive-Security

(★ 9)

No description available.

File Explorer

ZIP Download

- 01-How-to-Install-Kali-Linux-on-VM.md
- 02-What-is-Linux-Architecture.md
- 03-Linux-Basic-Commands.md
- 04-Linux-Advanced-Commands-and-Scripting.md
- 05-Linux-Ultimate-Commands-Cheatsheet-Ar.md
- 06-Linux-Terminal-Tricks-and-Customization.md
- 07-Linux-Privilege-Escalation-Basics-Ar.md
- 08-Offensive-Linux-One-Liners-Ar.md
- README.md
- - 1. Scanning.md
  - 2. MSF.md
  - 3. Reconassence.md
  - 4. Haching.md
  - 5. Hacking smb telnet ftp protocol.md
  - 6. Nmap - Network Mapper.md
- - Task 1 Sec.md
  - Task 2.1 sec Network Services.md
  - Task 2.2 sec Network Services 2.md
  - Task 3.1 Crack the hash.md
  - Task 3.2 Crack The Hash Level 2.md
  - Task 4.1 Shoden.md
- - Network-Pentesting-Guide.md
- - README.md
- - 01-Web-Fundamentals.md
  - 02-Recon-and-Enumeration.md
  - 04-OWASP-Top-10-Overview.md
  - 05-Authentication-and-Session-Bypass.md
  - 06-Injection-Vulnerabilities.md
  - 07-Client-Side-Attacks.md
  - 08-Server-Side-Vulnerabilities.md
  - 09-Business-Logic-Flaws.md
  - 10-API-Security-Testing.md
  - README.md
- - Basic-Pentesting.md
  - Beginner-Path-Introduction.md
  - BT-MISP.md
  - Cat-Regex.md
  - CC-Pentesting.md
  - Getting-Started.md
  - Hacker-Methodology.md
  - Hello.md
  - How-To-Use-TryHackMe.md
  - Introduction-to-Research.md
  - ISO-27001.md
  - Linux-Fundamentals-Part-1.md
  - Linux-Fundamentals-Part-2.md
  - Linux-Fundamentals-Part-3.md
  - Linux-Modules.md
  - Linux-Strength-Training.md
  - OpenVAS.md
  - OpenVPN.md
  - Pentesting-Fundamentals.md
  - Physical-Security-Introduction.md
  - Principles-of-Security.md
  - Starting-Out-in-Cyber-Security.md
  - Tutorial.md
  - UltraTech-1.md
- - Active-Reconnaissance.md
  - Content-Discovery.md
  - Google-Dorking.md
  - OSINT.md
  - Passive-Reconnaissance.md
  - Red-Team-Reconnaissance.md
  - Sakura.md
  - SearchLight-OSINT.md
  - Shodan.md
  - Web-OSINT.md
- - Bash-Scripting.md
  - Introduction-to-PoC-Scripting.md
  - JavaScript-Basics.md
  - Peak-Hill.md
  - Python-Basics.md
  - Python-Playground.md
  - Rust.md
  - YARA.md
- - BP-Networking.md
  - DNS-in-Detail.md
  - HTTP-in-Detail.md
  - Introduction-to-LAN.md
  - Introduction-to-Networking.md
  - RFirmware.md
  - What-is-Networking.md
- - Burp-Suite-Basics.md
  - Burp-Suite-Repeater.md
  - FFUF.md
  - Further-Nmap.md
  - Hydra.md
  - Learn-OWASP-ZAP.md
  - Metasploit-Introduction.md
  - Nmap-01.md
  - Phishing-with-HiddenEye.md
  - RP-Metasploit.md
  - RP-Nessus-Redux.md
  - RP-Sublist3r.md
  - RP-Tmux.md
  - RustScan.md
  - Tmux-Remux.md
  - Toolbox-Vim.md
  - TShark.md
- - Agent-Sudo-CTF.md
  - Brute-It.md
  - Crack-the-Hash-Level-2.md
  - Crack-the-Hash.md
  - Cryptography-for-Dummies.md
  - Password-Security.md
- - DVWA.md
  - Inclusion.md
  - Injection.md
  - Juicy-Details.md
  - Learn-SSTI.md
  - LFI-Basics.md
  - OWASP-Juice-Shop.md
  - OWASP-Mutillidae.md
  - OWASP-Top-10.md
  - RP-Web-Scanning.md
  - SQL-Injection-LM.md
  - SQLi-Lab.md
  - Vulnerabilities-101.md
  - VulnNet-Node.md
  - Vulnversity.md
  - Walking-an-Application.md
  - Web-Application-Security-101.md
  - Web-Fundamentals.md
  - WebGoat.md
- - Android-Hacking-101.md
- - Autopsy-2-ZE0.md
  - BP-Volatility.md
  - Forensics.md
  - Linux-Server-Forensics.md
  - Memory-Forensics.md
- - Wi-Fi-Hacking-101.md
- - Aster.md
  - C-C-RAdare.md
  - CC-Ghidra-2.md
  - Classic-Passwd.md
  - Introduction-to-x86_64.md
  - JVM-Reverse-Engineering.md
  - Reloaded.md
  - Reverse-Engineering-Files.md
  - Reverse-Engineering.md
  - Win64-Assembly.md
- - Basic-Malware-RE.md
  - C2-Carnage.md
  - Dunkle-Materie.md
  - History-of-Malware.md
  - Malware-Analysis-Introductory.md
  - Malware-Researching.md
  - MMA.md
- - CC-Stego.md
  - Cicada-3301-Vol-1.md
  - Madness.md
  - Musical-Stego.md
  - Psycho-Break.md
  - Unstable-Twin.md
- - Linux-Agency.md
  - Linux-Privilege-Escalation-Arena.md
  - Linux-Privilege-Escalation.md
  - Windows-10-Privilege-Escalation.md
  - Windows-Privilege-Escalation-Arena.md
- - Anthem.md
  - Blue.md
  - Blueprint.md
  - Investigating-Windows-2.md
  - Investigating-Windows-3.md
  - Investigating-Windows.md
  - VulnNet-Active.md
  - Windows-Fundamentals-1.md
  - Windows-Fundamentals-2.md
  - Windows-Fundamentals-3.md
- - Attacktive-Directory.md
  - Enterprise.md
  - Post-Exploitation.md
  - Raz0rBlack.md
  - USTOUN.md
- - CCT-2019.md
  - H4cked.md
  - Overpass-2-Hacked.md
  - Warzone-One.md
  - Warzone-Two.md
- - Cyber-Threat-Intelligence.md
  - Diamond-Model.md
  - Introduction-to-Endpoint-Security.md
  - Junior-Security-Analyst-Intro.md
  - MITRE.md
  - Pyramid-of-Pain.md
- - Buffer-Overflow-Preparation.md
  - Chronicle.md
  - Gatekeeper.md
  - Introduction-to-Pwn-Tools.md
- - All-In-One-MJ.md
  - Archangel.md
  - Atlas.md
  - AttackerKB.md
  - BadByte.md
  - Blaster.md
  - Bolt.md
  - Brooklyn-Nine-Nine.md
  - BSidesGT-AnonForce.md
  - BSidesGT-Dav.md
  - BSidesGT-Thompson.md
  - BSidesGTLibrary.md
  - Capture-the-Flag.md
  - Cat-Pictures.md
  - Chill-Hack.md
  - Chocolate-Factory.md
  - ColdBox-Easy.md
  - Couch.md
  - Cowboy-Hacker.md
  - CTF-Collection-Vol-1.md
  - CTF.md
  - CyberGT-8.md
  - Easy-CTF.md
  - Easy-Peasy-CTF.md
  - Encryption-Crypto-101.md
  - Gaming-Server.md
  - Glitch.md
  - ICE.md
  - Ignite.md
  - Jack-of-All-Trades.md
  - Kenobi.md
  - Kiba.md
  - KOTH-Food-CTF.md
  - LazyAdmin.md
  - Lian-Yu.md
  - Lunizz-CTF-ND.md
  - Mustacchio.md
  - Ninja-Skills.md
  - OverlayFS.md
  - Overpass.md
  - Pickle-Rick.md
  - Pokemon.md
  - Poster.md
  - RootMe.md
  - Smaggrotto.md
  - Source.md
  - Startup.md
  - TeamCW.md
  - The-Cod-Caper.md
  - Tony-the-Tiger.md
  - VulnNet-Internal.md
  - VulnNet-Node.md
  - VulnNet-Roasted.md
  - Wgel-CTF.md
  - Year-of-the-Rabbit.md
- - 0day.md
  - Anonymous.md
  - Battery.md
  - Biohazard.md
  - Blog.md
  - BoilerCTF-2.md
  - Book-Store-OC.md
  - Break-It.md
  - Breakout-the-Cage-1.md
  - Broker.md
  - BSidesGT-Develpy.md
  - CMess.md
  - CMS-Pit.md
  - Cold-Vvars.md
  - Convert-My-Video.md
  - Cooctus-Adventures.md
  - CTF-Collection-Vol-2.md
  - CTF-One-Piece-65.md
  - Cyber-Crafted.md
  - Debug.md
  - Dejavu.md
  - DogCat.md
  - Enpass.md
  - Fortress.md
  - Ghizer-CTF.md
  - GoldenEye.md
  - HackerNote.md
  - Harder.md
  - HaskHell.md
  - Inferno.md
  - Jacob-the-Boss.md
  - Joker-CTF.md
  - KOTH-Hackers.md
  - Kubernetes-Challenge.md
  - Looking-Glass.md
  - Mad-Eyes-Castle.md
  - Marketplace.md
  - Metamorphosis.md
  - Mindgames.md
  - Mnemonic.md
  - Mr.-Robot.md
  - NahamStore.md
  - Nax.md
  - NerdHerd.md
  - Overpass-3-Hosting.md
  - Pylon-ZF.md
  - Recovery.md
  - Red-Stone-One-Carat.md
  - Relevant.md
  - Revenge.md
  - Road.md
  - Safe-Zone.md
  - SomeSINT.md
  - Sqhell.md
  - StuxCTF.md
  - SuperSpamR.md
  - Sustah.md
  - Sweet-Tooth-Inc.md
  - That-s-the-Ticket.md
  - The-Blob-Blog.md
  - The-Great-Escape.md
  - The-Impossible-Challenge.md
  - The-Server-from-Hell.md
  - TOC-2.md
  - Tokyo-Ghoul-666.md
  - Unbaked-Pie.md
  - Undiscovered-Up.md
  - VulnNet-.py.md
  - Watcher.md
  - WeKorra.md
  - Willow.md
  - Wonderland.md
  - WWBuddy.md
- - Adana.md
  - Anonymous-Playground.md
  - Borderlands.md
  - Brainpan.md
  - Carpe-Diem-1.md
  - Cherry-Blossom.md
  - Crocc-Crew.md
  - Daily-Bugle.md
  - Dave-s-Blog.md
  - Enterprize.md
  - Envizon.md
  - For-Business-Reasons.md
  - Fusion-Corp.md
  - GameBuzz.md
  - HC0n-Christmas-CTF.md
  - In-a-Cave.md
  - Internal.md
  - Iron-Corp.md
  - Jeff.md
  - Matrix-Exit-Denied.md
  - Misguided-Ghosts.md
  - Motunui.md
  - RA.md
  - Race-Track-Bank.md
  - Retro.md
  - Rocket.md
  - Shaker.md
  - Spring.md
  - Squid-Game-Room.md
  - Theseus.md
  - Uranium.md
  - VulnNet-.jar.md
  - Year-of-the-Dog.md
  - Year-of-the-Jellyfish.md
  - Year-of-the-Owl.md
  - Year-of-the-Pig.md
  - YOTF.md
- - 25-Days-of-Christmas.md
  - Advent-of-Cyber-2.md
  - Advent-of-Cyber-3.md
  - CyberWeek-2021.md
  - Hacker-of-the-Hill.md
  - Learn-Cyber-in-25-Days.md
  - Tickets-1.md
  - Tickets-2.md
- - Attacking-ICS-1.md
  - Attacking-ICS-2.md
  - Binary-Heaven.md
  - BP-Splunk.md
  - Bypass-Disable-Functions.md
  - Conti-Ransomware-HGH.md
  - CVE-2021-41773.md
  - DirtyPipe.md
  - Django.md
  - DLL-Hijacking.md
  - DNS-Manipulation.md
  - Flask.md
  - Geolocating-Images.md
  - Git-and-Crumpets.md
  - Git-Happens.md
  - Hip-Flask.md
  - Introduction-to-Containerisation.md
  - Introductory-Room-DFIR-Module.md
  - IoT-Intro.md
  - JPGChat.md
  - Jupyter-101.md
  - Linux-Backdoors.md
  - Linux-Function-Hooking.md
  - Magician.md
  - Meltdown-Explained.md
  - Polkit.md
  - Printer-Hacking-101.md
  - Revil-Corp.md
  - Solar.md
  - Sudo-Vulns-BOF.md
  - Sudo-Vulns-Bypass.md
  - Sudo-Vulns-Samedit.md
  - TomGhost.md
  - Tor-for-Beginners.md
  - WordPress-CVE-2021-29447.md
- README.md
- - Dancing.md
  - Explosion.md
  - Fawn.md
  - Meow.md
  - Mongod.md
  - Preise.md
  - Synapse.md
  - Vaccine.md
- - Appointment.md
  - Bike.md
  - Crocodile.md
  - Redeemer.md
  - Responder.md
  - Sequel.md
  - Three.md
- - Archetype.md
  - Base.md
  - Oopsie.md
  - Penalty.md
  - Unified.md
  - Vaccination.md
- - BoardLight.md
  - Chemistry.md
  - Devvortex.md
  - Usage.md
- - Blurry.md
  - Interface.md
  - PermX.md
  - Runner.md
- README.md
- 01-Phishing-Frameworks-and-GoPhish.md
- 02-Payload-Delivery-and-Weaponization.md
- 03-OSINT-and-Reconnaissance-for-SE.md
- README.md
- - 01-python-basics.md
  - 02-variables-data-types.md
  - 03-conditions-loops.md
  - 04-functions.md
  - 05-data-structures.md
  - 06-files-errors-modules.md
  - 07-networking-python.md
  - 08-security-automation.md
  - 09-mini-security-tools.md
  - 10-hacker-project.md
  - README.md
- - 01. Variables.md
  - 02. Arithmetic Operators.md
  - 03. Strings.md
  - 05. Arrays.md
  - 06. Functions.md
  - 07. Conditions.md
  - 08. Switch Case.md
  - 09. Objects.md
  - 10. Loops.md
- - 01-What-is-OSINT.md
  - 02-OSINT-vs-Reconnaissance.md
  - 03-Passive-vs-Active-Recon.md
  - 04-Information-Sources.md
  - 05-Data-Collection.md
  - 06-Data-Validation.md
  - 07-False-Positives.md
  - 08-OPSEC-and-Ethics.md
  - README.md
- - 01-Search-Engine-Basics.md
  - 02-Google-Operators.md
  - 03-Google-Dorks.md
  - 04-Bing.md
  - 05-DuckDuckGo.md
  - 06-Search-Pivoting.md
  - 07-Search-Engine-CTF.md
  - README.md
- - 01-People-OSINT-Basics.md
  - 02-Names-and-Aliases.md
  - 03-Usernames.md
  - 04-Public-Profiles.md
  - 05-Identity-Correlation.md
  - 06-Information-Pivoting.md
  - 07-Validation.md
  - README.md
- - 01-Username-Enumeration.md
  - 02-Username-Reuse.md
  - 03-Profile-Discovery.md
  - 04-Username-Correlation.md
  - 05-False-Positive-Handling.md
  - 06-Practical-Username-OSINT.md
  - README.md
- - 01-Email-OSINT-Basics.md
  - 02-Email-Enumeration.md
  - 03-Email-Patterns.md
  - 04-Domain-Based-Discovery.md
  - 05-Email-Metadata.md
  - 06-Breach-Awareness.md
  - 07-Email-OSINT-Lab.md
  - README.md
- - 01-WHOIS.md
  - 02-DNS-Records.md
  - 03-Subdomains.md
  - 04-Certificate-Transparency.md
  - 05-ASN-and-IP-Ranges.md
  - 06-Hosting-Information.md
  - 07-Historical-Information.md
  - 08-Domain-Investigation.md
  - README.md
- - 01-IP-Address-Basics.md
  - 02-WHOIS-and-RDAP.md
  - 03-ASN.md
  - 04-Reverse-DNS.md
  - 05-IP-Geolocation.md
  - 06-IP-Reputation.md
  - 07-IP-Investigation.md
  - README.md
- - 01-Social-Media-OSINT.md
  - 02-Username-Correlation.md
  - 03-Public-Profiles.md
  - 04-Public-Posts.md
  - 05-Timeline-Analysis.md
  - 06-Location-Clues.md
  - 07-Organization-Mapping.md
  - 08-Social-Engineering-Exposure.md
  - README.md
- - 01-Image-OSINT-Basics.md
  - 02-Reverse-Image-Search.md
  - 03-EXIF.md
  - 04-Visual-Clues.md
  - 05-Geolocation.md
  - 06-Image-Verification.md
  - 07-Image-OSINT-Lab.md
  - README.md
- - 01-Metadata-Basics.md
  - 02-EXIF-Metadata.md
  - 03-PDF-Metadata.md
  - 04-Office-Metadata.md
  - 05-Document-Metadata.md
  - 06-ExifTool.md
  - 07-Metadata-Sanitization.md
  - README.md
- - 01-Surface-Web.md
  - 02-Deep-Web.md
  - 03-Dark-Web.md
  - 04-Tor-Basics.md
  - 05-Threat-Intelligence.md
  - 06-Leak-Monitoring-Concepts.md
  - 07-Dark-Web-Risks.md
  - README.md
- - README.md
- - 01-Domain-Investigation.md
  - 02-Username-Investigation.md
  - 03-Email-Investigation.md
  - 04-IP-Investigation.md
  - 05-Image-Investigation.md
  - 06-Organization-OSINT.md
  - 07-Full-OSINT-Investigation.md
  - README.md
- - 01-OSINT-CTF-Methodology.md
  - 02-Search-Challenges.md
  - 03-Username-Challenges.md
  - 04-Image-Challenges.md
  - 05-Geolocation-Challenges.md
  - 06-Domain-Challenges.md
  - 07-Full-OSINT-Challenge.md
  - README.md
- - 01-OSINT-Report-Template.md
  - 02-Evidence-Collection.md
  - 03-Source-Reliability.md
  - 04-Confidence-Levels.md
  - 05-Investigation-Timeline.md
  - README.md
- CHEATSHEET.md
- README.md
- ROADMAP.md
- - 01-Cryptography-Introduction.md
  - 02-Why-Cryptography.md
  - 03-Plaintext-Ciphertext.md
  - 04-Keys.md
  - 05-Cryptography-vs-Encoding-vs-Hashing.md
  - README.md
- - 01-ASCII.md
  - 02-Base64.md
  - 03-URL-Encoding.md
  - 04-Hexadecimal.md
  - 05-Common-CTF-Encoding.md
  - README.md
- - 01-Hashing-Basics.md
  - 02-MD5.md
  - 03-SHA1.md
  - 04-SHA2.md
  - 05-SHA3.md
  - 06-SHA256.md
  - 07-Salt.md
  - 08-HMAC.md
  - 09-Password-Hashing.md
  - 10-Hash-Cracking-Concepts.md
  - README.md
- - 01-Symmetric-Encryption.md
  - 02-AES.md
  - 03-DES.md
  - 04-3DES.md
  - 05-Block-Ciphers.md
  - 06-Stream-Ciphers.md
  - 07-Modes-of-Operation.md
  - 08-ECB.md
  - 09-CBC.md
  - 10-CTR.md
  - 11-GCM.md
  - 12-IV-and-Nonce.md
  - 13-Common-Mistakes.md
  - README.md
- - 01-Asymmetric-Cryptography.md
  - 02-Public-and-Private-Keys.md
  - 03-RSA.md
  - 04-RSA-Key-Generation.md
  - 05-RSA-Encryption.md
  - 06-RSA-Signatures.md
  - 07-Diffie-Hellman.md
  - 08-Elliptic-Curve-Cryptography.md
  - 09-ECDSA.md
  - README.md
- - 01-Digital-Signatures.md
  - 02-Signing-and-Verification.md
  - 03-RSA-Signatures.md
  - 04-ECDSA.md
  - 05-Real-World-Usage.md
  - README.md
- - 01-PKI.md
  - 02-Digital-Certificates.md
  - 03-Certificate-Authorities.md
  - 04-X509.md
  - 05-CSR.md
  - 06-Chain-of-Trust.md
  - 07-TLS-Certificates.md
  - README.md
- - 01-TLS-Basics.md
  - 02-HTTPS.md
  - 03-TLS-Handshake.md
  - 04-Certificates.md
  - 05-Symmetric-and-Asymmetric-in-TLS.md
  - 06-TLS-1.2.md
  - 07-TLS-1.3.md
  - 08-Common-TLS-Misconfigurations.md
  - README.md
- - 01-Password-Storage.md
  - 02-JWT.md
  - 03-HMAC.md
  - 04-Cookies.md
  - 05-CSRF-Tokens.md
  - 06-Session-Security.md
  - 07-Cryptographic-Misconfigurations.md
  - README.md
- - 01-CTF-Crypto-Introduction.md
  - 02-Base64-Challenges.md
  - 03-Hash-Challenges.md
  - 04-RSA-Challenges.md
  - 05-XOR.md
  - 06-Substitution-Ciphers.md
  - 07-Vigenere.md
  - 08-Caesar.md
  - 09-Crypto-Challenge-Methodology.md
  - README.md
- - README.md
- - Lab-01-Hashing.md
  - Lab-02-Base64.md
  - Lab-03-AES.md
  - Lab-04-RSA.md
  - Lab-05-Digital-Signature.md
  - Lab-06-TLS.md
  - Lab-07-Crypto-CTF.md
  - README.md
- - Books.md
  - Official-Documentation.md
  - README.md
  - Standards.md
  - Useful-Resources.md
- CHEATSHEET.md
- README.md
- ROADMAP.md
- - 01-What-is-Vulnerability-Assessment.md
  - 02-Vulnerability-vs-Exploit.md
  - 03-Vulnerability-vs-Misconfiguration.md
  - 04-VA-vs-Penetration-Testing.md
  - 05-Assessment-Types.md
  - 06-Authenticated-vs-Unauthenticated.md
  - 07-Black-Box-vs-White-Box-vs-Gray-Box.md
  - 08-Vulnerability-Assessment-Methodology.md
  - README.md
- - 01-Asset-Identification.md
  - 02-Network-Discovery.md
  - 03-Service-Discovery.md
  - 04-Technology-Identification.md
  - 05-Software-Inventory.md
  - 06-Attack-Surface.md
  - 07-Asset-Classification.md
  - README.md
- - 01-Manual-Vulnerability-Discovery.md
  - 02-Automated-Vulnerability-Scanning.md
  - 03-Network-Vulnerabilities.md
  - 04-Web-Vulnerabilities.md
  - 05-Configuration-Vulnerabilities.md
  - 06-Software-Vulnerabilities.md
  - 07-Missing-Patches.md
  - 08-Unsupported-Software.md
  - README.md
- - README.md
- - 01-CVE.md
  - 02-CVSS.md
  - 03-CVSS-v3.md
  - 04-CVSS-v4.md
  - 05-CWE.md
  - 06-NVD.md
  - 07-Exploit-DB.md
  - 08-Vendor-Advisories.md
  - 09-CVE-Analysis-Workflow.md
  - README.md
- - 01-Why-Validation-Matters.md
  - 02-False-Positives.md
  - 03-Manual-Validation.md
  - 04-Evidence-Collection.md
  - 05-Impact-Validation.md
  - 06-Version-Validation.md
  - 07-PoC-Validation.md
  - README.md
- - 01-Risk-Basics.md
  - 02-Impact.md
  - 03-Likelihood.md
  - 04-CVSS-Scoring.md
  - 05-Risk-Rating.md
  - 06-Vulnerability-Prioritization.md
  - 07-Remediation-Priority.md
  - README.md
- - 01-Remediation-Basics.md
  - 02-Patch-Management.md
  - 03-Configuration-Hardening.md
  - 04-Compensating-Controls.md
  - 05-Temporary-Mitigation.md
  - 06-Reassessment.md
  - README.md
- - 01-Network-Vulnerability-Assessment.md
  - 02-Web-Vulnerability-Assessment.md
  - 03-Linux-Vulnerability-Assessment.md
  - 04-Windows-Vulnerability-Assessment.md
  - 05-Authenticated-Assessment.md
  - 06-Full-Vulnerability-Assessment.md
  - README.md
- - 01-Vulnerability-Report-Structure.md
  - 02-Executive-Summary.md
  - 03-Technical-Finding.md
  - 04-Evidence.md
  - 05-Risk-Rating.md
  - 06-Remediation-Recommendation.md
  - 07-Report-Quality.md
  - 08-Vulnerability-Report-Template.md
  - README.md
- - 01-Network-VA-Lab.md
  - 02-Web-VA-Lab.md
  - 03-Scanner-Lab.md
  - 04-CVE-Analysis-Lab.md
  - 05-False-Positive-Lab.md
  - 06-Validation-Lab.md
  - 07-Full-VA-Lab.md
  - README.md
- - CVE-NVD.md
  - CVSS.md
  - CWE.md
  - NIST.md
  - OWASP.md
  - README.md
  - Useful-Resources.md
- CHEATSHEET.md
- README.md
- ROADMAP.md
- - 01-What-is-Wireless-Security.md
  - 02-WiFi-Basics.md
  - 03-Access-Points-and-Clients.md
  - 04-SSID-BSSID-and-ESSID.md
  - 05-Wireless-Channels.md
  - 06-2.4GHz-5GHz-6GHz.md
  - 07-Wireless-Network-Architecture.md
  - README.md
- - 01-IEEE-802.11.md
  - 02-802.11a-b-g-n.md
  - 03-802.11ac.md
  - 04-802.11ax.md
  - 05-WiFi-Generations.md
  - README.md
- - 01-Management-Frames.md
  - 02-Control-Frames.md
  - 03-Data-Frames.md
  - 04-Beacon-Frames.md
  - 05-Probe-Requests.md
  - 06-Probe-Responses.md
  - 07-Association.md
  - 08-Authentication-Process.md
  - README.md
- - 01-WEP.md
  - 02-WPA.md
  - 03-WPA2.md
  - 04-WPA3.md
  - 05-PSK.md
  - 06-802.1X.md
  - 07-EAP.md
  - 08-RADIUS.md
  - 09-Personal-vs-Enterprise.md
  - README.md
- - 01-Reconnaissance-Methodology.md
  - 02-Access-Point-Discovery.md
  - 03-Client-Discovery.md
  - 04-SSID-Enumeration.md
  - 05-BSSID-Enumeration.md
  - 06-Channel-Analysis.md
  - 07-Encryption-Identification.md
  - 08-Wireless-Attack-Surface.md
  - README.md
- - 01-Interface-Modes.md
  - 02-Monitor-Mode.md
  - 03-Managed-Mode.md
  - 04-Wireless-Interface-Enumeration.md
  - 05-Access-Point-Enumeration.md
  - 06-Client-Enumeration.md
  - README.md
- - 01-Wireless-Packet-Capture.md
  - 02-Wireshark-for-Wireless.md
  - 03-Frame-Analysis.md
  - 04-Beacon-Analysis.md
  - 05-Authentication-Analysis.md
  - 06-EAPOL.md
  - 07-Troubleshooting-Captures.md
  - README.md
- - 01-Weak-Encryption.md
  - 02-Weak-Authentication.md
  - 03-Weak-Passwords.md
  - 04-WPS-Security.md
  - 05-Misconfigured-Access-Points.md
  - 06-Rogue-Access-Points.md
  - 07-Evil-Twin-Concepts.md
  - 08-Captive-Portal-Security.md
  - 09-Client-Security.md
  - README.md
- - 01-Attack-Categories.md
  - 02-Deauthentication-Concepts.md
  - 03-Authentication-Weaknesses.md
  - 04-WPS-Weaknesses.md
  - 05-Rogue-AP-Attacks.md
  - 06-Evil-Twin-Attacks.md
  - 07-Client-Side-Attacks.md
  - README.md
- - 01-Pre-Engagement.md
  - 02-Scope-and-Authorization.md
  - 03-Reconnaissance.md
  - 04-Enumeration.md
  - 05-Security-Assessment.md
  - 06-Vulnerability-Validation.md
  - 07-Risk-Assessment.md
  - 08-Remediation.md
  - 09-Reporting.md
  - README.md
- - README.md
- - 01-WPA2-Personal.md
  - 02-WPA2-Enterprise.md
  - 03-WPA3-Personal.md
  - 04-WPA3-Enterprise.md
  - 05-4-Way-Handshake.md
  - 06-PMK-PTK-and-GTK.md
  - 07-Wireless-Password-Security.md
  - README.md
- - 01-What-is-WPS.md
  - 02-WPS-Architecture.md
  - 03-WPS-PIN-Weaknesses.md
  - 04-WPS-Security-Assessment.md
  - 05-WPS-Hardening.md
  - README.md
- - 01-Captive-Portal-Basics.md
  - 02-Authentication-Flow.md
  - 03-Security-Weaknesses.md
  - 04-Common-Misconfigurations.md
  - 05-Hardening.md
  - README.md
- - 01-Client-Security.md
  - 02-Saved-Networks.md
  - 03-Auto-Connect-Risks.md
  - 04-Rogue-Network-Risks.md
  - 05-Client-Hardening.md
  - README.md
- - 01-Wireless-Recon-Lab.md
  - 02-Wireless-Enumeration-Lab.md
  - 03-Traffic-Analysis-Lab.md
  - 04-WPS-Security-Lab.md
  - 05-Rogue-AP-Lab.md
  - 06-Wireless-Security-Assessment-Lab.md
  - 07-Full-Wireless-Pentest-Lab.md
  - README.md
- - 01-Wireless-Recon-Challenge.md
  - 02-Packet-Analysis-Challenge.md
  - 03-Wireless-Enumeration-Challenge.md
  - 04-Wireless-Security-Challenge.md
  - README.md
- - 01-Wireless-Pentest-Report.md
  - 02-Finding-Structure.md
  - 03-Evidence.md
  - 04-Risk-Rating.md
  - 05-Remediation.md
  - 06-Report-Template.md
  - README.md
- - IEEE-802.11.md
  - NIST.md
  - OWASP.md
  - README.md
  - Useful-Resources.md
  - WiFi-Alliance.md
- CHEATSHEET.md
- README.md
- ROADMAP.md
- - 01-What-is-Fuzzing.md
  - 02-Why-Fuzzing-Matters.md
  - 03-Fuzzing-vs-Scanning.md
  - 04-Fuzzing-vs-Pentesting.md
  - 05-Fuzzing-Workflow.md
  - 06-Fuzzing-Limitations.md
  - README.md
- - 01-Black-Box-Fuzzing.md
  - 02-White-Box-Fuzzing.md
  - 03-Grey-Box-Fuzzing.md
  - 04-Mutation-Based-Fuzzing.md
  - 05-Generation-Based-Fuzzing.md
  - 06-Protocol-Based-Fuzzing.md
  - 07-Hybrid-Fuzzing.md
  - README.md
- - 01-Web-Fuzzing-Fundamentals.md
  - 02-Directory-Fuzzing.md
  - 03-Endpoint-Fuzzing.md
  - 04-Parameter-Fuzzing.md
  - 05-HTTP-Method-Fuzzing.md
  - 06-Header-Fuzzing.md
  - 07-Content-Type-Fuzzing.md
  - 08-Web-Fuzzing-Methodology.md
  - README.md
- - 01-API-Fuzzing-Fundamentals.md
  - 02-REST-API-Fuzzing.md
  - 03-GraphQL-Fuzzing.md
  - 04-Parameter-Fuzzing.md
  - 05-JSON-Fuzzing.md
  - 06-Authentication-Fuzzing.md
  - 07-Authorization-Fuzzing.md
  - 08-API-Fuzzing-Methodology.md
  - README.md
- - 01-Input-Fuzzing.md
  - 02-File-Format-Fuzzing.md
  - 03-Parser-Fuzzing.md
  - 04-Archive-Fuzzing.md
  - 05-Image-Format-Fuzzing.md
  - 06-Document-Fuzzing.md
  - README.md
- - 01-Protocol-Fuzzing.md
  - 02-TCP-UDP-Fuzzing.md
  - 03-HTTP-Fuzzing.md
  - 04-DNS-Fuzzing.md
  - 05-Custom-Protocol-Fuzzing.md
  - 06-Protocol-Fuzzing-Methodology.md
  - README.md
- - 01-Binary-Fuzzing-Fundamentals.md
  - 02-Memory-Corruption.md
  - 03-Buffer-Overflow.md
  - 04-Heap-Related-Crashes.md
  - 05-Integer-Overflow.md
  - 06-Use-After-Free.md
  - 07-Binary-Fuzzing-Workflow.md
  - README.md
- - 01-Code-Coverage.md
  - 02-Instrumentation.md
  - 03-Coverage-Guided-Fuzzing.md
  - 04-Corpus.md
  - 05-Seed-Selection.md
  - 06-Mutation-Strategies.md
  - 07-Coverage-Analysis.md
  - README.md
- - 01-Inputs.md
  - 02-Seeds.md
  - 03-Corpus.md
  - 04-Mutators.md
  - 05-Harnesses.md
  - 06-Instrumentation.md
  - 07-Crash-Detection.md
  - README.md
- - README.md
- - 01-Building-a-Simple-Fuzzer.md
  - 02-Python-Fuzzer.md
  - 03-HTTP-Fuzzer.md
  - 04-API-Fuzzer.md
  - 05-Protocol-Fuzzer.md
  - 06-Fuzzer-Design.md
  - README.md
- - 01-What-is-a-Crash.md
  - 02-Crash-Triage.md
  - 03-Reproducing-Crashes.md
  - 04-Stack-Traces.md
  - 05-Debugging.md
  - 06-Crash-Deduplication.md
  - 07-Crash-to-Vulnerability.md
  - README.md
- - 01-Finding-Security-Bugs.md
  - 02-Crash-Classification.md
  - 03-Memory-Corruption-Analysis.md
  - 04-Impact-Assessment.md
  - 05-Exploitability.md
  - 06-Responsible-Disclosure.md
  - README.md
- - 01-Web-Fuzzing-Lab.md
  - 02-API-Fuzzing-Lab.md
  - 03-File-Fuzzing-Lab.md
  - 04-Protocol-Fuzzing-Lab.md
  - 05-Binary-Fuzzing-Lab.md
  - 06-Crash-Analysis-Lab.md
  - 07-Custom-Fuzzer-Lab.md
  - README.md
- - 01-Web-Fuzzing-Challenge.md
  - 02-API-Fuzzing-Challenge.md
  - 03-File-Fuzzing-Challenge.md
  - 04-Binary-Fuzzing-Challenge.md
  - 05-Crash-Analysis-Challenge.md
  - README.md
- - 01-Fuzzing-Finding-Report.md
  - 02-Crash-Report.md
  - 03-Vulnerability-Report.md
  - 04-Evidence.md
  - 05-Responsible-Disclosure.md
  - README.md
- - AFLPlusPlus.md
  - Boofuzz.md
  - Fuzzing-Resources.md
  - LibFuzzer.md
  - OWASP.md
  - Radamsa.md
  - README.md
- CHEATSHEET.md
- README.md
- ROADMAP.md
.gitattributes
.gitignore
CHANGELOG.md
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
README.md
ROADMAP.md
SECURITY.md

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

---

## 🔗 Connect & Follow

I share continuous cybersecurity tutorials, educational write-ups, and free courses in Arabic across my social media channels. Follow along to stay updated:

> 📢 **ملاحظة:** بنزل كورسات ومحتوى تعليمي مجاني بالكامل باللغة العربية على قنوات السوشيال ميديا الخاصة بي، تتابعني عشان يوصلك كل جديد!

---
> A structured, bilingual knowledge base for offensive security learning — from zero to professional.

![License](https://img.shields.io/badge/License-MIT-green.svg)
![Language](https://img.shields.io/badge/Language-Arabic%20%2F%20English-blue.svg)
![Modules](https://img.shields.io/badge/Modules-13-orange.svg)
![Files](https://img.shields.io/badge/Files-1455%2B-lightgrey.svg)
![Status](https://img.shields.io/badge/Status-Active-brightgreen.svg)

---

## ⚠️ Legal Disclaimer — Authorized Use Only

All content in this repository is provided **strictly for educational purposes**.

Every technique, tool, lab, and writeup documented here must only be practiced against:

- Systems you own, or
- Systems you are **explicitly authorized to test** (e.g., TryHackMe, HackTheBox, local isolated labs, or systems covered by a signed authorization agreement)

Using any technique from this repository against systems you do not own or have no written authorization to test is **illegal** in most jurisdictions and is strictly against the purpose of this project.

The maintainer is not responsible for any misuse. See [SECURITY.md](./SECURITY.md) for the full security policy.

---

## Overview

**SilentN0va Offensive Security** is an open, structured knowledge base that guides learners through the full offensive security domain — from Linux fundamentals to advanced vulnerability research and fuzzing.

Content is written primarily in **Arabic (Egyptian dialect)** with **English technical terminology** throughout. Several modules are fully bilingual. This is the repository's core differentiator: professional offensive security knowledge made accessible to Arabic-speaking learners without sacrificing technical depth.

### Who is this for?

- Cybersecurity students starting from scratch
- Penetration testers building structured knowledge
- Bug bounty hunters looking for methodology references
- Vulnerability researchers and CTF players
- Offensive security engineers preparing for professional work

---

## Learning Path

The repository is organized around a six-level progression:

```
LEVEL 0 — ZERO          : No prior knowledge required
LEVEL 1 — FUNDAMENTALS  : Linux, Networking, Scripting basics
LEVEL 2 — BEGINNER      : Network and Web pentesting fundamentals
LEVEL 3 — INTERMEDIATE  : OSINT, Cryptography, Vulnerability Assessment, Social Engineering
LEVEL 4 — ADVANCED      : Mobile, Wireless, Fuzzing, Vulnerability Research
LEVEL 5 — PROFESSIONAL  : Red Teaming, full engagement methodology, reporting
```

Work through modules in order. Each module assumes the knowledge of the ones before it. Do not skip to advanced modules without the foundation.

---

## Module Index

| # | Module | Focus Area | Depth |
|---|--------|-----------|-------|
| 01 | [Kali Linux Basics](./01.%20Kali%20Linux%20Basics/README.md) | Linux fundamentals, Kali setup, CLI, Bash scripting, privilege escalation basics | 10 files |
| 02 | [Network Pentesting](./02.%20Network%20Pentesting/) | Scanning, Nmap, Metasploit, recon, hashing, SMB/FTP/Telnet exploitation | 68 files |
| 03 | [Web Application Penetration Testing](./03.%20Web%20Application%20Penetration%20Testing/) | OWASP Top 10, web recon, injection, auth bypass, client/server vulnerabilities, API security | 100 files |
| 04 | [TryHackMe Labs](./04.%20TryHackMe-Labs/) | Documented lab walkthroughs: Fundamentals, Recon, Scripting, Networking, Tooling, Crypto, Web, Privesc, Exploitation, Red Team | 390 files |
| 05 | [HackTheBox Labs](./05.%20HackTheBox-Labs/) | HackTheBox machine walkthroughs and writeups | 36 files |
| 06 | [Social Engineering](./06.%20Social-Engineering/) | Social engineering fundamentals and techniques | 5 files |
| 07 | [Programming for Cybersecurity](./07.%20Programming-for-Cybersecurity/) | Python and JavaScript for offensive security use cases | 23 files |
| 08 | [OSINT](./08.%20OSINT/README.md) | Full OSINT methodology: people, username, email, domain, IP, social media, image, metadata, tools, investigation labs, reporting | 168 files |
| 09 | [Cryptography](./09.%20Cryptography/) | Cryptographic fundamentals, hashing, symmetric/asymmetric crypto, PKI, applied crypto, CTF crypto | 135 files |
| 10 | [Vulnerability Assessment](./10.%20Vulnerability-Assessment/) | Vulnerability discovery, validation, risk scoring, CVSS, remediation, professional reporting | 135 files |
| 11 | [Mobile Application Pentesting](./11.%20Mobile%20Application%20Penetration%20Testing/) | Android penetration testing; bundled vulnerable APKs for practice *(written content in progress)* | 21 files |
| 12 | [Wireless Security Pentesting](./12.%20Wireless-Security-Pentesting/) | Wireless protocols, WPA/WPA2/WPA3 attacks, rogue APs, wireless security assessment methodology | 182 files |
| 13 | [Fuzzing](./13.%20Fuzzing/README.md) | Web/API/file/network/binary fuzzing, AFL++, libFuzzer, custom Python fuzzers, crash analysis, vulnerability discovery, CTF challenges, reporting | 172 files |

---

## Content Highlights

**CTF Reports & Writeups**
- [Metasploitable 2 Full Pentesting Report](./02.%20Network%20Pentesting/03.%20CTFS/01.%20Metasploitable%202%20Report/) — complete network penetration test report with screenshots
- [DVWA Full Report](./03.%20Web%20Application%20Penetration%20Testing/CTFs/01.%20DVWA_Report/) — OWASP-aligned web vulnerability assessment report

**Practical Labs**
- 390 TryHackMe lab walkthroughs spanning fundamentals through red team topics
- HackTheBox machine writeups
- Structured practical tasks inside the Network and Web pentesting modules

**Fuzzing Module** (most complete module in the repository)
- Theory through implementation: from fuzzing fundamentals to building custom Python fuzzers
- Tool coverage: AFL++, libFuzzer, Boofuzz, Radamsa, Honggfuzz, ffuf, Gobuster, Feroxbuster, Wfuzz, Burp Intruder
- Crash analysis, vulnerability discovery, and professional fuzzing reports

**OSINT Module**
- Full investigation methodology: Define Objective → Collect → Search → Pivot → Correlate → Validate → Document → Report
- Covers people, username, email, domain, IP, social media, image, and metadata OSINT
- Ethics and OPSEC section included

**Mobile Security**
- Bundled intentionally vulnerable Android APKs for hands-on practice:
  - DIVA (Damn Insecure and Vulnerable App)
  - InjuredAndroid
  - AllSafe
  - VulnWebView
  - BeetleBug
  - TaskHijacking Demo
  - and more

**Bilingual Cheatsheets**
- Linux Ultimate Commands Cheatsheet (Arabic)
- Offensive Linux One-Liners (Arabic)
- Fuzzing Cheatsheet

---

## How to Use This Repository

**For structured learning:** Work through the modules in numerical order (01 → 13). Each module builds on the previous ones. Start with Module 01 even if you have some Linux experience — the offensive focus of the commands covered differs from general sysadmin Linux.

**For reference:** Each module has its own `README.md` as an index. Navigate directly to the module relevant to your current work and use the notes as a reference alongside your lab environment.

**For CTF practice:** Go directly to the CTF subdirectories in the Network and Web modules, or to `04. TryHackMe-Labs` and `05. HackTheBox-Labs` for platform-specific writeups.

**Critical rule:** Never attempt any technique outside of an authorized environment. Every lab exercise is designed to be reproduced inside TryHackMe, HackTheBox, or a locally isolated virtual machine.

---

## Prerequisites

Before starting, you should have or set up:

- A hypervisor: [VirtualBox](https://www.virtualbox.org/) (free) or VMware
- [Kali Linux](https://www.kali.org/) installed on your hypervisor (covered in Module 01)
- An account on [TryHackMe](https://tryhackme.com/) and/or [HackTheBox](https://www.hackthebox.com/) for practical labs
- Basic comfort reading English technical documentation (Arabic explanations are provided, but tool docs are in English)
- No prior security knowledge required — Module 01 starts from scratch

---

## Tools & Technologies Referenced

| Category | Tools |
|---|---|
| Network | Nmap, Metasploit Framework, Hydra, Netcat, Wireshark |
| Web | Burp Suite, ffuf, Gobuster, Feroxbuster, Wfuzz, Nikto |
| Fuzzing | AFL++, libFuzzer, Boofuzz, Radamsa, Honggfuzz |
| OSINT | Shodan, ExifTool, Maltego, theHarvester |
| Mobile | Frida, ADB, Android emulators |
| Scripting | Python 3, Bash, JavaScript |
| Reporting | Markdown, structured pentest report templates |
| Lab Platforms | TryHackMe, HackTheBox, DVWA, Metasploitable 2 |

All tools are documented with notes, usage examples, and methodology context — not just command references.

---

## Security Policy

This repository follows a strict authorized-use policy.

- All security testing documented here must be performed only against systems you own or have explicit written authorization to test.
- The bundled Android APKs are intentionally vulnerable practice applications for use in isolated lab environments only.
- If you find a content issue in this repository (a script that behaves unexpectedly, or sensitive information accidentally included), please report it privately — do not open a public issue.

Full policy: [SECURITY.md](./SECURITY.md)

---

## Contributing

Contributions are welcome. Accepted types include:

- New educational notes on any offensive security topic
- New labs or improvements to existing ones
- CTF writeups (TryHackMe, HackTheBox, or other platforms)
- Technical corrections to existing content
- Documentation improvements and additional references

**Important:** All contributed content must document techniques practiced only in authorized environments. Do not contribute content documenting attacks against real unauthorized systems.

The full contribution guide is in [CONTRIBUTING.md](./CONTRIBUTING.md) *(written in Arabic)*.

Key conventions:
- Follow the existing module numbering pattern: `XX. Module Name`
- Use descriptive, typo-free file names
- Use proper Markdown headings and code blocks
- Place screenshots in a `media/` subdirectory inside the relevant section
- Cite sources at the end of each file

---

## Roadmap

The current focus is **depth over breadth** — improving existing modules before adding new ones.

Near-term priorities:
- Improve content quality in thin modules (especially Module 06: Social Engineering)
- Replace placeholder files with complete educational content
- Standardize structure across all modules (README, Roadmap, Cheatsheet)
- Improve the learning progression clarity from ZERO to PROFESSIONAL
- Complete written content for Module 11 (Mobile — currently APKs only)

Module 11's full written curriculum is not yet defined. No new top-level modules are being added at this stage.

Full roadmap: [ROADMAP.md](./ROADMAP.md)

---

## Changelog

See [CHANGELOG.md](./CHANGELOG.md) for release history.

---

## License

This project is licensed under the [MIT License](./LICENSE).

---

## Author

**Fady Basem** — [@SilentN0va]

If you find this repository useful, consider starring it to help others discover it.

---

*This repository is for education only. The maintainer does not condone or support unauthorized access to any system.*

SilentN0va-Offensive-Security

File Explorer

# Use via CDN

Was this content helpful?

Recent Feedback

Download README