Skip to content
BranchesTags
 
 

Latest commit

 

History

2,176 Commits

Folders and files

NameName
Last commit message
Last commit date
assets
assets
 
 
cobalt
cobalt
 
 
forensics
forensics
 
 
identify_hash_and_crack_it
identify_hash_and_crack_it
 
 
privilege_escalation_-_linux
privilege_escalation_-_linux
 
 
privilege_escalation_windows
privilege_escalation_windows
 
 
styles
styles
 
 
tcp-dumps_on_pwnd_machines
tcp-dumps_on_pwnd_machines
 
 
.gitignore
.gitignore
 
 
README.md
README.md
 
 
SUMMARY.md
SUMMARY.md
 
 
active_information_gathering.md
active_information_gathering.md
 
 
arp-spoofing.md
arp-spoofing.md
 
 
attacking_the_user.md
attacking_the_user.md
 
 
automated_vulnerability_scanners.md
automated_vulnerability_scanners.md
 
 
bash-scripting.md
bash-scripting.md
 
 
basics.md
basics.md
 
 
basics_of_linux.md
basics_of_linux.md
 
 
basics_of_windows.md
basics_of_windows.md
 
 
binary_exploitation.md
binary_exploitation.md
 
 
binary_exploitation2.md
binary_exploitation2.md
 
 
bloodhound.md
bloodhound.md
 
 
broken_authentication_or_session_management.md
broken_authentication_or_session_management.md
 
 
browser_vulnerabilities.md
browser_vulnerabilities.md
 
 
buffer-overflow-shell.md
buffer-overflow-shell.md
 
 
buffer_overflow_bof.md
buffer_overflow_bof.md
 
 
bypass_image_upload.md
bypass_image_upload.md
 
 
bypassing_antivirus.md
bypassing_antivirus.md
 
 
cheat-sheets.md
cheat-sheets.md
 
 
clean_up.md
clean_up.md
 
 
cleartext-passwords.md
cleartext-passwords.md
 
 
clickjacking.md
clickjacking.md
 
 
cmd.md
cmd.md
 
 
cobalt.md
cobalt.md
 
 
command-injection.md
command-injection.md
 
 
commands.md
commands.md
 
 
common_web-services.md
common_web-services.md
 
 
compiling-windows-exploits.md
compiling-windows-exploits.md
 
 
connections.md
connections.md
 
 
cookie.md
cookie.md
 
 
create_shellcode.md
create_shellcode.md
 
 
creating_malicious_files.md
creating_malicious_files.md
 
 
cross-site-scripting.md
cross-site-scripting.md
 
 
cross_site_request_forgery.md
cross_site_request_forgery.md
 
 
dGaQO6Y.png
dGaQO6Y.png
 
 
database.md
database.md
 
 
default_layout_apache_on_different_versiont.md
default_layout_apache_on_different_versiont.md
 
 
dictionary_attacks.md
dictionary_attacks.md
 
 
directory-traversal-attack.md
directory-traversal-attack.md
 
 
dirty-cow.md
dirty-cow.md
 
 
dns-spoofing.md
dns-spoofing.md
 
 
dns_basics.md
dns_basics.md
 
 
dns_zone_transfer_attack.md
dns_zone_transfer_attack.md
 
 
dom-based-xss.md
dom-based-xss.md
 
 
editing-exploits.md
editing-exploits.md
 
 
email_harvesting.md
email_harvesting.md
 
 
escaping_restricted_shell.md
escaping_restricted_shell.md
 
 
evading-waf.md
evading-waf.md
 
 
example_of_company_architecture.md
example_of_company_architecture.md
 
 
examplesXSS.md
examplesXSS.md
 
 
execute-c.md
execute-c.md
 
 
exploit-examples_2.md
exploit-examples_2.md
 
 
exploit_examples_and_tutorials.md
exploit_examples_and_tutorials.md
 
 
exploiting.md
exploiting.md
 
 
exploits.md
exploits.md
 
 
exposed_version_control.md
exposed_version_control.md
 
 
failure-to-restrict-url-access.md
failure-to-restrict-url-access.md
 
 
find_subdomains.md
find_subdomains.md
 
 
finding_subdomains.md
finding_subdomains.md
 
 
firewalls.md
firewalls.md
 
 
forensics.md
forensics.md
 
 
fss.jpg
fss.jpg
 
 
ftp-fun.md
ftp-fun.md
 
 
function1-stackframe.png
function1-stackframe.png
 
 
function1.png
function1.png
 
 
fuzzer.md
fuzzer.md
 
 
general_tips.md
general_tips.md
 
 
generate_custom_wordlist.md
generate_custom_wordlist.md
 
 
getting_meterpreter_shell.md
getting_meterpreter_shell.md
 
 
git.md
git.md
 
 
google_hacking.md
google_hacking.md
 
 
hashcat.md
hashcat.md
 
 
html-injection.md
html-injection.md
 
 
identify-ip-addresses-and-subdomains.md
identify-ip-addresses-and-subdomains.md
 
 
identify_hash_and_crack_it.md
identify_hash_and_crack_it.md
 
 
identifying-technology-stack.md
identifying-technology-stack.md
 
 
immunity_debugger.md
immunity_debugger.md
 
 
insecure-direct-object-reference-idor.md
insecure-direct-object-reference-idor.md
 
 
java_applet.md
java_applet.md
 
 
lead_to_compromise.md
lead_to_compromise.md
 
 
linux.md
linux.md
 
 
list_of_common_ports.md
list_of_common_ports.md
 
 
littearature.md
littearature.md
 
 
local_file_inclusion.md
local_file_inclusion.md
 
 
log-poisoning.md
log-poisoning.md
 
 
loot.md
loot.md
 
 
loot_windows_-_for_credentials_and_other_stuff.md
loot_windows_-_for_credentials_and_other_stuff.md
 
 
main-stackframe.png
main-stackframe.png
 
 
man-pages.md
man-pages.md
 
 
metasploit.md
metasploit.md
 
 

Repository files navigation

CTF Notes

This book is a collection of notes that I have picked up doing numerous CTFs. Its also a refence for general IT Security.

This is heavily inspired by xapax and you can read his book on https://xapax.gitbooks.io/security/content/.

I've forked his book and made updates from CTF challenges and articles I've come across. I add items as I come across them so they may not be accurate and the shorthand may not make sense. Also the order and placement of topics may seem random. I make no claim that there is a method to my madness. All code additions have not been tested so use at your own risk. I attempt to the best of my ability to add sources for information I come across, if you spot content and I have not added it to the references section please let me know.

About

Notes and Commands for CTFs

d00mfist1.gitbooks.io/ctf/content/

Resources

Readme

Code of conduct

Code of conduct

Security policy

Security policy
Activity

Stars

1 star

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages