> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/readme.md).

# 进攻性网络安全笔记

用于渗透测试、Web 安全、Active Directory、提权、暴露服务、CMS 利用和 CTF 方法论的实用进攻性网络安全笔记。

<h2 align="center"><strong>进攻性网络安全笔记</strong></h2>

<p align="center"><em><mark style="color:$primary;">"要正确防御，先学习攻击者如何战斗。"</mark></em></p>

<p align="center"><a href="mailto:jordanmacia@protonmail.com" class="button secondary" data-icon="paper-plane">联系方式</a> <a href="https://www.linkedin.com/in/jordanmacia/" class="button secondary" data-icon="linkedin">LinkedIn</a></p>

<p align="center"><button type="button" class="button primary" data-action="ask" data-icon="sparkles">询问 AI 助手</button></p>

<p align="center"><i class="fa-language" style="color:$info;">:language:</i> <strong>用你的语言阅读</strong></p>

<p align="center"><a href="https://hacking-notes.jord4n.pro/" class="button secondary medium">🇺🇸 EN</a> <a href="https://hacking-notes.jord4n.pro/es/" class="button secondary medium">🇪🇸 ES</a> <a href="https://hacking-notes.jord4n.pro/fr/" class="button secondary medium">🇫🇷 FR</a> <a href="https://hacking-notes.jord4n.pro/pt-br/" class="button secondary medium">🇧🇷 PT-BR</a> <a href="https://hacking-notes.jord4n.pro/de/" class="button secondary medium">🇩🇪 DE</a> <a href="https://hacking-notes.jord4n.pro/zh/" class="button secondary medium">🇨🇳 中文</a> <a href="https://hacking-notes.jord4n.pro/ru/" class="button secondary medium">🇷🇺 RU</a> <a href="https://hacking-notes.jord4n.pro/ja/" class="button secondary medium">🇯🇵 JA</a></p>

<table data-card-size="large" data-view="cards" data-full-width="false" data-search="false"><thead><tr><th align="center"></th><th data-hidden></th><th data-hidden></th><th data-hidden data-card-target data-type="content-ref"></th><th data-hidden data-card-cover data-type="image">封面图片</th><th data-hidden data-type="image">封面图片（深色）</th><th data-hidden data-card-cover-dark data-type="image">封面图片（深色）</th></tr></thead><tbody><tr><td align="center"><h4><i class="fa-magnifying-glass" style="color:$primary;">:magnifying-glass:</i> <strong>侦察</strong></h4></td><td><i class="fa-magnifying-glass" style="color:$primary;">:magnifying-glass:</i></td><td>渗透测试侦察方法论，用于攻击面映射、子域枚举、Web 模糊测试、Nmap 扫描和技术指纹识别。</td><td><a href="/zh/reconnaissance.md">侦察</a></td><td></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-99e4eb288aa9974a3f40616ecb68ba4d711c8a43%2Fenumeration.jpg?alt=media">enumeration.jpg</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-shield" style="color:$primary;">:shield:</i> <strong>Web 安全 - PortSwigger</strong></h4></td><td><i class="fa-shield" style="color:$primary;">:shield:</i></td><td>PortSwigger Web 安全学院笔记，涵盖 Burp Suite 实验、Web 应用漏洞、利用流程、载荷验证和 BSCP 准备。</td><td><a href="/zh/web.md">Web 安全 - PortSwigger</a></td><td></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-903655b936f682f1e93e0c23678264d54b8265ff%2Fweb.jpg?alt=media">web.jpg</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-linux" style="color:$primary;">:linux:</i> <strong>Linux 权限提升</strong></h4></td><td><i class="fa-linux" style="color:$primary;">:linux:</i></td><td>Linux 权限提升笔记，涵盖 sudo 滥用、SUID 二进制文件、cron 任务、Linux 能力、PATH 劫持、内核漏洞利用、Docker 逃逸、共享库、文件权限和本地组滥用。</td><td><a href="/zh/privesc.md">Linux 权限提升</a></td><td></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-ea5d084f0649ed7daf3b5cd95128ee1efad87a5b%2Flinux.jpg?alt=media">linux.jpg</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-microsoft" style="color:$primary;">:microsoft:</i> <strong>Active Directory</strong></h4></td><td><i class="fa-microsoft" style="color:$primary;">:microsoft:</i></td><td>Active Directory 渗透测试方法论，用于域枚举、Kerberos 攻击、ACL 滥用、凭据提取、令牌滥用和横向移动。</td><td><a href="/zh/active-directory.md">Active Directory</a></td><td></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-40c357b76d482189adbaf46034e2e2c8bd11bb88%2Fwindows.jpg?alt=media">windows.jpg</a></td><td></td></tr><tr><td align="center"><h4><i class="fa-cube" style="color:$primary;">:cube:</i> <strong>Hack The Box</strong></h4></td><td><i class="fa-cube" style="color:$primary;">:cube:</i></td><td>按 Linux 和 Windows 难度整理的 HackTheBox 靶机复盘，涵盖枚举、初始立足点、权限提升、Active Directory、Web 利用和服务滥用。</td><td><a href="/zh/writeups-ctf/hackthebox.md">HackTheBox</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-network-wired" style="color:$primary;">:network-wired:</i> 端口和服务</h4></td><td><i class="fa-network-wired" style="color:$primary;">:network-wired:</i></td><td>用于渗透测试的端口和服务枚举笔记，包括 FTP、SSH、SMB、Kerberos、LDAP、SNMP、WinRM、RDP、数据库、C2 面板以及暴露的管理服务。</td><td><a href="/zh/ports-and-services.md">端口与服务</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-puzzle-piece" style="color:$primary;">:puzzle-piece:</i> <strong>CMS 利用</strong></h4></td><td><i class="fa-puzzle-piece" style="color:$primary;">:puzzle-piece:</i></td><td>CMS 利用方法论，适用于 WordPress、Drupal、Tomcat、phpMyAdmin、Jenkins、管理面板、文件上传 RCE、LFI 到 RCE、身份验证绕过、插件漏洞和暴露的 Web 应用。</td><td><a href="/zh/cms.md">CMS 利用</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-toolbox" style="color:$primary;">:toolbox:</i> 黑客 t<strong>具</strong></h4></td><td><i class="fa-toolbox" style="color:$primary;">:toolbox:</i></td><td>按类别整理的进攻性安全工具中央目录：Web 应用测试、发现与枚举、利用与研究、OSINT、凭据、Windows 工具和 Linux 工具。</td><td><a href="/zh/hacking-tools.md">黑客工具</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-wifi" style="color:$primary;">:wifi:</i> <strong>WiFi 攻击</strong></h4></td><td><i class="fa-wifi" style="color:$primary;">:wifi:</i></td><td>用于授权实验环境的 WiFi 安全笔记，包括无线基础、WPA/WPA2 PSK 评估、数据包分析、无线工具和防御性验证。</td><td><a href="/zh/hacking-wifi.md">黑客 WiFi</a></td><td></td><td></td><td></td></tr><tr><td align="center"><h4><i class="fa-bookmark" style="color:$primary;">:bookmark:</i> <strong>实用资源</strong></h4></td><td></td><td></td><td><a href="/zh/useful-resources.md">实用资源</a></td><td></td><td></td><td></td></tr></tbody></table>

<p align="center"><i class="fa-chart-line" style="color:$primary;">:chart-line:</i> <sub>统计： <strong>61,732</strong> 访客 · <strong>77,059</strong> 浏览量 · 更新于 2026年10月16日</sub></p>

<p align="center"><sub>© 2026 Jordan Macia · 保留所有权利</sub></p>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/readme.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.