What is this?
A free, open-source series of penetration-testing lessons written by veteran Chinese pentester Micropoor and published as a GitBook. It covers code audit, web, intranet and domain penetration, tunneling, and log-based tracing.
A free, open-source series of penetration-testing lessons written by veteran Chinese pentester Micropoor and published as a GitBook. It covers code audit, web, intranet and domain penetration, tunneling, and log-based tracing.Is this something I install and run, or just read?Just read: it is a series of written lessons and working notes, not software. There is nothing to install or run; the table of contents lives in the repository's Wiki.
Just read: it is a series of written lessons and working notes, not software. There is nothing to install or run; the table of contents lives in the repository's Wiki.If I am new to security, where should I start with the series?Open the repo's Wiki for the full lesson list and read in order — every lesson starts from the basics, including tool introductions and usage, deliberately so a newcomer can learn from scratch and avoid detours.
Open the repo's Wiki for the full lesson list and read in order — every lesson starts from the basics, including tool introductions and usage, deliberately so a newcomer can learn from scratch and avoid detours.Is the series still being updated?No. The author announced on March 7, 2019 that the series stopped updating, so treat it as a frozen archive — some tools and techniques are dated by now.
No. The author announced on March 7, 2019 that the series stopped updating, so treat it as a frozen archive — some tools and techniques are dated by now.Do I need to already be a pentester to follow it?No. It targets junior-to-intermediate security practitioners: vendor-side pentesters, in-house teams doing security self-checks, and network-security hobbyists.
No. It targets junior-to-intermediate security practitioners: vendor-side pentesters, in-house teams doing security self-checks, and network-security hobbyists.Can I read it in English, or is it Chinese-only?The lessons are written in Chinese. The README header points to an English version under 'Other languages', so non-Chinese readers should look for that translation link at the top.
The lessons are written in Chinese. The README header points to an English version under 'Other languages', so non-Chinese readers should look for that translation link at the top.Why do some screenshots in the lessons look censored?Because the material describes sensitive attack techniques, the author says many screenshots had to be masked with mosaics or replaced with local demo setups instead of real targets.
Because the material describes sensitive attack techniques, the author says many screenshots had to be masked with mosaics or replaced with local demo setups instead of real targets.What is the core principle the author wants readers to take away?That the essence of intranet penetration is information gathering — a lesson a senior colleague once passed to him, and one he now deliberately passes on to his readers.
That the essence of intranet penetration is information gathering — a lesson a senior colleague once passed to him, and one he now deliberately passes on to his readers.What are similar projects?hacker-roadmap, Claude-Red, ARTEX, PayloadsAllTheThings, bug-bounty-hunting-prompts, evilginx2, xray, PowerSploit
hacker-roadmap, Claude-Red, ARTEX, PayloadsAllTheThings, bug-bounty-hunting-prompts, evilginx2, xray, PowerSploitWhich topics is it in?exploitation, information-gathering, redteam, pentest, forensics, web-security, tunnel, network-security, offensive-security, red-team, penetration-testing, hacking
exploitation, information-gathering, redteam, pentest, forensics, web-security, tunnel, network-security, offensive-security, red-team, penetration-testing, hacking