当前位置：网站快照劫持代码-快照删除-黑帽SEO > 参考文摘 > 正文

Github红队测试工具收集

2023-09-06 分类：参考文摘阅读(114) 评论(0)

此帖收集在Github共享的HW常用的红队工具，以开源工具为主
回复需含Github地址，请勿回复无关信息
希望大家踊跃共享，且必须是好用、保持更新的工具
通用工具
工具类型工具地址更新时间
内网扫描 https://github.com/shadow1ng/fscan 2022-07-06
哥斯拉Webshell管理 https://github.com/BeichenDream/Godzilla 2021-11-01
ARL 资产侦察灯塔 https://github.com/TophantTechnology/ARL 2022-08-25
aliyun-accesskey-Tools https://github.com/mrknow001/aliyun-accesskey-Tools 2021-09-28
PEASS-ng 提权套装 https://github.com/carlospolop/PEASS-ng 2022-09-11
nuclei 漏洞扫描器 https://github.com/projectdiscovery/nuclei 2022-08-26
railgun 渗透集成化工具 https://github.com/lz520520/railgun 2022-08-22
YAKIT 网络安全单兵工具 https://github.com/yaklang/yakit 2022-09-16
EHole（棱洞）3.0 指纹探测工具 https://github.com/EdgeSecurityTeam/EHole 2021-06-23
Traitor 提权工具 https://github.com/liamg/traitor 2022-03-09
Stowaway 内网穿透 https://github.com/ph4ntonn/Stowaway 2022-04-08
CF 云环境利用框架 https://github.com/teamssix/cf 2022-09-07
Naabu 端口扫描 https://github.com/projectdiscovery/naabu 2022-07-31
HackBrowserData https://github.com/moonD4rk/HackBrowserData 2022-08-16
Malleable C2 Profiles https://github.com/xx0hcd/Malleable-C2-Profiles 2022-09-10
shuize（水泽）信息收集 https://github.com/0x727/ShuiZe_0x727 2021-08-03
Cloud-Bucket-Leak-Detection-Tools https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools 2022-07-16
SharpHostInfo 内网主机探测 https://github.com/shmilylty/SharpHostInfo 2022-09-09
pocsuite3 https://github.com/knownsec/pocsuite3 2022-09-08
URLFinder https://github.com/pingc0y/URLFinder 2022-09-16
ALLiN 扫描工具 https://github.com/P1-Team/AlliN 2022-07-26
ihoneyBakFileScan 备份文件泄露扫描 https://github.com/VMsec/ihoneyBakFileScan_Modify 2022-09-15
spark（火花）自动字典生成器 https://github.com/G0mini/spark 2022-09-13
Exphub 漏洞利用脚本 https://github.com/zhzyker/exphub 2021-04-04
EasyPen 综合利用工具 https://github.com/lijiejie/EasyPen 2022-09-16
Dog Tunnel(狗洞)端口映射工具 https://github.com/vzex/dog-tunnel 2020-05-22
frp 端口映射工具 https://github.com/fatedier/frp 2022-07-11
MYExploit 综合利用工具 https://github.com/achuna33/MYExploit 2022-09-20
dirsearch 目录扫描工具 https://github.com/maurosoria/dirsearch 2022-10-05
OneForAll 子域收集工具 https://github.com/shmilylty/OneForAll 2022-07-10
Cloud-Bucket-Leak-Detection-Tools 云储存利用工具 https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools 2022-07-16
ObserverWard 指纹识别工具 https://github.com/0x727/ObserverWard 2022-09-27
AtlasC2 C2框架Atlas https://github.com/Gr1mmie/AtlasC2 2022-04-05
Goblin 钓鱼演练工具 https://github.com/xiecat/goblin 2022-07-13
AsamF 资产收集工具 https://github.com/Kento-Sec/AsamF 2022-09-22
Httpx IP、Url批量存活探测 https://github.com/projectdiscovery/httpx 2022-08-01
Ghidra 软件逆向工程框架 https://github.com/NationalSecurityAgency/ghidra 2022-07-27
crack 弱口令爆破工具 https://github.com/niudaii/crack 2022-09-06
Empire 后开发框架 https://github.com/BC-SECURITY/Empire 2022-08-31
ksubdomain 子域名爆破工具 https://github.com/knownsec/ksubdomain 2021-01-12
scan4all 综合扫描 https://github.com/hktalent/scan4all 2022-10-15
Kscan 资产测绘工具 https://github.com/lcvvvv/kscan 2022-05-19
RedGuard C2流量前置工具 https://github.com/wikiZ/RedGuard 2022-08-04
VScan 漏洞扫描工具 https://github.com/veo/vscan 2022-06-23
pydictor 字典建立工具 https://github.com/LandGrey/pydictor 2017-12-20
AutoPWN Suite 漏扫利用工具 https://github.com/GamehunterKaan/AutoPWN-Suite 2022-09-09
CloudFlair 找CF真实IP工具 https://github.com/christophetd/CloudFlair 2021-12-08
feroxbuster 目录扫描工具 https://github.com/epi052/feroxbuster 2022-05-22
POC-bomber 漏洞检测/利用工具 https://github.com/tr0uble-mAker/POC-bomber 2022-09-13
iox 端口转发工具 https://github.com/EddieIvan01/iox 2020-09-22
f8x 一键环境搭建 https://github.com/ffffffff0x/f8x 2020-09-04
URL 搜集工具 https://github.com/lc/gau 2022-07-24
子域名发现工具 https://github.com/projectdiscovery/subfinder 2022-10-17
pocassist POC框架 https://github.com/jweny/pocassist 2021-08-11
Gobuster 目录文件、DNS和VHost爆破工具 https://github.com/OJ/gobuster 2022-10-29
Vulmap web漏洞扫描和验证工具 https://github.com/zhzyker/vulmap 2021-09-01
ESP32 Wi-Fi攻击工具 https://github.com/risinek/esp32-wifi-penetration-tool 2021-05-05
牛屎花 C2远控 https://github.com/YDHCUI/manjusaka 2022-10-10
Amass 资产发现、子域名扫描工具 https://github.com/OWASP/Amass 2022-09-23
GitHack Git泄露利用工具 https://github.com/lijiejie/GitHack 2022-05-09
subDomainsBrute 子域名爆破工具 https://github.com/lijiejie/subDomainsBrute 2022-06-05
JNDI-Inject-Exploit 反序列化测试工具 https://github.com/exp1orer/JNDI-Inject-Exploit 2021-12-29
LadonGo 内网渗透扫描器框架 https://github.com/k8gege/LadonGo 2022-07-28
Dismap 资产发现及指纹识别 https://github.com/zhzyker/dismap 2022-06-16
afrog 漏洞扫描工具 https://github.com/zan8in/afrog 2022-10-18
TruffleHog 敏感信息搜集工具 https://github.com/trufflesecurity/trufflehog 2022-11-09
Komo 综合资产收集和漏洞扫描工具 https://github.com/komomon/Komo 2022-10-24
xray 被动扫描安全评估工具 https://github.com/chaitin/xray 2022-10-14
AppInfoScanner 移动端信息收集扫描工具 https://github.com/kelvinBen/AppInfoScanner 2022-10-23
Linux提权exp https://github.com/Al1ex/LinuxEelvation 2022-07-29
Packer Fuzzer Webpack网站扫描工具 https://github.com/rtcatc/Packer-Fuzzer 2022-06-19
Polaris 信息搜集与漏洞利用框架 https://github.com/doimet/Polaris 2022-10-07
geacon_pro 免杀工具 https://github.com/H4de5-7/geacon_pro 2022-11-10
spp 隧道代理工具 https://github.com/esrrhs/spp 2021-09-28
Payer 子域名挖掘机 https://github.com/Pik-sec/Payer 2022-10-15
MobSF 移动安全测试框架 https://github.com/MobSF/Mobile-Security-Framework-MobSF 2022-10-04
ByPassGodzilla/哥斯拉免杀生成 https://github.com/Tas9er/ByPassGodzilla 2022-11-01
katana 下一代爬虫框架 https://github.com/projectdiscovery/katana 2023-01-13
SourceDetector 自动发现.map文件 https://github.com/SunHuawei/SourceDetector 2021-07-02
windows提权漏洞检测 https://github.com/bitsadmin/wesng 2023-01-11
API未授权扫描插件 https://github.com/API-Security/APIKit 2023-01-16
Dirmap web目录扫描工具 https://github.com/H4ckForJob/dirmap 2022-06-01
vshell c2主机群管理工具 https://github.com/veo/vshell 2022-12-24
Yasso 内网渗透辅助工具集 https://github.com/sairson/Yasso 2022-06-29
JSFinder 信息收集接口 https://github.com/Threezh1/JSFinder 2022-12-11
Perun 综合扫描器 https://github.com/WyAtu/Perun 2019-04-25
AntSword 加载器 https://github.com/AntSwordProject/AntSword-Loader 2019-04-24
AntSword https://github.com/AntSwordProject/antSword 2022-07-17
Goby 漏洞扫描 https://github.com/gobysec/Goby 2023-01-17
goby exp库 https://github.com/k3vi-07/goby-exp 2021-08-26
reNgine 自动侦察框架 https://github.com/yogeshojha/rengine 2022-12-30
SatanSword 红队综合渗透框架 https://github.com/Lucifer1993/SatanSword 2022-04-02
Dirscan 目录扫描 https://github.com/corunb/Dirscan 2022-11-14
LSTAR CobaltStrike综合后渗透插件 https://github.com/lintstar/LSTAR 2022-06-15
Platypus 交互式反向 Shell 管理器 https://github.com/WangYihang/Platypus 2021-07-17
Phoenix 新一代目录扫描神器 https://github.com/Pik-sec/Phoenix 2022-10-15
RouteVulScan 递归式被动检测脆弱路径的bp插件 https://github.com/F6JO/RouteVulScan 2023-01-08
MDUT 数据库跨平台利用工具 https://github.com/SafeGroceryStore/MDUT 2022-06-22
LaZagne 密码凭证收集工具 https://github.com/AlessandroZ/LaZagne 2019-09-16
Erfrp frp二开-免杀与隐藏 https://github.com/Goqi/Erfrp 2022-11-18
EventCleaner 日志清理 https://github.com/QAX-A-Team/EventCleaner 2018-09-07
UACMe Windows bypassUAC https://github.com/hfiref0x/UACME 2022-07-17
SCAMagicScan POC漏洞扫描工具 https://github.com/SCAMagic/SCAMagicScan 2023-01-18
ENScan Go 企业信息搜集工具 https://github.com/wgpsec/ENScan_GO 2022-12-02
ThunderSearch 闪电搜索器 https://github.com/xzajyjs/ThunderSearch 2022-11-08
EmailAll 邮箱收集工具 https://github.com/Taonn/EmailAll 2022-02-24
finger 资产识别工具 https://github.com/EASY233/Finger 2022-09-19
apk扫描器 https://github.com/dwisiswant0/apkleaks 2021-08-11
Neo-reGeorg 代理工具 https://github.com/L-codes/Neo-reGeorg 2022-12-25
blasting 图形化后台爆破工具 https://github.com/gubeihc/blasting 2023-01-02
HaE 敏感信息收集 burp插件 https://github.com/gh0stkey/HaE 2022-12-18
powershell免杀混淆 https://github.com/H4de5-7/powershell-obfuscation 2023-01-17
Bundler-bypass 免杀捆绑器 https://github.com/H4de5-7/Bundler-bypass 2022-11-08
java图形化漏洞利用工具集 https://github.com/savior-only/javafx_tools 2022-08-05
Passive Scan Client – Burp被动扫描流量转发插件 https://github.com/c0ny1/passive-scan-client 2023-02-03
ffuf – Fuzz Faster U Fool https://github.com/ffuf/ffuf 2023-02-06
JDumpSpider – HeapDump敏感信息提取工具 https://github.com/whwlsfb/JDumpSpider 2023-04-06
rapiddns https://github.com/able403/rapiddns 2023-02-24
CDK – Zero Dependency Docker/K8s Penetration Toolkit https://github.com/cdk-team/CDK 2023-03-13
Mythic https://github.com/its-a-feature/Mythic 2023-05-10
windows-kernel-exploits -Windows提权 https://github.com/SecWiki/windows-kernel-exploits 2021-06-12
IPSearch – 离线IP Whois查询工具 https://github.com/SleepingBag945/IPSearch 2022-12-29
LOLBAS – Living Off The Land Binaries and Scripts https://github.com/LOLBAS-Project/LOLBAS 2023-07-18
GTFOBins – 提权命令辅助 https://github.com/GTFOBins/GTFOBins.github.io 2023-04-20
jsleak https://github.com/channyein1337/jsleak 2023-04-10
veinmind-tools – 容器安全工具集 https://github.com/chaitin/veinmind-tools 2023-07-04
BypassAntiVirus https://github.com/TideSec/BypassAntiVirus 2022-04-23
adduserbysamr-bof CS插件 https://github.com/AgeloVito/adduserbysamr-bof 2022-11-30
Supershell – C2远控平台 https://github.com/tdragon6/Supershell 2023-03-29
ExchangeOWA – OutLook信息收集工具 https://github.com/KrystianLi/ExchangeOWA 2023-05-23
gogo – 自动化扫描器 https://github.com/chainreactors/gogo 2023-07-08
HTTPServer – 内网工具 https://github.com/Axx8/HTTPServer 2023-03-19
Kunyu(坤舆) – 更高效的企业资产收集 https://github.com/knownsec/Kunyu 2022-04-21
Behinder – 冰蝎网站管理客户端 https://github.com/rebeyond/Behinder 2022-11-29
Gitleaks https://github.com/gitleaks/gitleaks 2023-06-15
Mischief-DLL-Stager https://github.com/MitchHS/Mischief-DLL-Stager 2023-04-19
GC2 – 谷歌sheet充当C2 https://github.com/looCiprian/GC2-sheet 2023-07-07
noterce https://github.com/xiao-zhu-zhu/noterce 2023-05-10
Super Xray – XRAY的GUI启动器 https://github.com/4ra1n/super-xray 2023-05-19
Firefly – Web黑盒测试工具 https://github.com/Brum3ns/firefly 2023-02-20
Fuso扶桑 – 端口转发工具 https://github.com/editso/fuso 2022-08-20
Fofa Viewer – FOFA 客户端 https://github.com/wgpsec/fofa_viewer 2023-08-27
AScan – 爱企查 https://github.com/i11us0ry/AScan 2023-04-02
ENScan Go – 企业信息查询 https://github.com/wgpsec/ENScan_GO 2023-07-09
Suo5 – HTTP代理隧道工具 https://github.com/zema1/suo5 2023-06-29
Hikvision – 海康威视后渗透利用工具 https://github.com/wafinfo/Hikvision 2023-06-29
RedTeam-Tools https://github.com/A-poc/RedTeam-Tools 2023-07-06
API越权漏洞检测工具 https://github.com/y1nglamore/IDOR_detect_tool 2023-06-27
cdnChecker – cdn检测工具 https://github.com/alwaystest18/cdnChecker 2023-07-03
hostCollision – host碰撞工具 https://github.com/alwaystest18/hostCollision 2023-06-04
漏洞利用
漏洞产品工具地址更新时间
SpringBootExploit https://github.com/0x727/SpringBootExploit 2022-04-17
Springboot漏洞全家桶 https://github.com/woodpecker-appstore/springboot-vuldb 2021-05-24
SpringBoot-Scan-GUI https://github.com/13exp/SpringBoot-Scan-GUI 2023-02-15
Log4j2Scan https://github.com/whwlsfb/Log4j2Scan 2022-09-02
ShiroExploit https://github.com/feihong-cs/ShiroExploit-Deprecated 2020-10-04
ShiroAttack2 https://github.com/SummerSec/ShiroAttack2 2022-08-31
thinkphp_gui_tools https://github.com/bewhale/thinkphp_gui_tools 2022-08-18
Fastjson-Patrol https://github.com/ce-automne/FastjsonPatrol 2022-04-01
Vmware虚拟化漏洞利用（HCX/vCenter/NSX/Horizon/vRealize） https://github.com/NS-Sp4ce/Vm4J 2022-01-07
Struts2-Scan 漏洞检测 https://github.com/HatBoy/Struts2-Scan 2020-12-23
Fastjson 扫描器 https://github.com/a1phaboy/FastjsonScan 2022-09-20
致远OA综合利用工具 https://github.com/Summer177/seeyon_exp 2021-01-03
泛微OA综合利用脚本 https://github.com/z1un/weaver_exp 2021-06-29
Spring Core RCE https://github.com/mcdulltii/SpringShell_0-day 2022-03-30
OA – EXPTOOL 漏洞利用框架 https://github.com/LittleBear4/OA-EXPTOOL 2023-04-23
用友畅捷通17.0CNVD-2022-60632 https://github.com/LittleBear4/-17.0CNVD-2022-60632 2022-09-28
WeblogicTool https://github.com/KimJun1010/WeblogicTool 2023-07-06
Penetration_Testing_POC https://github.com/Mr-xn/Penetration_Testing_POC 2023-07-15
0day – EXP、POC https://github.com/helloexp/0day 2023-07-18
通达OA综合利用工具 https://github.com/xinyu2428/TDOA_RCE 2021-03-17
shiro反序列化漏洞综合利用 v2.2 https://github.com/j1anFen/shiro_attack 2021-06-22
TPscan https://github.com/Lucifer1993/TPscan 2022-09-28
资产侦察灯塔 https://github.com/TophantTechnology/ARL
漏洞扫描器nuclei https://github.com/projectdiscovery/nuclei
红队内网环境中一个能快速开启HTTP文件浏览服务的小工具 ,可执行Webshell，可用于在内网不出网时文件的下载，启动时会根据网卡IPV4地址输出URL(本地回环除外)。 https://github.com/Axx8/HTTPServer
支持最近的CVE-2023-21839漏洞:https://github.com/KimJun1010/WeblogicTool
指纹识别 https://github.com/EdgeSecurityTeam/EHole
不得加上各种shiro利用工具
https://github.com/feihong-cs/ShiroExploit-Deprecated
https://github.com/SummerSec/ShiroAttack2
https://github.com/mrknow001/aliyun-accesskey-Tools aliyun-accesskey-Tools
https://github.com/carlospolop/PEASS-ng PEASS
thinkphp綜合利用https://github.com/bewhale/thinkphp_gui_tools
Fastjson被动插件 https://github.com/ce-automne/FastjsonPatrol
一个提权工具：https://github.com/liamg/traitor
包括资产收集、指纹识别等全面的小工具，Allin一把梭 https://github.com/P1-Team/AlliN
定向多功能字典生成器：https://github.com/G0mini/spark
漏洞利用脚本：https://github.com/zhzyker/exphub
lijiejie的综合利用：https://github.com/lijiejie/EasyPen
内网代理工具，狗洞https://github.com/vzex/dog-tunnel/
综合OA利用工具MYExploithttps://github.com/achuna33/MYExploit
指纹识别，我特别推荐0x727开源的ObserverWard+FingerprintHub，一是开源，二是指纹信息更新快，三是小巧好用，我在项目里一直都在使用，下面是地址：
https://github.com/0x727/ObserverWard
https://github.com/0x727/FingerprintHub
钓鱼https://github.com/xiecat/goblin
域渗透扫描 https://github.com/ddostest123/mscan
资产信息收集 https://github.com/Kento-Sec/AsamF
Httpx IP、Url批量存活探测：https://github.com/projectdiscovery/httpx
弱口令爆破 https://github.com/niudaii/crack
子域名爆破 https://github.com/knownsec/ksubdomain
内网资产搜集另外一款 https://github.com/lcvvvv/kscan
https://github.com/hktalent/scan4all全自动化扫描
Vulnerabilities Scan – 漏洞扫描、应用密码爆破、Web指纹、协议及端口扫描工具
—————————————————————————————————————-
15000+PoC漏洞扫描；20种应用密码爆破；7000+Web指纹；146种协议90000+规则Port扫描；Fuzz、HW打点、BugBounty神器…
支持146种协议90000+规则port扫描
支持 7000+ web 指纹扫描、识别
快速HTTP敏感文件检测，可以自定义字典
登陆页面检测
支持多种类型的输入 – STDIN/HOST/IP/CIDR/URL/TXT
支持多种输出类型 – JSON/TXT/CSV/STDOUT
高度可集成：可配置将结果统一存储到 Elasticsearch【强烈推荐】
智能SSL分析
自动识别域（DNS）关联多个IP的情况，并自动扫描关联的多个IP
智能处理
自动化供应链识别、分析和扫描
联动 python3 log4j-scan
智能识别蜜罐，并跳过目标，默认该功能是关闭的，可设置EnableHoneyportDetection=true开启
高度可定制：允许通过config/config.json配置定义自己的字典，或者控制更多细节，包含不限于:nuclei、httpx、naabu等
支持HTTP请求走私漏洞检测: CL-TE、TE-CL、TE-TE
支持通过参数 Cookie=’PHPSession=xxxx’ ./scan4all -host xxxx.com, 兼容 nuclei、httpx、go-poc、x-ray POC、filefuzz、http Smuggling等
Github: https://github.com/hktalent/scan4al
—————————————————————————————————————-
VScan 漏扫工具VScan – 开源、轻量、快速、跨平台的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)
l
Github: https://github.com/veo/vscan
pydictor 一个强大实用的黑客暴力破解字典建立工具ayhub: https://github.com/LandGrey/pydictor
——————————————————————————————————————————————————–
CloudFlair 用来自 Censys 的全网扫描数据查找 CloudFlare 背后网站的源服务器。
1.CloudFlair 是一种工具，用于查找受 CloudFlare 保护的网站的源服务器，这些网站公开暴露并且不按应有的方式限制对 CloudFlare IP 范围的网络访问。
2.该工具使用来自Censys的互联网扫描数据来查找暴露的 IPv4 主机，这些主机提供与目标域名相关的 SSL 证书。API 密钥是必需的，可以从您的Censys 帐户中检索。
3.有关此常见错误配置以及 CloudFlair 工作原理的更多详细信息，请参阅https://blog.christophetd.fr/bypassing-cloudflare-using-internet-wide-scan-data/上的配套博客文章。
GayHub: https://github.com/christophetd/CloudFlair
——————————————————————————————————————————————————-
https://github.com/epi052/feroxbuster 目录扫描工具，界面比dirsearch直观一点
https://github.com/tr0uble-mAker/POC-bomber POC bomber 是一款漏洞检测/利用工具，旨在利用大量高危害漏洞的POC/EXP快速获取目标服务器权限
https://github.com/EddieIvan01/iox 端口转发多层内网的时候我感觉这个挺好用的
https://github.com/ffffffff0x/f8x
一键搭建环境，老方便了
牛屎花一款C2远控 https://github.com/YDHCUI/manjusaka
后期权限维持
https://github.com/OWASP/Amass 资产发现、子域名扫描

版权声明：本文采用知识共享署名4.0国际许可协议 [BY-NC-SA] 进行授权
文章名称：《Github红队测试工具收集》
文章链接：https://www.lolmm.cn/stwd/1248.html
本站资源仅供个人学习交流，请于下载后24小时内删除，不允许用于商业用途，否则法律问题自行承担。

相关推荐

评论抢沙发

评论前必须登录！

立即登录注册