infosectools 开源项目推荐（137 个）

Pennyw0rth /NetExec

网络执行工具

deepfence /SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Syslifters /sysreptor

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

deepfence /PacketStreamer

面向云原生环境的分布式 tcpdump

mufeedvh /moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

deepfence /FlowMeter

⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐

adityatelange /evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

t3l3machus /eviltree

A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.

edoardottt /lit-bb-hack-tools

小虫子赏金与黑客工具⚔️

souravbaghz /RadareEye

Tool for especially scanning nearby devices and execute a given command on its own system while the target device comes in range.

THORCollective /HEARTH

A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.

Galeax /CVE2CAPEC

从CVE列表生成MITRE AT&CK和D3FEND。包含CVE、CWE、CAPEC、MITRE ATT&CK D3FEND和ATLAS技术数据的数据库每日更新。在2025年BlackHat Europe Arsenal展会上亮相。

InfosecHouse /InfosecHouse

A curated catalog of tools and resources for offensive and defensive cyber security operations, organized by discipline and kept current by the community.

trickest /mksub

Generate tens of thousands of subdomain combinations in a matter of seconds

Idov31 /MrKaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

blackhatethicalhacking /Nucleimonst3r

Nucleimonst3r is a powerful vulnerability scanner that can help Bug Bounty Hunters find low hanging fruit vulnerabilities for known CVEs and exploits but also gather all the technology running behind them for further investigation for a potential target.

trickest /dsieve

Filter and enrich a list of subdomains by level

OSINT-TECHNOLOGIES /dpulse

DPULSE - Tool for complex approach to domain OSINT

Alaa-abdulridha /CloudSniffer

CloudSniffer is a powerful tool designed to aid in the discovery of the real IP address of a website protected by Cloudflare. It leverages brute force techniques by testing a list of IP addresses and analyzing the status codes returned by the server to uncover the actual IP address of the target website.

knight0x07 /pyc2bytecode

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)