red-teaming-tools 开源项目推荐（75 个）

microsoft /PyRIT

微软开源 AI 红队测试工具包。通过自动扫描、自适应多轮攻击和 Web UI 测试生成式 AI 系统。

thomasxm /BOAZ_beta

Multilayered AV/EDR Evasion Framework (no longer actively maintained)

hueristiq /xurlfind3r

A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

machine1337 /TelegramRAT

Cross Platform Telegram based RAT that communicates via telegram to evade network restrictions

Leo4j /Amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

Ixve /Red-Team-Tools

Repo containing cracked red teaming tools.

hueristiq /xcrawl3r

A command-line tool for recursively spidering webpages for URLs. It works by actively traversing websites, following links embedded in webpages, and parsing files (including sitemaps & robots.txt), to uncover every URL.

ELMERIKH /TelecordC2

Advanced Telegram x Discord C2, great for data Exfitration and Network evasion 🔷

n3rada /MSSQLand

In-target C# post-exploitation and exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login impersonation at every hop.

peluche /deck-of-many-prompts

Manual Prompt Injection / Red Teaming Tool

tahaafarooq /Fenrir

A golang-written credential harvesting framework leveraging eBPF for kernel-level monitoring with anti-detection capabilities.

votal-ai-hq /ai-red-teaming

Whitebox & Blackbox AI red-teaming framework for LLMs & Agentic AI apps. It analyzes your app's source code to discover tools, roles, and guardrails, then generates new attacks chains across several categories and adapts over multiple multi turn rounds to find vulnerabilities

kamalx06 /TornadoRevC2

Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go beacon with ECDSA-signed tasks and compile-time OPSEC profiles. One operator console, shared TLS, per-session logs.

Leo4j /Sh3ller

Sh3ller is a lightweight C2 framework in its simplest form.

talha-nazeef-ahmed /ALPC-Enumerator

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

shaheeryasirofficial /ClickMyPayload

ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load

Da7rkx0 /PDF-EXPLOIT--Non-Silent

Pdf-exploit builder Non-Silent on C#

nettitude /DPAPIsnoop

Extract DPAPI CREDHIST and Masterkey hashes

zakky8 /llm-jailbreak-taxonomy

Mechanism-grounded taxonomy of 40 LLM jailbreak patterns across 10 categories. 8,000-trial bootstrap evaluation for the June 2026 frontier (Claude Opus 4-8, GPT-5.5, Gemini 3.5, DeepSeek V4). Every citation direct-WebFetch verified; refuted claims documented.

edoardottt /RFDos-Scanner

Response Filter Denial of Service (RFDoS) Experimental Scanner