2018黑帽大会工具清单-Blackhat

╰半橙微兮° 2022-05-16 03:52 146阅读 0赞

# #

1、Android，iOS和移动黑客  
  
易受攻击的iOS应用程序：Swift版  
[https://github.com/prateek147/DVIA-v2][https_github.com_prateek147_DVIA-v2]  
  
  
2、代码评估  
  
OWASP依赖性检查  
[https://github.com/jeremylong/DependencyCheck][https_github.com_jeremylong_DependencyCheck]  
  
  
美洲狮扫描  
[https://github.com/pumasecurity/puma-scan][https_github.com_pumasecurity_puma-scan]  
  
  
3、加密  
  
DeepViolet：SSL / TLS扫描API和工具  
[https://github.com/spoofzu/DeepViolet][https_github.com_spoofzu_DeepViolet]  
  
4、数据取证和事件响应  
  
初学者到专家  
[https://github.com/bro/bro][https_github.com_bro_bro]  
  
CyBot：开源威胁情报聊天机器人  
[https://github.com/CylanceSPEAR/CyBot][https_github.com_CylanceSPEAR_CyBot]  
  
LogonTracer  
[https://github.com/JPCERTCC/LogonTracer][https_github.com_JPCERTCC_LogonTracer]  
  
rastrea2r（重新加载！）：用Gusto和Style收集和狩猎IOC  
[https://github.com/rastrea2r/rastrea2r][https_github.com_rastrea2r_rastrea2r]  
  
RedHunt OS（VM）：用于对手仿真和威胁搜索的虚拟机  
[https://github.com/redhuntlabs/RedHunt-OS][https_github.com_redhuntlabs_RedHunt-OS]  
  
  
5、剥削与道德黑客  
  
AVET：AntiVirus Evasion Tool  
[https://github.com/govolution/avet][https_github.com_govolution_avet]  
  
DSP：Docker安全游乐场  
[https://github.com/giper45/DockerSecurityPlayground][https_github.com_giper45_DockerSecurityPlayground]  
  
hideNsneak：攻击混淆框架  
[https://github.com/rmikehodges/hideNsneak][https_github.com_rmikehodges_hideNsneak]  
  
梅林  
[https://github.com/Ne0nd0g/merlin][https_github.com_Ne0nd0g_merlin]  
  
RouterSploit  
[https://github.com/threat9/routersploit][https_github.com_threat9_routersploit]  
  
  
6、硬件/嵌入式  
  
ChipWhisperer  
[https://github.com/newaetech/chipwhisperer][https_github.com_newaetech_chipwhisperer]  
  
JTAGulator ：揭开硬件安全的致命弱点  
[https://github.com/grandideastudio/jtagulator][https_github.com_grandideastudio_jtagulator]  
  
Micro-Renovator：将处理器固件带入代码  
[https://github.com/syncsrc/MicroRenovator][https_github.com_syncsrc_MicroRenovator]  
  
TumbleRF：RF模糊变得容易  
[https://github.com/riverloopsec/tumblerf][https_github.com_riverloopsec_tumblerf]  
  
Walrus：充分利用您的卡片克隆设备  
[https://github.com/TeamWalrus/Walrus][https_github.com_TeamWalrus_Walrus]  
  
  
7、物联网  
  
物联网设备的可扩展动态分析框架  
[https://github.com/sycurelab/DECAF][https_github.com_sycurelab_DECAF]  
  
BLE CTF项目  
[https://github.com/hackgnar/ble\_ctf][https_github.com_hackgnar_ble_ctf]  
  
WHID注射器和WHID Elite：新一代HID攻击性设备  
[https://github.com/whid-injector/WHID][https_github.com_whid-injector_WHID]  
  
  
8、恶意软件防御  
  
为每位安全研究人员提供高级深度学习分析平台  
[https://github.com/intel/Resilient-ML-Research-Platform][https_github.com_intel_Resilient-ML-Research-Platform]  
  
EKTotal  
[https://github.com/nao-sec/ektotal][https_github.com_nao-sec_ektotal]  
  
固件审计：Blue Teams和DFIR的平台固件安全自动化  
[https://github.com/PreOS-Security/fwaudit][https_github.com_PreOS-Security_fwaudit]  
  
MaliceIO  
[https://github.com/maliceio/malice][https_github.com_maliceio_malice]  
  
目标 – 参见MacOS安全工具  
[https://github.com/objective-see][https_github.com_objective-see]  
  
  
9、恶意软件进攻  
  
BloodHound 1.5  
[https://github.com/BloodHoundAD/BloodHound][https_github.com_BloodHoundAD_BloodHound]  
  
  
10、网络攻击  
  
军械库  
[https://github.com/depthsecurity/armory][https_github.com_depthsecurity_armory]  
  
Chiron：一种先进的IPv6安全评估和渗透测试框架  
[https://github.com/aatlasis/Chiron][https_github.com_aatlasis_Chiron]  
  
DELTA：SDN安全评估框架  
[https://github.com/OpenNetworkingFoundation/DELTA][https_github.com_OpenNetworkingFoundation_DELTA]  
  
Mallet：任意协议的拦截代理  
[https://github.com/sensepost/mallet][https_github.com_sensepost_mallet]  
  
PowerUpSQL：用于在企业环境中攻击SQL Server的PowerShell工具包  
[https://github.com/NetSPI/PowerUpSQL][https_github.com_NetSPI_PowerUpSQL]  
  
WarBerryPi  
[https://github.com/secgroundzero/warberry][https_github.com_secgroundzero_warberry]  
  
  
11、网络防御  
  
ANWI（全新无线IDS）：5美元的WIDS  
[https://github.com/SanketKarpe/anwi][https_github.com_SanketKarpe_anwi]  
  
CHIRON：基于家庭的网络分析和机器学习威胁检测框架  
[https://github.com/jzadeh/chiron-elk][https_github.com_jzadeh_chiron-elk]  
  
云安全套件：AWS / GCP / Azure安全审计的一站式工具  
[https://github.com/SecurityFTW/cs-suite][https_github.com_SecurityFTW_cs-suite]  
  
DejaVu：一个开源欺骗框架  
[https://github.com/bhdresh/Dejavu][https_github.com_bhdresh_Dejavu]  
  
  
O12、SINT – 开源智能  
  
DataSploit 2.0  
[https://github.com/DataSploit/datasploit][https_github.com_DataSploit_datasploit]  
  
Dradis 框架：了解如何将报告时间缩短一半  
[https://github.com/dradis/dradis-ce][https_github.com_dradis_dradis-ce]  
  
  
13、逆向工程  
  
Snake：恶意软件存储动物园  
[https://github.com/countercept/snake][https_github.com_countercept_snake]  
  
  
14、智能电网/工业安全  
  
GRFICS ：工业控制模拟的图形现实主义框架  
[https://github.com/djformby/GRFICS][https_github.com_djformby_GRFICS]  
  
  
15、漏洞评估  
  
用于机器学习模型的对抗鲁棒性工具箱  
[https://github.com/IBM/adversarial-robustness-toolbox][https_github.com_IBM_adversarial-robustness-toolbox]  
  
Android动态分析工具（ADA）  
[https://github.com/ANELKAOS/ada][https_github.com_ANELKAOS_ada]  
  
射箭：开源漏洞评估和管理  
[https://github.com/archerysec/archerysec][https_github.com_archerysec_archerysec]  
  
boofuzz  
[https://github.com/jtpereyda/boofuzz][https_github.com_jtpereyda_boofuzz]  
  
BTA  
[https://github.com/airbus-seclab/bta][https_github.com_airbus-seclab_bta]  
  
深度利用  
[https://github.com/13o-bbr-bbq/machine\_learning\_security/tree/master/DeepExploit][https_github.com_13o-bbr-bbq_machine_learning_security_tree_master_DeepExploit]  
  
Halcyon IDE：适用于Nmap脚本开发人员  
[https://github.com/s4n7h0/Halcyon][https_github.com_s4n7h0_Halcyon]  
  
SimpleRisk  
[https://github.com/simplerisk][https_github.com_simplerisk]  
  
TROMMEL  
[https://github.com/CERTCC/trommel][https_github.com_CERTCC_trommel]  
  
16、Web AppSec  
  
看看NGINX的ModSec 3.0：软件Web应用程序防火墙  
[https://github.com/SpiderLabs/ModSecurity][https_github.com_SpiderLabs_ModSecurity]  
  
Astra：REST API的自动安全测试  
[https://github.com/flipkart-incubator/Astra][https_github.com_flipkart-incubator_Astra]  
  
Burp Replicator：自动化复杂漏洞的复制  
[https://github.com/PortSwigger/replicator][https_github.com_PortSwigger_replicator]  
  
OWASP进攻性Web测试框架  
[https://github.com/owtf/owtf][https_github.com_owtf_owtf]  
  
OWASP JoomScan项目  
[https://github.com/rezasp/joomscan][https_github.com_rezasp_joomscan]  
  
WSSAT  
[https://github.com/YalcinYolalan/WSSAT][https_github.com_YalcinYolalan_WSSAT]

[https_github.com_prateek147_DVIA-v2]: https://github.com/prateek147/DVIA-v2
[https_github.com_jeremylong_DependencyCheck]: https://github.com/jeremylong/DependencyCheck
[https_github.com_pumasecurity_puma-scan]: https://github.com/pumasecurity/puma-scan
[https_github.com_spoofzu_DeepViolet]: https://github.com/spoofzu/DeepViolet
[https_github.com_bro_bro]: https://github.com/bro/bro
[https_github.com_CylanceSPEAR_CyBot]: https://github.com/CylanceSPEAR/CyBot
[https_github.com_JPCERTCC_LogonTracer]: https://github.com/JPCERTCC/LogonTracer
[https_github.com_rastrea2r_rastrea2r]: https://github.com/rastrea2r/rastrea2r
[https_github.com_redhuntlabs_RedHunt-OS]: https://github.com/redhuntlabs/RedHunt-OS
[https_github.com_govolution_avet]: https://github.com/govolution/avet
[https_github.com_giper45_DockerSecurityPlayground]: https://github.com/giper45/DockerSecurityPlayground
[https_github.com_rmikehodges_hideNsneak]: https://github.com/rmikehodges/hideNsneak
[https_github.com_Ne0nd0g_merlin]: https://github.com/Ne0nd0g/merlin
[https_github.com_threat9_routersploit]: https://github.com/threat9/routersploit
[https_github.com_newaetech_chipwhisperer]: https://github.com/newaetech/chipwhisperer
[https_github.com_grandideastudio_jtagulator]: https://github.com/grandideastudio/jtagulator
[https_github.com_syncsrc_MicroRenovator]: https://github.com/syncsrc/MicroRenovator
[https_github.com_riverloopsec_tumblerf]: https://github.com/riverloopsec/tumblerf
[https_github.com_TeamWalrus_Walrus]: https://github.com/TeamWalrus/Walrus
[https_github.com_sycurelab_DECAF]: https://github.com/sycurelab/DECAF
[https_github.com_hackgnar_ble_ctf]: https://github.com/hackgnar/ble_ctf
[https_github.com_whid-injector_WHID]: https://github.com/whid-injector/WHID
[https_github.com_intel_Resilient-ML-Research-Platform]: https://github.com/intel/Resilient-ML-Research-Platform
[https_github.com_nao-sec_ektotal]: https://github.com/nao-sec/ektotal
[https_github.com_PreOS-Security_fwaudit]: https://github.com/PreOS-Security/fwaudit
[https_github.com_maliceio_malice]: https://github.com/maliceio/malice
[https_github.com_objective-see]: https://github.com/objective-see
[https_github.com_BloodHoundAD_BloodHound]: https://github.com/BloodHoundAD/BloodHound
[https_github.com_depthsecurity_armory]: https://github.com/depthsecurity/armory
[https_github.com_aatlasis_Chiron]: https://github.com/aatlasis/Chiron
[https_github.com_OpenNetworkingFoundation_DELTA]: https://github.com/OpenNetworkingFoundation/DELTA
[https_github.com_sensepost_mallet]: https://github.com/sensepost/mallet
[https_github.com_NetSPI_PowerUpSQL]: https://github.com/NetSPI/PowerUpSQL
[https_github.com_secgroundzero_warberry]: https://github.com/secgroundzero/warberry
[https_github.com_SanketKarpe_anwi]: https://github.com/SanketKarpe/anwi
[https_github.com_jzadeh_chiron-elk]: https://github.com/jzadeh/chiron-elk
[https_github.com_SecurityFTW_cs-suite]: https://github.com/SecurityFTW/cs-suite
[https_github.com_bhdresh_Dejavu]: https://github.com/bhdresh/Dejavu
[https_github.com_DataSploit_datasploit]: https://github.com/DataSploit/datasploit
[https_github.com_dradis_dradis-ce]: https://github.com/dradis/dradis-ce
[https_github.com_countercept_snake]: https://github.com/countercept/snake
[https_github.com_djformby_GRFICS]: https://github.com/djformby/GRFICS
[https_github.com_IBM_adversarial-robustness-toolbox]: https://github.com/IBM/adversarial-robustness-toolbox
[https_github.com_ANELKAOS_ada]: https://github.com/ANELKAOS/ada
[https_github.com_archerysec_archerysec]: https://github.com/archerysec/archerysec
[https_github.com_jtpereyda_boofuzz]: https://github.com/jtpereyda/boofuzz
[https_github.com_airbus-seclab_bta]: https://github.com/airbus-seclab/bta
[https_github.com_13o-bbr-bbq_machine_learning_security_tree_master_DeepExploit]: https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit
[https_github.com_s4n7h0_Halcyon]: https://github.com/s4n7h0/Halcyon
[https_github.com_simplerisk]: https://github.com/simplerisk
[https_github.com_CERTCC_trommel]: https://github.com/CERTCC/trommel
[https_github.com_SpiderLabs_ModSecurity]: https://github.com/SpiderLabs/ModSecurity
[https_github.com_flipkart-incubator_Astra]: https://github.com/flipkart-incubator/Astra
[https_github.com_PortSwigger_replicator]: https://github.com/PortSwigger/replicator
[https_github.com_owtf_owtf]: https://github.com/owtf/owtf
[https_github.com_rezasp_joomscan]: https://github.com/rezasp/joomscan
[https_github.com_YalcinYolalan_WSSAT]: https://github.com/YalcinYolalan/WSSAT