2017年度开源黑客工具/渗透测试工具精选清单 （欧洲黑帽大会军火库）     

每天都有大量黑客工具被上传到Github，这些工具良莠不齐，数量众多，让人目不暇接。优化渗透测试工具箱的一个最省力的办法，就是关注每年的黑帽大会，以下是最近的一次黑帽大会——2017年12月份欧洲黑帽大会上的军火库工具精选：

Android, iOS和移动攻击类
Objection
https://github.com/sensepost/objection
BADINTENT – INTEGRATING ANDROID WITH BURP
https://github.com/mateuszk87/BadIntent

数字取证与事件响应
CYBOT – OPEN-SOURCE THREAT INTELLIGENCE CHAT BOT (REVAMPED)
https://github.com/CylanceSPEAR/CyBot
NG-NETMS & OPTOSS PLUS
https://sourceforge.net/projects/ngnms/

漏洞利用与白帽攻击
DPAPI AND DPAPI-NG – DECRYPTION TOOLKIT
https://cqureacademy.com/blog/windows-internals/black-hat
UAC-A-MOLA
https://github.com/ElevenPaths/uac-a-mola
EXPLOIT PACK
https://github.com/juansacco/exploitpack
2FASSASSIN
https://github.com/maxwellkoh/2FAssassin

硬件/嵌入式
DYODE – A DIY, LOW-COST DATA DIODE FOR ICS
https://github.com/wavestone-cdt/dyode

物联网
WHID INJECTOR – HOW TO BRING HID ATTACKS TO THE NEXT LEVEL
https://github.com/whid-injector/WHID

恶意软件防御
MYSTIQUE
https://github.com/MinervaLabsResearch/Mystique
AKTAION V2 – A MACHINE LEARNING OPEN-SOURCE & ACTIVE DEFENSE (ORCHESTRATION) TOOL
https://github.com/jzadeh/aktaion2

网络攻击
DET (DATA EXFILTRATION TOOLKIT)
https://github.com/sensepost/DET
FruityC2
https://github.com/xtr4nge/FruityC2

网络防御
ACE (AUTOMATED COLLECTION AND ENRICHMENT PLATFORM)
https://github.com/Invoke-IR/ACE
CLOUD SECURITY SUITE – ONE STOP TOOL FOR AWS SECURITY AUDIT
https://github.com/SecurityFTW/cs-suite
ID2T – THE INTRUSION DETECTION DATASET GENERATION TOOLKIT
https://git.tk.informatik.tu-darmstadt.de/SPIN/ID2T-toolkit
WIPI-HUNTER – WIFI-PINEAPPLE ACTIVITIES DETECTION
https://github.com/WiPi-Hunter

OSINT – 开源情报
Dradis: 10 Years Helping Security Teams Spend More Time Testing and Less Time Reporting
https://github.com/dradis/dradis-ce
DATASPLOIT – OSINT FRAMEWORK
https://github.com/DataSploit/datasploit
OSINT-SPY
https://github.com/SharadKumar97/OSINT-SPY
TINFOLEAK
http://www.vicenteaguileradiaz.com/tools/

漏洞评估
OPENSCAP AND SCAP SECURITY GUIDE
https://github.com/OpenSCAP/scap-security-guide
POWERSAP – POWERSHELL TOOL TO ASSESS SAP SECURITY
https://github.com/airbus-seclab/powersap
SECCUBUS
https://github.com/schubergphilis/Seccubus

Web应用安全
 MODSECURITY 3.0.0
https://github.com/SpiderLabs/ModSecurity/wiki/ModSecurity-version-3-RC1
REFLECTOR – BURP SUITE EXTENSION
https://github.com/elkokc/reflector

跨站攻击 – 从XSS到RCE 2.75
https://github.com/Varbaek/xsser
OWASP ZAP
https://github.com/zaproxy/zaproxy
PYMULTITOR
https://github.com/realgam3/pymultitor