A curated and practical collection of open-source red and blue team tools for asset scanning, vulnerability detection, information gathering, and internal network penetration.
收集网上好用、实用的红蓝对抗武器。从资产扫描、泄漏扫描、信息收集、漏洞扫描、SRC批量挖掘、内网渗透、应急响应等等工具。 大部分我都用过、部分会写上自己的感想与建议，希望对你有帮助
This repository serves penetration testers, red teamers, and security researchers by aggregating a wide range of effective security tools for tasks such as asset discovery, leak scanning, vulnerability scanning, and emergency response. Users can leverage these integrated tools to streamline their security assessments and red-blue team operations.
This repository is a curated collection linking to multiple independent open-source tools, each with its own installation and usage instructions. Users should review individual tool documentation for environment requirements and updates. Some tools may require API keys (e.g., Glass) or elevated permissions for scanning. The maintainer provides personal insights but the last update for some tools was in early 2022, so verify compatibility and security before use.
Clone the repository: git clone https://github.com/awake1t/Awesome-hacking-tools.git
Navigate to the desired tool's directory (e.g., nemo_go, linglong)
Follow individual tool installation instructions from their respective repositories (links provided)
For Go-based tools, use 'go install' or build from source as per tool documentation
For Python-based tools, set up a virtual environment and install dependencies using 'pip install -r requirements.txt'
Refer to each tool's README for detailed setup and configurationnemo_go
Launches an automated information collection platform integrating IP/domain asset management, fingerprinting, API scanning, and POC verification.
SiteScan
Performs one-stop penetration test information gathering including domain/IP history, port scanning, subdomain enumeration, WAF detection, and report generation.
linglong
Runs continuous asset discovery using masscan and nmap, performs port brute forcing, fingerprinting, and POC scanning with a management backend.
scaninfo
Executes fast internal and external network scanning with rapid port and service detection, faster than masscan.
AppInfoScanner
Collects critical asset information from mobile and static web environments for red team and penetration testing scenarios.
Glass
Queries multiple asset search engines (Fofa, ZoomEye, Shodan, 360) for rapid fingerprinting of IPs, IP ranges, or asset lists.