RichardBarron27/redspecter-evidence-collector
GitHub: RichardBarron27/redspecter-evidence-collector
一个结构化的证据管理工具，用于将渗透测试和DFIR证据自动整理成带时间戳的案例文件。
Stars: 1 | Forks: 0
# 🔒 红幽灵证据收集器（最小可行产品）
## ⭐ 功能
- 自动整理渗透测试证据
- 按时间戳 + 标签 + 按以下方式存储：
- 项目
- 日期
- 目标
- 证据类型
- 维护一个主 `timeline.csv` 文件
- 兼容任何命令行工具
- 所有证据**本地**保存（良好的操作安全）
## 🚀 快速开始
```
# 初始化新项目
python3 evid/cli.py init --project "Lab-Test"
# 收集命令输出作为证据
python3 evid/cli.py collect command \
--project "Lab-Test" \
--cmd "whoami" \
--target "10.10.10.5" \
--tags "initial-access"
evidence/
└── Lab-Test
├── YYYY-MM-DD
│ └──
│ └── command/
│ └── -.txt
└── timeline.csv
---
### 步骤 4 — 重要性说明
```md
---
## 🧩 重要性说明
Pentesters often end up with:
- Random terminal outputs
- Screenshots everywhere
- Notes scattered around
📌 This tool solves that with **automated case organization**.
Use it for:
- Pentests
- Red team ops
- CTFs
- Incident response
---
## 🛣️ 路线图
| Feature | Status |
|--------|:-----:|
| Command output collector | ✅ MVP |
| Screenshot collector | 🔜 |
| `--from-stdin` support (pipe tool output) | 🔜 |
| Clipboard capture | 🔜 |
| Local timeline web viewer (`evid serve`) | 🔜 |
| PDF/HTML report export | 🔜 |
| Hash + sign for chain-of-custody | 🔜 |
---
## 📦 要求
- Python 3.8+
(More installation methods coming soon)
---
## 🔗 Red Specter 攻击套件
Part of the **Red Specter** ethical cybersecurity ecosystem:
| Tool | Purpose | Link |
|------|---------|------|
| 🧨 Offensive Framework | Modular recon→web enum→vuln scanning workflow | https://github.com/RichardBarron27/red-specter-offensive-framework |
| 🗺 ScriptMap | Auto-discover and organize your scripts intelligently | https://github.com/RichardBarron27/redspecter-scriptmap |
| 📧 Email OSINT | Lightweight investigator-friendly email intel tool | https://github.com/RichardBarron27/redspecter-emailosint |
| 🔒 Evidence Collector | Structured storage & timeline of pentest findings | https://github.com/RichardBarron27/redspecter-evidence-collector |
---
## 🧑💻 作者
**Richard Barron – Red Specter Founder**
AI Partner: **Vigil**
⭐ If this tool helps you — please consider giving it a star!
---
## 📜 许可证
This project is licensed under the MIT License – see the [LICENSE](LICENSE) file for details.
## ❤️ 支持 Red Specter
If these tools help you, you can support future development:
- ☕ Buy me a coffee: https://www.buymeacoffee.com/redspecter
- 💼 PayPal: https://paypal.me/richardbarron1747
Your support helps me keep improving Red Specter and building new tools. Thank you!
Notice for Users: If you cloned this and found it useful, please consider starring the repo! Stars help with visibility and let me know which projects to maintain.
```
标签：ESC漏洞, 操作安全, 数字取证, 数据组织, 时间戳管理, 本地存储, 标签系统, 红队操作, 网络安全, 自动化组织, 自动化脚本, 证据收集, 逆向工具, 隐私保护