Stacyh-T/toolkit
GitHub: Stacyh-T/toolkit
面向 Kali Linux 的网络安全工具包，通过自动化脚本一键安装和配置各类渗透测试工具、字典及 zsh 环境。
Stars: 1 | Forks: 0
# ⚡ toolkit v1.2.0
## 🚀 快速安装
```
# 前提条件
git --version
ping -c 3 github.com
df -h ~ # prévoir ~3 Go libres minimum (6 Go avec RE + IoT)
# 安装
git clone https://github.com/Stacyh-T/toolkit.git ~/toolkit
cd ~/toolkit
chmod +x install.sh setup/*.sh scripts/*.sh
sudo ./install.sh
```
## 📂 结构
```
toolkit/
├── install.sh # Script principal (menu interactif)
├── setup/
│ ├── apt-tools.sh # Outils via apt (~800 Mo)
│ ├── git-tools.sh # Outils via GitHub → ~/tools/
│ ├── wordlists.sh # Wordlists → ~/wordlists/
│ ├── configs.sh # Dotfiles + ~/.zshenv
│ ├── re-tools.sh # Reverse Engineering (optionnel, ~200 Mo + Ghidra ~1 Go)
│ └── iot-tools.sh # IoT & WiFi (optionnel, ~300 Mo)
├── configs/
│ ├── .zshrc # Aliases, fonctions, prompt custom
│ └── tmux.conf # Config tmux
├── scripts/
│ ├── revshell.sh # Générateur de reverse shells (CLI)
│ ├── recon/ # Scripts de recon perso
│ ├── web/ # Scripts web perso
│ └── utils/ # Utilitaires divers
└── wordlists/
└── README.md # Références wordlists
```
## 🛠️ 已安装的内容
### 通过 apt
| 类别 | 工具 |
|---|---|
| 信息收集与 OSINT | nmap, amass, recon-ng, maltego, sherlock, dnsenum, whatweb, exiftool |
| Web | burpsuite, zaproxy, ffuf, gobuster, feroxbuster, nikto, curl, dirb, wfuzz, sqlmap, wafw00f |
| 网络 | netcat, hydra, enum4linux, nbtscan, onesixtyone, snmp, macchanger, wireshark, tcpdump |
| 数据库 | mysql-client, postgresql-client |
| 密码 | hashcat, john, crunch, medusa, ncrack |
| 逆向工程 (基础) | gdb, binutils (readelf, objdump, strings, file), strace, ltrace, binwalk, upx |
| 漏洞利用 | metasploit-framework |
| 实用工具 | tmux, git, jq, wget, unzip, golang-go, pipx, ruby, gem |
### 通过 GitHub → `~/tools/`
| 类别 | 工具 | 仓库 |
|---|---|---|
| 信息收集与 OSINT | Spiderfoot | https://github.com/smicallef/spiderfoot |
| 信息收集与 OSINT | Datasploit | https://github.com/DataSploit/datasploit |
| 信息收集与 OSINT | Photon | https://github.com/s0md3v/Photon |
| 信息收集与 OSINT | Social-Analyzer | https://github.com/qeeqbox/social-analyzer |
| OSINT | Holehe (pipx) | https://github.com/megadose/holehe |
| OSINT | TruffleHog | https://github.com/trufflesecurity/trufflehog |
| OSINT | PhoneInfoga (go) | https://github.com/sundowndev/phoneinfoga |
| OSINT | WaybackURLs (go) | https://github.com/tomnomnom/waybackurls |
| Web | XSStrike | https://github.com/s0md3v/XSStrike |
| Web | BruteXSS | https://github.com/rajeshmajumdar/BruteXSS |
| Web | Gopherus | https://github.com/tarunkant/Gopherus |
| Web | Drupwn | https://github.com/immunIT/drupwn |
| Web | Droopescan | https://github.com/SamJoan/droopescan |
| 网络 | Impacket (pipx) | https://github.com/fortra/impacket |
| 网络 | SMTP-User-Enum | https://github.com/cytopia/smtp-user-enum |
| 网络 | SIPVicious | https://github.com/EnableSecurity/sipvicious |
| 后渗透 | PEASS-ng (LinPEAS/WinPEAS) | https://github.com/peass-ng/PEASS-ng |
| 后渗透 | pwncat (pipx) | https://github.com/calebstewart/pwncat |
| 后渗透 | Evil-WinRM | https://github.com/Hackplayers/evil-winrm |
| 后渗透 | Mimikatz | https://github.com/gentilkiwi/mimikatz |
| 后渗透 | CrackMapExec (pipx) | https://github.com/byt3bl33d3r/CrackMapExec |
| 后渗透 | Bashfuscator | https://github.com/Bashfuscator/Bashfuscator |
| Windows 权限提升 | GodPotato | https://github.com/BeichenDream/GodPotato |
| Windows 权限提升 | PrintSpoofer | https://github.com/itm4n/PrintSpoofer |
| Windows 权限提升 | JuicyPotato | https://github.com/ohpe/juicy-potato |
| 内网穿透/代理转发 | Chisel (go) | https://github.com/jpillora/chisel |
| 内网穿透/代理转发 | Ligolo-ng (go) | https://github.com/nicocha30/ligolo-ng |
| 内网穿透/代理转发 | Proxychains-ng | https://github.com/rofl0r/proxychains-ng |
| 内网穿透/代理转发 | sshuttle (pipx) | https://github.com/sshuttle/sshuttle |
| 逆向工程 | pwndbg | https://github.com/pwndbg/pwndbg |
| 反向 Shell | revshells | https://github.com/0dayCTF/reverse-shell-generator |
| 数字取证 | Autopsy | https://github.com/sleuthkit/autopsy |
| 数字取证 | Volatility3 | https://github.com/volatilityfoundation/volatility3 |
| 数字取证 | Plaso (pipx) | https://github.com/log2timeline/plaso |
### 逆向工程模块 — `setup/re-tools.sh`
| 工具 | 描述 |
|---|---|
| gdb + pwndbg | Linux 调试器 + CTF 扩展 |
| pwntools (pipx) | Python 漏洞利用开发框架 |
| checksec (pipx) | 检查二进制文件的保护机制 |
| binwalk | 固件提取 |
| upx | 解压加壳的二进制文件 |
| Ghidra | NSA 逆向汇编/反编译工具 (可选, ~1 Go) |
### IoT & WiFi 模块 — `setup/iot-tools.sh`
| 工具 | 描述 |
|---|---|
| aircrack-ng | WiFi 套件 (捕获、注入、破解) |
| hcxdumptool + hcxtools | WiFi PMKID 捕获 |
| hostapd + dnsmasq | Evil Twin / 恶意 AP |
| mosquitto + clients | MQTT broker + 测试 |
| bluez (hcitool, gatttool) | BLE 蓝牙 |
| bettercap | MitM/BLE/WiFi 框架 |
| esptool (pipx) | ESP32/ESP8266 刷机 |
| routersploit (venv) | IoT 路由器漏洞利用 |
## ⚙️ 配置好的环境
`configs.sh` 配置了 3 个文件：
| 文件 | 作用 |
|---|---|
| `~/.zshrc` → 链接至 `configs/.zshrc` | 别名、函数、提示符 |
| `~/.tmux.conf` → 链接至 `configs/tmux.conf` | tmux 配置 |
| `~/.zshenv` | 导出 `$TOOLS`, `$WORDLISTS`, `$PATH` |
## ⚡ 可用别名
### 信息收集
```
nmap-quick # nmap -sV -sC -T4
nmap-full # nmap -sV -sC -p-
nmap-udp # nmap -sU -T4
nmap-vuln # nmap --script vuln
nmap-save # nmap -sV -sC -T4 -oA scan
```
### Web
```
ffuf-dir # ffuf directories (medium wordlist)
ffuf-sub # ffuf sous-domaines
gobuster-dir # gobuster dir
sqlmap # sqlmap --batch
xsstrike # python3 xsstrike/xsstrike.py
gopherus # python3 gopherus/gopherus.py
```
### OSINT
```
spiderfoot # OSINT → http://127.0.0.1:5001
holehe # Vérifie l'email sur 120+ services
phoneinfroga -n +33… # OSINT numéro de téléphone
waybackurls # URLs archivées Wayback Machine
photon # python3 photon/photon.py
datasploit # python3 datasploit/datasploit.py
```
### 后渗透
```
secretsdump # Impacket secretsdump
GetNPUsers # AS-REP Roasting
GetUserSPNs # Kerberoasting
linpeas # LinPEAS local .sh
winpeas # WinPeas local .exe
evil-winrm -i # WinRM shell
cme smb # CrackMapExec SMB
```
### Windows 权限提升
```
godpotato # Token Impersonation (Win 2012→2022)
printspoofer # Token Impersonation (Win10/2019)
juicypotato # Token Impersonation (legacy)
```
### 内网穿透/代理转发
```
chisel-server # Chisel serveur (attaquant)
ligolo-proxy # Ligolo-ng proxy (attaquant)
```
### 逆向工程
```
ghidra # Lancer Ghidra (GUI)
r2 # Radare2
checksec # Vérifier les protections
gdb-pwn # GDB + pwndbg
die # Detect-It-Easy (identifier packer)
upx-unpack # Déballer un binaire UPX
```
### IoT & WiFi
```
hcx-dump # Capture PMKID WiFi
hcx-crack # Convertir + cracker avec hashcat
mqtt-sniff # Écouter tous les topics MQTT
routersploit # Framework exploitation routeurs
```
### 实用工具
```
serve # python3 -m http.server 8080
serve-linpeas # Sert linpeas + affiche commande cible
serve-tool # Sert n'importe quel fichier via HTTP
listen # nc -lvnp
target # Crée workspace/{recon,web,exploit,loot,notes,re}
quickscan # Scan nmap + sauvegarde automatique
b64e / b64d # Encode / décode base64
urlencode # URL encode
myip # IP publique
localip # IP locale
```
## 🐚 反向 Shell
```
./scripts/revshell.sh all
# 类型： bash · python · php · netcat · perl · ruby · powershell · upgrade · all
```
## 📦 字典
`~/wordlists/` 中的最终结构：
```
passwords/rockyou.txt
directories/common.txt · medium.txt · big.txt
subdomains/top5000.txt · top20000.txt
usernames/common.txt · names.txt
fuzzing/fuzz.txt · lfi.txt
seclists/ ← SecLists complet
```
## ⚠️ 安装后步骤
| 工具 | 所需命令 |
|---|---|
| pwndbg | `cd ~/tools/pwndbg && ./setup.sh` |
| Bashfuscator | `cd ~/tools/bashfuscator && pipx install .` |
| Evil-WinRM | `gem install evil-winrm` |
| Chisel | `cd ~/tools/chisel && go build .` |
| Ligolo-ng | `cd ~/tools/ligolo-ng/cmd/proxy && go build .` |
| Proxychains-ng | `cd ~/tools/proxychains-ng && ./configure && make && make install` |
## ➕ 添加工具
### 通过 apt
打开 `setup/apt-tools.sh` 并在正确的类别中添加：
```
install_apt nom-outil
```
### 通过 GitHub
打开 `setup/git-tools.sh` 并添加：
```
clone_tool "nom-outil" "https://github.com/user/repo"
```
然后在 `configs/.zshrc` 中添加别名。
## 🔄 更新 toolkit
```
cd ~/toolkit
git pull
source ~/.zshrc
```
重新安装模块：
```
sudo bash setup/apt-tools.sh # outils apt
sudo bash setup/git-tools.sh # outils GitHub
sudo bash setup/re-tools.sh # module RE
sudo bash setup/iot-tools.sh # module IoT
```
## 📋 更新日志
### v1.2.0 (2026-05)
- ✅ 移除了 `install.sh` 和 `iot-tools.sh` 中的重复项
- ✅ `#!/bin/bash` 不再在执行结束时显示
- ✅ “启动新终端”消息视配置安装情况而显示
- ✅ **pipx** 替换了所有 Python 工具的 pip
- ✅ `install_utils` 最先执行 — 确保在任何工具之前安装好 golang-go 和 pipx
- ✅ 为 RouterSploit 创建了独立的 venv (不再有 apt/pip 冲突)
- ✅ 在 `git-tools.sh` 中自动检查 Go 和 pipx
### v1.1.0 (2026-05)
- ✅ 新增 `setup/re-tools.sh` — 逆向工程模块
- ✅ 新增 `setup/iot-tools.sh` — IoT & WiFi 模块
- ✅ apt-tools.sh：medusa, ncrack, gdb, binutils, strace, ltrace, binwalk, upx, tcpdump
- ✅ git-tools.sh：holehe, trufflehog, phoneinfroga, waybackurls, GodPotato, PrintSpoofer, JuicyPotato, pwndbg
- ✅ .zshrc：+30 个新别名 (RE, IoT, WiFi, OSINT, PrivEsc)
- ✅ install.sh：更新菜单，加入模块 5 (RE) 和模块 6 (IoT)
### v1.0.0 (2026-05-26)
- 🎉 初始版本发布
## ⚠️ 免责声明
**仅用于教育和合法授权的用途**。
标签：Blue Team, Cutter, 云资产清单, 数字取证, 日志审计, 环境配置, 网络安全工具包, 自动化脚本, 逆向工具, 逆向工程