credkellar-boop/REDTEAM-ENV
GitHub: credkellar-boop/REDTEAM-ENV
一个模块化的红队渗透测试编排框架,集中管理十九个安全工具以实现自动化环境部署、多阶段攻击模拟与合规报告。
Stars: 6 | Forks: 1
# RedTeam-ENV
[](https://github.com/credkellar-boop/RedTeam-ENV/actions)
[](LICENSE)
[](https://github.com/credkellar-boop/RedTeam-ENV/issues)
[](https://bestpractices.coreinfrastructure.org/)
一个模块化的基础设施即代码框架,专为自动化环境配置、安全审计和合规性验证而设计。
## 🏗️ 项目架构
该框架按功能模块进行组织,以将基础设施部署、安全检测和报告分离开来。
```
RedTeam-ENV/
├── .github/workflows/main.yml # CI/CD pipeline
├── README.md # Documentation
├── setup.sh # Environment provisioner
├── config.yaml # Global matrix
└── modules/
├── recon/ # OSINT & Discovery
│ ├── indulgentia/ # Subdomain/Transparency finder
│ ├── piedpiper/ # OSINT chat/leak finder
│ └── thc-scalpel/ # Stealth recon toolkit
├── scanners/
│ └── Decoy-Hunter/ # Decoy detection toolkit
├── cloud/
│ ├── perforator/ # S3 bucket enumeration
│ └── rediska/ # Redis/K8s configuration auditor
├── evasion/
│ └── Knockin-on-Heaven-s-Door/ # WAF bypass collection
├── tunneling/
│ └── kaplan/ # Tor-based document downloader
├── simulators/
│ └── bl00dym4ry/ # Phishing/Trojan simulation
├── deployment/ # IaC & Host enumeration
├── metrics-reporting/ # Report engine
└── compliance-as-code/ # Audit agents
```
标签:Cutter, GitHub, XXE攻击, 安全分析, 实时处理, 红队框架, 自动化编排