77777kaz77777/red-team-automation-and-exploits

# 🎯 红队自动化与漏洞利用 一个包含安全研究脚本、攻击性自动化工具、渗透测试实用程序和红队脚本的综合性仓库。 ## 🌳 仓库结构 ``` red-team-automation-and-exploits/ ├── 📁 recon-and-enumeration/ # Discovery & Information Gathering │ ├── basic Network Scanning with Nmap │ ├── Nmap Vulnerability Scanner Script │ ├── Automated Reconnaissance Script │ ├── DNS Enumeration │ ├── SMB Enumeration Script │ ├── Service Enumeration Script │ ├── Docker Container Enumeration Script │ ├── Web Directory Bruteforcing(uses gobuster) │ └── System Information Gathering │ ├── 📁 web-exploits/ # Web Application Exploitation │ ├── Command Injection with Reverse Shell │ ├── Exploiting XML External Entity (XXE) Injection │ ├── SQL Injection Testing Script │ ├── SQL Injection with Union-Based Exploit │ ├── Stored XSS Exploit │ ├── Exploiting Server-Side Request Forgery (SSRF) │ ├── Exploiting Insecure Deserialization │ ├── RCE Exploit Script │ ├── Remote Code Execution with PHP Web Shell │ ├── File Upload via Web Shell │ ├── Web Shell Uploader │ ├── Web Application Firewall (WAF) Bypass Script │ └── Web Application Vulnerability Scanner │ ├── 📁 shells-and-payloads/ # Reverse Shells & Payloads │ ├── reverse shell generator │ ├── Reverse Shell Payload │ ├── Reverse Shell Listener │ ├── Advanced Buffer Overflow Exploit │ └── Automated Exploit Script │ ├── 📁 post-exploitation/ # Privilege Escalation & Credential Harvesting │ ├── Local Privilege Escalation Script │ ├── Credential Dumping Script │ ├── Credential Harvesting Script │ ├── Password Cracking with John the Ripper │ ├── Automated Phishing Campaign Script │ └── Ransomware Simulation Script │ ├── 📁 network-attacks/ # Active Network Exploitation │ └── DNS Spoofing Script This script sets up a DNS spoofing attack using dnsspoof │ └── 📁 blue-team-and-utils/ # Analysis, Reporting & Maintenance ├── File Integrity Checker ├── Log Analysis Script ├── Automated Vulnerability Reporting Script └── Cleanup Script ⚠️ Disclaimer: All scripts in this repository are created purely for educational, security research, and authorized penetration testing purposes. Please note: Some scripts are proof-of-concepts, legacy code, or target-specific tools. As a result, certain scripts may not work out-of-the-box or may need to be tweaked/adapted to fit your specific testing environment, dependencies, or network configuration. ```

标签：BurpSuite集成, CTI, Web报告查看器, 安全测试, 应用安全, 插件系统, 攻击性安全, 数字取证, 网络安全, 自动化脚本, 请求拦截, 逆向工具, 隐私保护