Pentest-Windows - ⚔️Windows11渗透套件工具包🔰首款

项目说明

<p align="center">
<img src=" alt="Pentest-Windows Desktop">
</p>

<h1 align="center">Pentest-Windows11 v3.2</h1>

<p align="center">
<em>The First Windows Penetration Testing En on Mac M Chips</em>
</p>

<p align="center">
<img src=" alt="Author">
<img src=" alt="Release v3.2">
<img src=" alt="Platform Windows">
<img src=" alt="WSL Kali">
<img src=" alt="Property Arsenal">
</p>

<p align="center">
<a href="README-ZH.md"><strong>中文文档 </strong></a> |
<a href="README.md"><strong>English README</strong></a>
</p>

📖 Project O

📝 System Introduction

This en aims to provide a ready-to-use Windows penetration testing en.

Reposting is welcome. Please indicate the original author and link:

Recommended en: [: 17.0] / [RAM: 8G] / [VM Disk: 100G] / [Actual disk usage: about 30G]

System account: admin, password: 123456. Please change the password after login!

Chinese name: 矛·盾 武器库, meaning that cybersecurity is both offense and defense, with the sharpest spear and the strongest shield, interdependent and competitively e.

The project has integrated 400+ commonly used tools and scripts. You can submit 工具 requests in the pinned Issue.

🚀

#### Release status:

[x] Mac M series Arm64 Fusion v3.0

[x] Mac M series Arm64 Parallels Desktop v3.1

[x] Windows/Mac Intel x64 v3.2

[x] K Qcow2 v3.2

[x] Hyper-V and bootable physical machine v3.2

[ ] O (in progress)

#### Download Link：

1. Parallels Desktop

: Mac M series Arm64 Parallels Desktop

Filename: Windows11 Penetration Suite Toolkit v3.1-Arm-PD.7z

Cloud Storage: Mega

Share Link:

Share Code: None

SHA256: 47E5B3EAFEB9E28C5ECA6C5A381D35206475C7C5F42CE46C5B0D41E749AAE6C7

2.

: Windows/Mac Intel x64 v3.2

Filename: Windows11 Penetration Suite Toolkit v3.2-x64-.7z

Cloud Storage: Mega

Share Link:

Share Code: None

SHA-256: 3E86BCE3950521EAC112CDA840B79012614AE456A621C174F43608E58DEBFE93

✨ Introduction

Main Features & Update History:

* v3.2 (Latest):
* Supports x64 architecture ( | P)
* Supports Mac M series Arm architecture (Fusion | Parallels Desktop)
* Supports Hyper-V and bootable (can be installed to external hard drive, run on any host, no )
* Optimized graphical bat 工具 startup, added vbs no CMD popup startup.
* KVM VM has QGA and drivers installed, adapted for Proxmox to use after import (RDP recommended).
* Added UniGetUI management, supports graphical update of scoop-installed tools and software.
* in progress.
* v3.1:
* Based on official Windows 11 ARM ISO.
* Chrome tab management added, project 工具 links imported.
* Maye toolkit categories and subcategories beautified with emoji.
* v3.1 PD removed TPM restriction, VM not encrypted.
* Added basic PD Windows 11-Optimization.PD.7z
* v3.0:
* Added tools for internal penetration, credential acquisition, VPN, etc. Total tools increased to 360+.
* Toolbox uses new Maya Lite , supports subcategories, clearer classification.
* All tools in the toolbox ha, mouse ho description.
* Due to Windows 11 TPM policy, VM is encrypted, password: 123456789.
* General Features (v2.x - v3.x):
* Streamlined built-in software, beautified terminal fonts and some icons, moderate optimization.
* System disk image 100GB, single disk file storage for performance (image size continuously optimized).
* Rebuilt 工具 icons, each 工具 has a corresponding icon.
* Integrated Scoop package manager (v2.1+), supports scoop update <tool> for updates.
* Scoop supports script 工具 installation and updates (v2.2+).
* Windows Terminal optimized, unified theme and oh-my-posh enhancement.
* Updated Scoop en , CLI tools can be used directly in CMD or Powershell.
* Removed some unmaintained or rarely used tools.
* WSL temporarily removed (low usage, large space, ARM not supported), may be added later as needed.

ℹ️ Additional Information

For the full list of supported tools and updates, please check

Some machines do not support nested or may conflict with local Hyper-. Please use the NoWSL lite if you do not need Kali-WSL.

Tools are in their initial installation state by default. Some tools require initialization, and a few need manual plugin configuration.

📜 Production Statement

1. All installable software is downloaded from the official website or GitHub.
2. All portable (green) software is downloaded from Guohe Shell ().
3. All script tools are downloaded from GitHub.
4. Some licensed (cracked) and excellent penetration tools are shared from WeChat public accounts.
5. Some personal information may remain due to debugging; please ignore it.
6. This project does not and will ne any form of sponsorship.

⚠️ Disclaimer

1. This image is only for legally authorized enterprise security construction. If you want to test its usability, please set up your own target en.
2. When using this image for testing, ensure your actions comply with local laws and ha authorization.
3. Any illegal use is at your own risk. The author assumes no legal or joint liability.

💻 System Introduction

🖥️ Basics

🪟: Managed and installed by scoop, supports one-click install and update.

🌐: Online security tools, require internet access, some need .

📖: Offline knowledge base, including password dictionaries, 工具 usage, exploit tutorials, A guides (PDF/Markdown).

⌨️ Programming & IDEs

Python v3.10.11 (D:/Base/apps/Python310)

Python v2.7.18 (D:/Base/apps/Python27)

JRE v1.8.0_381 (D:/Base/apps/liberica17-jre/current/bin)

Perl v5.36.1 (D:/Base/apps/git/current/usr/bin/perl.exe)

Ruby v3.2.2

TDM-gcc v10.3.0 (D:/Base/apps/tdm-gcc)

Laragon v5.0.0 (D:/Base/apps/laragon)

* Nginx v1.14.0
* Apache v2.4.43
* PHP v5.4.9
* MySQL v5.1.72

Git v2.41.0 (D:/Base/apps/git)

Curl v8.1.1 (D:/Base/apps/Curl/bin)

Wget v1.21.4 (D:/Base/apps/Wget)

Scoop: Windows package manager v0.3.1 (D:/Base/apps/scoop)

⚓ Common Software

System Enhancement:

7zip: High-compression open-源码 archiver 🪟

utools: Multi-functional file search launcher 🪟

Windows Terminal: (replaces default cmd)

: Tools for and management

Oh-My-Posh: Cross-platform terminal prompt customization 🪟

Clink: Bash-style command line editing for Windows Cmd.exe (D:/Base/apps/Clink) 🪟

SublimeText: Efficient text editor, Chinese v4.4150 (Guohe Shell)

System Optimization:

Dism++: Windows system management/optimization 工具 🪟

WiseCare365: System optimization 工具, green v6.5.1_Pro (Guohe Shell)

Tools: Custom utilities

* Context Menu Manager: One-click set WIN10/WIN11 context menu 💾
* Autologin: Windows auto-login registry 💾
* ClearHistory.ps1: Clear PowerShell history 💾

🔗 Maye Launcher

🛠️ Penetration Tools Introduction

> 400+ commonly used scripts and 界面 tools can be accessed in the Maye toolbox.
>
> * Default to launching CMD.exe with Windows Terminal
> * Script startup directory is set
> * Required dependencies are installed
> * Scripts execute Help command on startup

🔬 Common Tools

| Tool Name | Type | Description |
| ------------ | ----------- | ------------------------------------------------------------ |
| Burpsuite | scoop tool | One of the best tools for web application testing |
| AntSword | scoop tool | AntSword - WebShell management 工具 |
| Goby | scoop tool | Port scanning, asset collection, exploitation |
| MSFconsole | scoop tool | Metasploit - modular exploitation 框架 |
| Sqlmap | scoop tool | Automated SQL injection 工具 |
| Hydra | scoop tool | Powerful brute-force 工具 |
| Yakit | scoop tool | Highly integrated Yak language security testing platform |
| Zenmap | scoop tool | Port scanning 工具 (powerful, but slow) |
| WindTerm | scoop tool | Professional cross-platform SSH/Sftp/Shell/Telnet/Serial terminal |
| uTools | scoop tool | Multi-functional file search launcher |
| Wireshark | scoop tool | Popular 网络 packet analysis software |
| Searchsploit | scoop tool | Command-line search 工具 for Exploit-DB |
| LibreWolf | scoop tool | Firefox fork with built-in plugins |
| Chrome | scoop tool | Popular browser with built-in pentest plugins |

⚡ System Optimization

| Tool Name | Type | Description |
| ------------ | ----------- | ---------------------------------- |
| Wub | scoop tool | Disable system updates |
| CMWTAT | scoop tool | Windows system acti tool |
| WiseCare365 | portable | System junk cleaning tool |
| Dism++ | portable | System cleaning tool using Dism |
| UniGetUI | scoop tool | GUI Scoop update management tool |

♾️ Service Connection

| Tool Name | Type | Description |
| ------------- | ----------- | --------------------------------------------------- |
| DBeaver | scoop tool | Open-源码 free SQL 数据库 客户端 |
| Laragon | scoop tool | PHP, Tomcat 服务端 |
| mRemoteNG | scoop tool | SSH remote connection 工具 |
| WinSCP | scoop tool | SFTP file transfer 工具 |
| MobaXterm | scoop tool | Multi-协议 remote connection 工具 |
| Redis-cli | scoop tool | Redis command-line 客户端 |
| Telnet | built-in | Built-in Telnet 客户端 |
| OpenSSH | scoop tool | Built-in SSH command-line 客户端 |
| HeidiSQL | scoop tool | 界面 数据库 客户端 |
| WindTerm | scoop tool | SSH, SFTP, Telnet remote connection 工具 |
| HTTPServer | scoop tool | Single-file HTTP 服务端 工具 for easy file transfer |
| GoHTTPServer | scoop tool | HTTP 服务端 工具 written in Go |
| OpenVPN | installer | OpenSSL-based VPN, simple and easy to use |

💡 Information Gathering

#### 🖥️ Host Discovery

| Tool Name | Type | Description |
| -------------- | ----------- | ------------------------------------------------------------------ |
| Fping | scoop tool | Enhanced Ping command, intended to replace Windows built-in ping |
| Masscan | scoop tool | Fast port scanner for scanning large numbers of IPs and ports |
| TCPing | scoop tool | Test TCP connectivity and response time |
| Arp-Ping | scoop tool | Command-line 工具 to find MAC address for a given IP via ARP |
| NetCat | scoop tool | Read/write data across networks using TCP/UDP, the Swiss Army knife|
| NETworkManager | scoop tool | Windows 网络 management 工具 |

#### 📋 Domain Info Gathering

| Tool Name | Type | Description |
| ------------------ | ----------- | ------------------------------------------------------------------ |
| Whois | scoop tool | Whois query command-line 工具 |
| Subfinder | scoop tool | Open-源码 工具 focused on subdomain collection |
| DnsX | scoop tool | Powerful multipurpose DNS toolkit |
| Layer Subdomain | scoop tool | Domain query 工具, provides subdomain search services |
| KsubDomain | scoop tool | Stateless subdomain brute-forcing 工具 |
| Ct | scoop tool | Simple and easy-to-use domain brute-forcing 工具 |
| JSFinder | scoop tool | Extract URLs and subdomains from JS files on websites |
| Knock | scoop tool | Python script for comprehensi scanning using wordlists |

#### 🪬 Comprehensi Tools

| Tool Name | Type | Description |
| ----------- | ----------- | ------------------------------------------------------------------ |
| OneForAll | scoop tool | Powerful subdomain collection 工具 |
| Mitan | scoop tool | Recon 工具 with asset info, subdomain brute, search syntax, mapping, fingerprint, info gathering, file/port scan, weight check, password dict, etc. |
| Amass | scoop tool | Open-源码 subdomain info gathering 工具 |
| Gobuster | scoop tool | Open-源码 工具 for directory/file brute-forcing in web apps |
| Argus | scoop tool | Powerful, flexible, easy-to-use open-源码 recon toolkit |
| Bbot | scoop tool | Recursi resource intelligence 工具 |

#### 🔬 Google Hacking

| Tool Name | Type | Description |
| -------------- | -------------------| ------------------------------------------------------------------ |
| GooFuzz | scoop tool | Fuzzing 工具 based on OSINT methods |
| GHDB | online tool | Google Hacking 数据库 for finding public info for pentesters |
| Pagodo | scoop tool | Automates Google Hacking DB scraping and searching |
| Google-Dorks | scoop tool, local | Ad search/query techniques for Google search 引擎 |
| SearchDiggity | scoop tool | Google Hacking Diggity, uses search engines to quickly find weaknesses and sensitive data |
| LazyDork | online tool | Online generator for Google Dorking search syntax |

#### 🗜️ Data Leak Check

| Tool Name | Type | Description |
| ------------ | ----------- | ------------------------------------------------------------------ |
| GitHacker | scoop tool | Detects git 源码 代码 leaks and downloads site 源码 代码 |
| GitGraber | scoop tool | Python3 工具 for real-time GitHub monitoring for sensitive data |
| Gitrob | scoop tool | Open-源码 recon 工具 for finding sensiti in public repos |
| GitMiner | scoop tool | Powerful GitHub data mining 工具 based on Python |
| S | scoop tool | S 代码 leak dumper for all |
| Gowitness | scoop tool | Website screenshot 工具 using Chrome Headless (Golang) |

🛸 Port Scanning

#### 📡 Scanning Tools

| Tool Name | Type | Description |
| ------------- | ----------- | --------------------------------------------------------------- |
| Goby | scoop tool | Port scanning, asset collection, exploitation |
| Masscan | scoop tool | Fast port scanner for scanning large numbers of IPs and ports |
| NimScan | scoop tool | Fast port scanner |
| TxPortMap | scoop tool | Port scanning and banner identification 工具 |
| Scaninfo | scoop tool | |
| Yujian Scanner| scoop tool | Yujian port scanning 工具 |
| Naabu | scoop tool | Fast, stable, easy-to-use port scanner written in Go |
| Zenmap | scoop tool | Powerful port scanner (but slow) |
| gogo | scoop tool | Highly controllable, extensible automation 引擎 for red teams |

#### 🌐 Online Scanning

| Tool Name | Type | URL |
| -------------- | ----------- | --------------------------------------------------------------- |
| Pentest-Tools | online tool | |
| Nmap Online | online tool | |
| HideMyName | online tool | |
| Rookie Tools | online tool | |
| PostJson | online tool | |
| ProxySeller | online tool | |
| PortScanners | online tool | |
| WhatisMyIP | online tool | |

🌐 Cyber Space Engines

#### 🌐 Online Search

| Tool Name | Type | URL |
| ----------- | ----------- | ------------------------------------|
| Shodan | online tool | |
| Censys | online tool | |
| ZoomEye | online tool | |
| GreyNoise | online tool | |
| Netlas.io | online tool | |
| FOFA | online tool | |
| Quake | online tool | |
| Hunter | online tool | |
| ODIN | online tool | |

#### 🧭 Mapping Tools

| Tool Name | Type | Description |
| ----------------| ----------- | ------------------------------------------------------------------ |
| Lightning Searcher | scoop tool | Cyberspace search 引擎, 界面 (Mac/Windows) recon info gathering |
| AsamF | scoop tool | Integrated search 工具 for multiple asset mapping platforms |
| uncover | scoop tool | Quickly find exposed hosts on the Internet using multiple engines |
| FlashSearch | scoop tool | User-friendly multi-platform asset mapping 客户端 |

✈️ Proxy & Packet Capture

| Tool Name | Type | Description |
| ---------- | ----------- | ------------------------------------------------------------------ |
| Broxy | scoop tool | HTTP/HTTPS open-源码 intercepting proxy written in Go |
| Hetty | scoop tool | HTTP toolkit for security research |
| Mitmproxy | scoop tool | HTTP proxy supporting SSL |
| Yakit | scoop tool | Highly integrated Yak language security testing platform |
| Wireshark | scoop tool | Popular 网络 packet analysis software, detailed packet info |
| ProxyPin | scoop tool | MITM-based packet capture 工具, mainly for mobile app security |
| Burpsuite | scoop tool | One of the best web application testing tools |
| ZapProxy | scoop tool | Open-源码 web application security scanner |

🌀 Fingerprint Recognition

#### 🌐 Online Recognition

| Tool Name | Type | URL |
| ------------- | ----------- | --------------------------------------|
| WhatCMS | online tool | |
| Yunxi | online tool | |
| 360Finger-P | online tool | |
| Tide Finger | online tool | |
| WhatWeb | online tool | |

#### 👣 Fingerprint Tools

| Tool Name | Type | Description |
| ------------- | ----------- | ------------------------------------------------------------------ |
| WebAnalyze | scoop tool | Go of Wappalyzer |
| TideFinger | scoop tool | Fingerprint 工具 integrating multiple web indicator databases |
| EHole3.0 | scoop tool | Red team system fingerprint detection 工具 |
| Dismap | scoop tool | Asset discovery and identification, fast web fingerprint recognition|
| pyxis | scoop tool | Auto-identifies HTTP/HTTPS, gets headers, status, size, time, fingerprint |
| Scan4all | scoop tool | Official vuls scan: 15000+ PoC, 23 password cracks, 7000+ web fingerprints, 146 protocols, 90000+ port rules |
| WhatWeb | scoop tool | Powerful open-源码 工具 for web app/服务端 tech fingerprinting |
| CMSeek | scoop tool | CMS detection/exploitation, supports 180+ CMS (WordPress, Joomla, Drupal) |
| Obser | scoop tool | Cross-platform community web fingerprint 工具 |
| P1finger | scoop tool | Key asset fingerprint 工具, identifies systems via HTTP request |
| HFinger | scoop tool | Fingerprint 工具 for malicious HTTP requests, based on Tshark, Python3 |
| xapp | scoop tool | Web fingerprint recognition 工具 |

📦️ Webshell

| Tool Name | Type | Description |
| ------------------ | ----------- | ------------------------------------------------------------------ |
| Behinder | scoop tool | "Bingxie" dynamic binary encrypted website management 客户端 |
| Bantam | scoop tool | PHP shell management 工具 |
| Godzilla | scoop tool | Godzilla WebShell management 工具 |
| Pyshell | scoop tool | Python shell management 工具 |
| Scorpio Priv Tool | scoop tool | WebShell 客户端 using Bingxie encrypted traffic |
| Weevely | scoop tool | Webshell management 工具 |
| AntSword | scoop tool | Chinese AntSword loader, built-in app store |
| Awsome-shells | scoop tool | Reverse shell collection |
| Webshell | scoop tool | WebShell collection |
| Webshell_Generate | scoop tool | Generate A webshells |
| Youhun | scoop tool | New-gen Webshell manager, compatible with AntSword/Bingxie PHP |
| SharPyShell | scoop tool | ASP.NET Webshell for C# web apps |

📂 Directory Brute

| Tool Name | Type | Description |
| ------------- | ----------- | ------------------------------------------------------------------ |
| Ffuf | scoop tool | Fast web fuzzer written in Go |
| Dirsearch | scoop tool | 工具 for disco hidden directories/files on web servers |
| Gobuster | scoop tool | Open-源码 directory/file brute-forcing 工具 for web apps |
| WebPathBrute | scoop tool | 7kbscan-WebPathBrute, web path brute-forcing 工具 |
| HTTPX | scoop tool | Full-featured HTTP 客户端 for Python3 |
| Gospider | scoop tool | Fast web crawler written in Go |
| Spray | scoop tool | Next-gen directory brute-forcing solution |
| DirBuster | scoop tool | Multithreaded Java app for brute-forcing web ser/files |
| Feroxbuster | scoop tool | Fast, simple, recursi discovery 工具 in Rust |
| Katana | scoop tool | Next-gen crawler 框架 |
| URLFinder | scoop tool | Fast, comprehensive page info extractor for JS, URLs, sensitive info|

🔐 Password Cracking

| Tool Name | Type | Description |
| --------------- | -------------------| ------------------------------------------------------------------ |
| Hashcat | scoop tool | Password cracker in C, supports brute-forcing many hash algorithms |
| John | scoop tool | Fast password brute-forcing 工具 |
| johnny | scoop tool | 界面 of John the Ripper |
| Psudohash | scoop tool | Password list generator for brute-force attacks |
| Wordlists | scoop tool, local | Kali built-in wordlists |
| Weakpass | online tool | online weak password search |
| HashCalculator | scoop tool | Hash calculation 工具, batch calc//find duplicates/change hash|
| Boom | scoop tool | Smart web weak password brute-forcer/detector based on headless browser |
| Hydra | scoop tool | Fast brute-force 工具 for system login passwords |
| SNETCracker | scoop tool | Super weak password checker |
| SecLists | scoop tool, local | Password dictionary for pentesters |

🪲 Scanning

| Tool Name | Type | Description |
| ------------ | ----------- | ------------------------------------------------------------------ |
| Nuclei | scoop tool | Very fast and easy-to-use scanner |
| Xray | scoop tool | Community of Xray, supports acti scanning, flexible POC |
| Xray-GUI | scoop tool | 界面 for Xray scanner |
| SiteScan | scoop tool | All-in-one 工具 for pentest info gathering |
| Scaninfo | scoop tool | Open-源码 fast scanner for red team internal/external scanning |
| OS | scoop tool | Free security scanner by Google (Dec 2022) |
| Afrog | scoop tool | High-performance, fast, stable, customizable PoC scanner |
| Nikto | scoop tool | Open-源码 web scanner, tests for 2600+ dangerous files/CGI/etc |
| Zed Proxy | scoop tool | Open-源码 web application security scanner |
| Scan4all | scoop tool | 15000+ PoC, 23 password cracks, 7000+ fingerprints, 146 protocols, 90000+ port rules |
| Wscan | scoop tool | Web security scanner |
| Wavely | scoop tool | Nuclei 界面 PoC management 工具, auto-integrates Nuclei PoCs |
| Vscan | scoop tool | Open-源码, lightweight, fast, cross-platform web scanner |
| | scoop tool | Enhanced Vscan, port scan, fingerprint, directory fuzz, vuln scan |
| Wapiti3 | scoop tool | Open-源码 web app scanner |
| EZ | scoop tool | All-in-one info gathering, port scan, brute, URL crawler, fingerprint, passive scan |
| Dismap | scoop tool | Asset discovery and identification, fast web fingerprinting |
| oFx | scoop tool | Batch web scanning 框架 |
| xpoc | scoop tool | Lightweight, cross-platform PoC 框架 by Chaitin Tech |
| F-vuln | scoop tool | Automated scanner for daily security, pentesters, red teams |

🔎 Search

#### 🌐 Online Search

| Tool Name | Type | URL |
| -------------- | ----------- | --------------------------------------------|
| SPLOITUS | online tool | |
| OS | online tool | |
| C | online tool | |
| Exploit-DB | online tool | |
| | online tool | |
| C | online tool | |
| Pentest-Tools | online tool | |
| Rapid7 | online tool | |
| | online tool | |

#### 🔍 Search Tools

| Tool Name | Type | Description |
| -------------------- | ----------- | ------------------------------------------------------------------ |
| GetSploit | scoop tool | Command-line search/download 工具 for DB, inspired by searchsploit |
| Go-Exploitdb | scoop tool | Go-based exploit-db search 工具 |
| Searchsploit | scoop tool | Command-line search 工具 for Exploit-DB |
| | scoop tool | Rewritten c, open-源码 工具 for local CVE DB |

🧿 Common

#### 🛰️ XSS Scanning

| Tool Name | Type | Description |
| --------- | ----------- | ------------------------------------------------------------------ |
| XSStrike | scoop tool | Ad XSS detection 工具 |
| XSSor2 | scoop tool | XSS exploitation assistant 工具 |
| Dalfox | scoop tool | Open-源码 XSS scanner |
| Toxssin | scoop tool | CLI and payload generator for XSS exploitation |
| X-Recon | scoop tool | Automated XSS reconnaissance 工具 |
| PwnXSS | scoop tool | XSS scanning/exploitation 工具 |
| LOXS | scoop tool | Scanner for SQLi, CRLF, XSS, LFi, OpenRedirect |

#### 💉 SQL Injection

| Tool Name | Type | Description |
| --------------------------- | ------------------- | ------------------------------------------------------------------ |
| Sqlmap | scoop tool | SQL injection scanner/exploitation 工具 |
| SSQLInjection | scoop tool | Super SQLi 工具, HTTP packet-based SQLi 工具 |
| SQL-Injection-Payload-List | scoop tool, local | SQL injection payload list |
| NoSQLMap | scoop tool | NoSQL 数据库 exploitation 工具 |
| Ad | scoop tool, local | Ad SQLi query cheatsheet |
| SQLMapCG | online tool | SQLmap command generator |

#### 🔫 Injection Related

| Tool Name | Type | Description |
| ------------ | ----------- | ------------------------------------------------------------------ |
| Commix | scoop tool | Automated command injection exploitation 工具 |
| SSTImap | scoop tool | Interactive SSTI detection 工具 |
| Shellfire | scoop tool | Exploitation 工具 for command/LFI/RFI/SSTI injection |
| SSRFmap | scoop tool | Automated SSRF fuzzing/exploitation 工具 |
| XXEinjector | scoop tool | Automated XXE exploitation 工具 |
| CRLFsuite | scoop tool | CRLF injection (HTTP response splitting) scanner |

#### 🗂️ File Operations

| Tool Name | Type | Description |
| ----------- | ----------- | ------------------------------------------------------------------ |
| LFISuite | scoop tool | Local file inclusion exploitation 工具 |
| Fuxploider | scoop tool | File upload scanner/exploitation 工具 |
| LFIMap | scoop tool | Local file inclusion discovery/exploitation 工具 |

#### ♨️ Deserialization Exploitation

| Tool Name | Type | Description |
| ---------------------------- | ----------- | ------------------------------------------------------------------ |
| Ysoserial-GUI | scoop tool | 界面 for Ysoserial exploitation 工具 |
| Ysomap | scoop tool | Ja exploitation 框架 |
| JYso | scoop tool | Ysoserial & JNDIExploit 工具, supports high-/WAF/RASP bypass|
| Ysoserial | scoop tool | PoC generator for unsafe Ja deserialization |
| JNDI-Injection-Exploit-Plus | scoop tool | JNDI link generator and backend service 工具 |
| PPPYSO | scoop tool | Ja PoC generator |
| Deswing | scoop tool | 界面 Ja 工具, integrates Ysoserial |
| JNDI-Inject-Exploit | scoop tool | JNDI injection testing 工具 |

#### ⚓ Database Exploitation

| Tool Name | Type | Description |
| ---------------- | ----------- | ------------------------------------------------------------------ |
| MDUT | scoop tool | Multi-数据库 exploitation 工具 |
| SqlKnife | scoop tool | SQL Ser check 工具 for CLI |
| Databasetools | scoop tool | Automated pri escalation 工具 for databases (Go) |
| TeamIDE | scoop tool | Integrated management for MySQL, Oracle, Kingbase, DM, Shentong, SSH, FTP, Redis, Zookeeper, Kafka, Elasticsearch, MongoDB, etc. |
| Sylas | scoop tool | Comprehensi exploitation 工具 |
| SharpSQLTools | scoop tool | Upload/download files, xp_cmdshell/sp_oacreate command execution, CLR assembly loading |
| SharpSQLToolsGU | scoop tool | 界面 for SharpSQLTools |
| RedisEXP | scoop tool | Redis exploitation 工具 |

💎 Special

#### 🗳️ Comprehensive OA Tools

| Tool Name | Type | Description |
| ---------------- | ----------- | ------------------------------------------------------------------ |
| MYExploit | scoop tool | OA product exploitation 工具 |
| Apt_t00ls | scoop tool | High-risk exploitation 工具 |
| I-Wanna-Get-All | scoop tool | OA application exploitation 工具 |
| OA-EXPTOOL | scoop tool | OA all-in-one 工具, includes nearly 20 OA scanners |

#### 🗃️ CMS

| Tool Name | Type | Description |
| -------------- | ----------- | ------------------------------------------------------------------ |
| CMSeek | scoop tool | CMS detection/exploitation, supports 180+ CMS |
| FrameScan-GUI | scoop tool | 界面 CMS detection 框架 (Python3 + PyQt) |
| FrameScan | scoop tool | CLI CMS detection 框架 |

#### ⚖️ Middleware

| Tool Name | Type | Description |
| --------------------- | ----------- | ------------------------------------------------------------------ |
| Spring_All_Reachable | scoop tool | Spring all-in-one exploitation 工具 |
| WeblogicTool | scoop tool | 界面 工具 for Weblogic , detection, command exec, memory shell, password decryption |
| SBSCAN | scoop tool | Penetration testing 工具 focused on Spring 框架 |
| FastjsonScan | scoop tool | Fastjson scanner, detects , dependencies, autoType status |
| Hyacinth | scoop tool | Ja collection 工具 |
| JenkinsExploit | scoop tool | Jenkins comprehensi exploitation 工具 |
| SpringBoot | scoop tool | SpringBoot penetration 框架, high-risk Spring |
| SpringBoot-Scan-GUI | scoop tool | 界面 SpringBoot-Scan exploitation 工具 |
| ShiroAttack2 | scoop tool | Shiro deserialization all-in-one 工具 |
| shiroEXP | scoop tool | Shiro deserialization all-in-one 工具 |

#### 🔭 Other Exploitation

| Tool Name | Type | Description |
| ---------------- | ----------- | ------------------------------------------------------------------ |
| NacosExploit | scoop tool | Nacos 界面 工具, default password, SQLi, auth bypass, deserialization detection/exploitation |
| NacosExploitGUI | scoop tool | NacosExploit 界面 工具 |
| | scoop tool | Comprehensi 工具 for |

🛰️ Penetration Frameworks

| Tool Name | Type | Description |
| -------------------- | ----------- | ------------------------------------------------------------------ |
| Metasploit | scoop tool | Modular exploitation 框架 |
| POC-T | scoop tool | Plugin-based concurrent pentest 框架 |
| MYExploit | scoop tool | OA product exploitation 工具 |
| Yakit | scoop tool | Highly integrated Yak language security testing platform |
| MSFVenom | scoop tool | MSF modular exploitation 框架 payload generator |
| XieBroC2 | scoop tool | C2 for pentest, Lua plugin, domain fronting, config, sRDI, file/process/memory mgmt, screenshot, proxy, group mgmt |
| TeamSer | scoop tool | C2 for pentest, Lua plugin, domain fronting, config, sRDI, file/process/memory mgmt, screenshot, proxy, group mgmt |
| Sli | scoop tool | Open-源码 cross-platform ad simulation/red team 框架 (服务端) |
| WoodPecker | scoop tool | High-risk detection and deep exploitation 框架 |
| Pocsuite3 | scoop tool | Open-源码 remote testing 框架 |
| DudeSuite | scoop tool | Dude Suite 网络 security tools |
| AuxTools | scoop tool | 界面 pentest assistant tools |
| Railgun | scoop tool | 界面 penetration 工具 |
| Cobaltstrike | scoop tool | Commercial pentest 工具 - Cobalt Strike |

🖱️ Persistence

| Tool Name | Type | Description |
| ------------------------ | ----------- | ------------------------------------------------------------------ |
| PrintMyShell | scoop tool | Auto-generate reverse shell Python scripts |
| Girsh | scoop tool | Auto-launch fully interacti shell |
| NatPass | scoop tool | Host management 工具, supports web shell and web desktop |
| Govenom | scoop tool | Generate MSFVenom shells in command line :) |
| Wmiexec-Pro | scoop tool | A in lateral mo |
| Re | scoop tool | SSH-based reverse shell management 工具 |
| Re | scoop tool | Hosted reverse shell generator with many features |
| HackerPermKeeper | scoop tool | Linux persistence 工具 |
| SharPersist | scoop tool | Windows persistence toolkit in C# |

🛂 A & RAT

| Tool Name | Type | Description |
| ---------------- | -------------------| ------------------------------------------------------------------ |
| ShellCodeLoader | scoop tool | Shellcode loader |
| MazteuszEx | scoop tool | A generator |
| shellter | scoop tool | Dynamic shellcode injection 工具 |
| Yanri | scoop tool | A executor generator |
| MaLoader | scoop tool | A trojan generator based on Tauri+Rust |
| S-inject | scoop tool | A DLL/Shellcode injector for Windows, 界面 supported |
| S-inject_gui | scoop tool | A DLL/Shellcode injector for Windows, 界面 supported |
| XG_NTAI | scoop tool | Webshell A, encrypted traffic |
| Tide A | online tool | |
| BypassAntiVirus | scoop tool, local | Remote control A articles and tools |
| RingQ | scoop tool | Post-exploitation A 工具, supports bypassing AV/EDR/360/Defender |
| LoaderFly | scoop tool | Fast A trojan generator for red teamers |
| BinarySpy | scoop tool | Manual/auto patch shellcode to binary for A |
| ZeroEye | scoop tool | Automated white file finder, scans EXE imports, lists DLLs, filters non-system DLLs |
| EXEToShellcode | scoop tool | Post-exploitation A 工具 based on PE Patch, x64 supported |
| sgn | scoop tool | Polymorphic binary encoder for offensi research |
| donut | scoop tool | Generates x86, x64, or AMD64+x86 shellcode |
| AniYa | scoop tool | AniYa-界面 A 框架 |
| ByPassBehinder | scoop tool | Bingxie WebShell A generator |
| ByPassGodzilla | scoop tool | Godzilla WebShell A generator |

⌨️ Command Control

| Tool Name | Type | Description |
| -------------------- | ----------- | ------------------------------------------------------------------ |
| Godoh | scoop tool | A DNS-o C2 |
| SharpStrike | scoop tool | Post-exploitation research 工具 based on C# |
| Merlin-Server | scoop tool | RAT software de in Go |
| AsyncRAT | scoop tool | Open-源码 remote management 工具 |
| XieBroC2-TeamServer | scoop tool | C2 for pentest, Lua plugin, domain fronting, config, sRDI, file/process/memory mgmt, screenshot, proxy, group mgmt |
| PSRansom | scoop tool | PowerShell-based C2 工具 - 客户端 |
| PSRansom-C2Server | scoop tool | PowerShell-based C2 工具 - 服务端 |
| Sli | scoop tool | Open-源码 cross-platform ad simulation/red team 框架 (客户端) |
| Sli | scoop tool | Open-源码 cross-platform ad simulation/red team 框架 (服务端) |
| Re | scoop tool | Reverse shell command generator in Go |
| XieBroC2 | scoop tool | C2 for pentest, Lua plugin, domain fronting, config, sRDI, file/process/memory mgmt, screenshot, proxy, group mgmt |
| Meterpeter | scoop tool | C2 PowerShell command and control 框架 with built-in commands |
| RedGuard | scoop tool | C2 frontend traffic control 工具, evades blue team, AV, EDR checks |

⌚ Pri Escalation

#### 🧰 Local Tools

| Tool Name | Type | Description |
| -------------------- | ----------- | ------------------------------------------------------------------ |
| GTFOBLookup | scoop tool | Offline command-line lookup utility for GTFOBins, LOLBAS, WADComs, HijackLibs |
| Linux-exp-Suggester | scoop tool | [Upload to target] Automated 工具 to search known based on Linux kernel |
| Win-Kernel-EXP | scoop tool | Windows pri escalation collection |
| Lin-Kernel-EXP | scoop tool | Linux pri escalation exploits |
| BeRoot | scoop tool | Powerful post-exploitation 工具, focuses on common misconfigurations |
| WinPEAS | scoop tool | [Upload to target] Search for pri escalation paths in Windows |
| LinPEAS | scoop tool | [Upload to target] List all possible pri escalation methods on Linux |
| PrintNotifyPotato | scoop tool | [Upload to target] Pri escalation using PrintNotify COM service |
| Moriarty | scoop tool | [Upload to target] Enumerate missing KBs, detect , suggest Windows pri escalation |

#### 🌐 Online Pri Escalation

| Tool Name | Type | URL |
| ------------- | ----------- | -----------------------------------|
| GTFOBins | online tool | |
| LOLBAS | online tool | |
| WADComs | online tool | |
| Hijack Libs | online tool | |
| Tide PE | online tool | |
| Aurora | online tool | |

🚀 Tunnel Proxy

#### 🛩️ Multi-le

| Tool Name | Type | Description |
| ------------------ | ----------- | ------------------------------------------------------------------ |
| Termite | scoop tool | Multi-platform, bidirectional cascading between jump hosts, built-in shell management |
| Venom | scoop tool | Multi-le 工具 designed for pentesters, de in Go |
| Stowaway | scoop tool | Multi-le 工具 written in Go for pentesters |
| Rport | scoop tool | Remote management 工具, supports multi-le |
| Rakshasa_Fullnode | scoop tool | Rakshasa control node - powerful multi-le in Go, designed for multi-le and internal penetration |
| Rakshasa_Node | scoop tool | Rakshasa regular node - powerful multi-le in Go, designed for multi-le and internal penetration |

#### 🚇 Internal Tunnels

| Tool Name | Type | Description |
| ---------------- | ----------- | ------------------------------------------------------------------ |
| Frps | scoop tool | High-performance reverse proxy for internal penetration, supports TCP, UDP, HTTP, HTTPS, P2P |
| NPS | scoop tool | Lightweight, high-performance, powerful internal penetration proxy 服务端 |
| GoProxy | scoop tool | High-performance HTTP, HTTPS, WebSocket, TCP, SOCKS5 proxy 服务端 |
| reGeorg | scoop tool | HTTP proxy 工具 in Python, impro of reDuh |
| Neoreg | scoop tool | reGeorg refactored project, impro, avoids signature detection |
| Gost | scoop tool | Secure tunnel implemented in Go |
| Ligolo-ng_Agent | scoop tool | Simple, lightweight, fast 工具 for pentesters to establish tunnels via tun interface (no SOCKS) |
| Chisel | scoop tool | Fast TCP/UDP tunnel using HTTP transport |
| Suo5-GUI | scoop tool | High-performance HTTP proxy tunnel 工具 - 界面 |
| Neutrino-Client | scoop tool | Neutrino proxy 客户端, open-源码 internal penetration 工具 based on Netty |
| Neutrino-Server | scoop tool | Neutrino proxy 服务端, open-源码 internal penetration 工具 based on Netty |
| Ngrok | scoop tool | Reverse proxy, establishes secure channel between public endpoint and local web 服务端 |
| Suo5 | scoop tool | High-performance HTTP proxy tunnel 工具 |
| Rathole | scoop tool | Secure, stable, high-performance internal penetration 工具 in Rust |
| Ligolo-ng_Proxy | scoop tool | Simple, lightweight, fast 工具 for pentesters to establish tunnels via tun interface (no SOCKS) |

🏠 Internal Penetration

#### ⚡ Internal Forwarding

| Tool Name | Type | Description |
| ------------ | ----------- | ------------------------------------------------------------------ |
| NetCat | scoop tool | Read/write data across networks using TCP/UDP, the Swiss Army knife|
| RustCat | scoop tool | Modern port listener and reverse shell 工具 for Linux, macOS, Windows |
| Socat | scoop tool | Powerful forwarding 工具 for different interfaces |
| websocat | scoop tool | Open-源码 command-line 工具 in Rust for WebSocket connections |
| PortForward | scoop tool | Port forwarding 工具 in Go, sol/external 网络 issues |
| Proxychains | scoop tool | Powerful terminal proxy interception 工具 |

#### 🩺 Internal Scanning

| Tool Name | Type | Description |
| ------------ | ----------- | ------------------------------------------------------------------ |
| Fscan | scoop tool | Internal comprehensi, one-click automation, full co |
| LadonGo | scoop tool | Open-源码 internal penetration scanner 框架, easy C/B/A segment detection |
| Netspy | scoop tool | Fast internal 网络 segment detection 工具 |
| FscanParser | scoop tool | 界面 工具 for processing Fscan output results |
| NBTScan | scoop tool | Windows 网络 协议 scanner, gets NetBIOS names and info |
| Kscan | scoop tool | Comprehensi in Go, port scan, 协议 detection, fingerprint, brute force |
| Qscan | scoop tool | Lightweight comprehensi scanner, TCP scan, service identification, |
| Ser | scoop tool | High-efficiency concurrent 网络 scanner and service probe in Go |
| Searchall | scoop tool | Powerful sensitive info search 工具, quickly finds usernames, passwords, accounts, credentials, browser passwords |
| ScanLine | scoop tool | Fast internal scanning 工具 |
| Cube | scoop tool | Internal penetration testing 工具, weak password brute, info gathering, scanning |
| Template | scoop tool | Internal penetration scanning 工具 |
| Yasso | scoop tool | Powerful internal penetration assistant toolkit - supports RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM brute force, fast port scanning, powerful web fingerprinting, one-click exploitation of built-in services |

#### ⏳ Domain Penetration

| Tool Name | Type | Description |
| ----------- | ----------- | ------------------------------------------------------------------ |
| SharpHound | scoop tool | Collect info in Windows domain, computer objects, group memberships, permissions |
| BloodHound | scoop tool | relationships in domain en |
| Impacket | scoop tool | Python implementation of 网络 protocols, IP, TCP, ICMP, etc. |
| PingCastle | scoop tool | Quick Acti security assessment using risk assessment 框架 |
| ADExplorer | scoop tool | Domain info query 工具, standalone executable, lists domain structure, user accounts, computer accounts |
| BloodyAD | scoop tool | Powerful Acti pri escalation 框架 |
| AdFind | scoop tool | Very powerful info gathering 工具 in domain en |
| Rubeus | scoop tool | 工具 for Kerberos 协议 attacks, can initiate requests and import tickets |

📑 Credential Har

| Tool Name | Type | Description |
| ------------------- | ----------- | ------------------------------------------------------------------ |
| HackBrowserData | scoop tool | Browser data decryption 工具 (passwords, history, cookies, bookmarks), supports Chrome, Firefox, Edge, 360, QQ, etc. |
| LaZagne | scoop tool | Powerful password recovery and forensics 工具, extracts passwords stored on local computer |
| Kerbrute | scoop tool | Popular enumeration 工具, abuses Kerberos pre-authentication for brute force and enumeration |
| SharpXDecrypt | scoop tool | Xshell all- password recovery 工具 |
| RouterPassView | scoop tool | Retrie and passwords saved in router configuration files |
| Mimikatz | scoop tool | Very powerful security 工具 in C, extracts plaintext passwords, hashes, PINs, Kerberos tickets from memory |
| NetPass | scoop tool | View Windows computer credential passwords 工具 |
| ProcDump | scoop tool | Command-line utility for monitoring CPU spikes and generating crash dumps |
| PassRecEnc | scoop tool | Free password recovery 工具 for Windows programs, Chrome, Firefox, Edge, IE, Outlook, 网络 passwords, wireless keys, dial-up entries |
| WebBrowserPassView | scoop tool | Password for all major browsers, IE 4.0-8.0, Firefox, Chrome, Opera |

🧲

| Tool Name | Type | Description |
| ---------------- | ------------ | ------------------------------------------------------------------ |
| NetBird | scoop tool | Open-源码 网络 management platform built on WireGuard |
| Easytier | scoop tool | Simple, secure, decentralized remote networking solution, WireGuard compatible |
| Tailscale | scoop tool | networking 工具 based on WireGuard |
| Qv2ray | scoop tool | Cross-platform V2Ray 客户端 using Qt 框架, supports Windows, Linux, macOS |
| NekoBox | scoop tool | Multi-platform uni proxy 工具 based on sing-box |
| | scoop tool | V2Ray 客户端 for Windows, supports VMess, VLESS, Trojan, Socks, Shadowsocks, Hysteria2, Tuic |
| WireGuard | scoop tool | Extremely simple but fast and modern VPN |
| Open | installer | OpenSSL-based VPN, simple and easy to use compared to traditional VPN |
| Clash-Verge | scoop tool | Efficient desktop proxy software, designed for managing and enhancing Clash configurations |

System Screenshots

🌲 Tool Directory

!Directory

🌐 Chrome Extensions

!Chrome extensions

📡 Burpsuite/Metasploit

!Burpsuite

🛰️ Yakit

!Yakit

🛸 Goby

!Goby

项目信息

开发语言：未知

Star 数：3597

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing En on Mac M Chips展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。