mac-cyber-bootstrap - 针对网络安全、CTF和漏洞的完整macOS引导

项目说明

🛡️ mac-cyber-bootstrap

A one-shot macOS setup script for cybersecurity professionals, CTF players, and bug bounty hunters.

> For authorized testing, labs, and CTFs only. Run this only on machines you own or ha written permission to test.

---

What It Does

Bootstraps a fresh Mac into a fully-equipped security workstation in a single command. Handles e — package managers, CLI tools, GUI apps, Go/Python/Rust toolchains, wordlists, OSINT tools, and shell config — so you can focus on hacking, not setup.

v2.0.0 reorganizes e under ~/pentester/ for a clean workspace, adds a full OSINT suite, Blue Team/DFIR tooling, cloud security tools, reverse engineering tools, wireless tools, and fixes a pre-download bug reported by the community.

---

Requirements

| Requirement | Notes |
|---|---|
| macOS | Tested on macOS 13 and later |
| Apple Silicon or Intel | Script handles both Homebrew paths automatically |
| Admin access | Needed for Homebrew and Xcode CLT |
| Internet connection | Required throughout |

---

Quick Start

Or clone the repo first:

---

Workspace Layout

E li ~/pentester/ — no more scattered folders across your home directory.

---

What Gets Installed

🖥️ Core / Terminal

git · wget · curl · jq · tmux · fzf · ripgrep · bat · neovim · htop · btop · asciinema · glow

🔍 Recon / OSINT

nmap · masscan · amass · subfinder · httpx · nuclei · ffuf · gobuster · feroxbuster · thehar · recon-ng · dnsrecon · fierce · shodan · exiftool · spiderfoot

🕵️ OSINT Specific

sherlock · holehe · maigret · phoneinfoga · h8mail · ghunt · osintgram · maltego

🌐 Web / Bug Bounty

sqlmap · nikto · wafw00f · dalfox · jwt_tool · tplmap · arjun · smuggler · corscanner · zaproxy · XSStrike · LinkFinder · SecretFinder · crlfuzz · bxss

🔑 Credentials / Cracking

hashcat · john-jumbo · hydra · hcxtools · hcxdumptool · bitwarden-cli

🏢 Acti / Windows / SMB

impacket · e · kerbrute · BloodHound · CrackMapExec · NetExec · certipy-ad · pypykatz · Responder · mitm6 · ldapdomaindump · coercer · enum4linux-ng · smbmap · windapsearch

🔴 Red Team / C2

Sliver C2 · Metasploit · chisel · ligolo-ng · pwntools · LinPEAS/WinPEAS · SharpCollection

🔬 Reverse Engineering

Ghidra · radare2 · Cutter · binwalk · pwndbg · ROPgadget · YARA · capstone · unicorn · floss · capa

🔵 Blue Team / DFIR

· Zeek · Suricata · chainsaw · hayabusa · sigma · YARA-Rules · oletools · pdfid

☁️ Cloud Security

awscli · azure-cli · Pacu · ScoutSuite · CloudFox · ROADtools · TeamFiltration · s3scanner · enumerate-iam

📡 Wireless

aircrack-ng · hcxdumptool · bettercap

🖱️ GUI Apps

Burp Suite · Caido · Wireshark · Ghidra · Cutter · BloodHound · Maltego · Proxyman · Docker · Obsidian · Firefox · Tor Browser · Mullvad VPN · iTerm2 · VS Code · Bitwarden

🐍 Python (via pipx)

impacket · bloodhound-python · certipy-ad · netexec · pypykatz · · oletools · pacu · scoutsuite · sherlock · holehe · maigret · pwntools · mitmproxy · dirsearch · arjun · jwt_tool

🐹 Go Tools

Full tomnomnom suite · Full projectdiscovery suite · dalfox · puredns · ligolo-ng · cloudfox · hayabusa · ffuf and more

📚 Wordlists & Repos

SecLists → ~/pentester/wordlists/SecLists

assetnote wordlists → ~/pentester/wordlists/assetnote

PayloadsAllTheThings → ~/pentester/tools/PayloadsAllTheThings

nuclei-templates · PEASS-ng · SharpCollection · sigma · YARA-Rules · Responder · PowerSploit and more

---

Shell Aliases Added

| Alias | Description |
|---|---|
| pentester | cd ~/pentester |
| ctf | cd ~/pentester/labs |
| tools | cd ~/pentester/tools |
| wordlists | cd ~/pentester/wordlists |
| osint | cd ~/pentester/osint |
| reports | cd ~/pentester/reports |
| dumps | cd ~/pentester/memory-dumps |
| pcaps | cd ~/pentester/pcaps |
| nmapfull | nmap -sC -sV -p- --open |
| nmapquick | nmap -sC -s 1000 |
| rustscan | rustscan --ulimit 5000 |
| pyserver | python3 -m http.server 8000 |
| myip | Show your public IP |
| ports | List all listening ports |
| vol3 | Run from its venv |
| sherlock | Run sherlock username OSINT |
| reload | Reload your shell config |

---

After Running the Script

---

Manual / Special Cases

| Tool | Reason | Alternative |
|---|---|---|
| Mimikatz | Windows-only binary | Use pypykatz on macOS for offline analysis |
| Havoc C2 | Requires manual Linux build | Use Sliver C2 (auto-installed) |
| Nessus | Must install directly | tenable.com/downloads/nessus |
| Flameshot | Linux-oriented | Shottr, CleanShot X, or built-in macOS screenshots |

---

Errors & Partial Failures

The script uses set -Eeuo pipefail with per-tool error handling. If a single tool fails, it warns and continues. Check for [!] warnings when done.

---

License

MIT — use freely, contribute back.

---

Disclaimer

This script is intended for legal, authorized use only — your own machines, home labs, and CTF en. The authors are not responsible for misuse.

项目信息

开发语言：Shell

Star 数：128

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Full macOS bootstrap for cybersecurity, CTF & bug bounty展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。