SecTools - Tools & resources for offensive and defensive secu

项目说明

Introduction

<p align="center">
<img src="/docs/_images/sectoolsBanner.png">
<br>
<img src="
<img src="
An <a href=" target="_blank">@0xPGP</a> Project
</p>

<h4 align="center">
Tools & Resource center for offensive and defensi operations.
</h4>
<br>

A curated list of many tools and resources for both offensive and defensi teams. Please visit SecTools.io for our website of this repo. Found a resources that should be on here? Feel free to submit a pull request!

Defensi

| Sub-Category | Description |
| :--- | :--- |
| Asset Management | Keep track of your in. You can't protect what you don't see. |
| Auditing | Stay in compliance. |
| Courses | Training and courses to master your craft. Some of the below courses do offer professional certifications as add-ons to course purchase. |
| Endpoint Protection | Protect your endpoints. |
| Forensics | Uncover the dirty little secrets of a recovered HDD, Image, malware, and more. |
| Honeypots | Catch them with their hands/attacks sticky. |
| IDS/IPS | Intrusion Detection and Pre Systems. |
| Incident Response | Incident response tools, and resources when alarms pop off. |
| IOC | Indicators of compromise. Discover if you've been compromised. |
| Malware | All the malware you can wish for to reverse engineer. |
| Monitoring | Monitor your network, e-mail, packets, and infrastructure. |
| Operating Systems | Operating system's solely focused for defensi teams. |
| Phishing | Tools and resources for analyzing phishing attacks. |
| Threat Intel | Disco the threats begin. |

Offensi

| Sub-Category | Description |
| :--- | :--- |
| API | Tools and resources for pentesting against API endpoints. |
| Blogs | Reading material for offensi researchers. |
| Bug Bounty | Test out your skills against other hackers. Get paid for finding . |
| C2 | Command and Control tools and frameworks. |
| Cheat Sheets | Offensi cheat sheets. |
| Cloud | Disco and resources dedicated to hacking cloud platforms. |
| Collaboration | Disco and frameworks for red team collaboration. |
| Courses | Training and courses to master your craft. Some of the below courses do offer professional certifications as add-ons to course purchase. |
| Cracking | E you need to crack all the hashes. |
| CTF Offensive | Compete your hacking skills against others. |
| Data Exfiltration | Exfiltrate the data, and test your DLP. |
| Exploits | Gather all your exploits needed to pop that box. |
| Firewalls | Attack the castle doors. |
| Hardware | Grab some of the most used hardware within the penetration testing industry. |
| Linux | Tools and resources for popping those linux boxes. |
| Mobile | Tools and resources for pentesting on mobile applications. |
| Network | Sniff the network. Modify the packets. |
| Operating Systems | Operating system's solely focused for offensi teams. |
| Reconnaissance | Understand your target. Perform in-depth research and discover new attack surfaces. |
| Shells | Generating pre-built webshells to customizing your own. |
| Social Engineering | Manipulation techniques that exploits human error to gain private information, access, or . |
| Scanners | Disco fast, and automate some of the hea. |
| Web Application | Break that web application. |
| Windows | Mirosoft Windows pentesting tools and resources. |
| Wireless | Disco and resources for exploiting Wi-Fi, bluetooth, RFID, and more. |

Operation Security

| Sub-Category | Description |
| :--- | :--- |
| Anonymity | The quality or state of being anonymous. Seek out technologies and methods of remaining anonymous in the day and age of mass sur. |
| Anti-Forensics | Destroy your data. |
| Authentication | Secure your authentication methods with 2-Factor Authentication. |
| Burners | E for your temporary needs. |
| Communication | Protect your SMS messages, voice calls, and e-mails. Big brother is always watching. |
| Operating Systems | Hardening your operating system. |
| Password/Secret Managers | Secure your passwords, secrets, and notes. |
| Search Engines | Hardening your operating system. |

Purple Security

| Sub-Category | Description |
| :--- | :--- |
| Courses | Training and courses to master your craft. |
| Editors & | Tools for editing/ files. |
| Emulation | Emulate the ad. |
| Network | Network tools both offensive and defensi can utilize. |
| OSINT | Open-Source Intel. Get all the information needed for your target. |
| Passwords | 1,000+ default passwords. |
| Reverse Engineering | Reverse engineering tools both offensive and defensi can utilize. |
| Write-Ups | Write-ups both offensive and defensi can utilize. |

Xtras

| Sub-Category | Description |
| :--- | :--- |
| Music | Kick back relax and enjoy some entertainment. |
| Video | Talks, li, and presentations. |

Contributors

---

Shoutout to the following amazing indi for suggesting and adding resources!

Anonymous, 0xgnnr, 0xrom, Binary.rip, CyberLola, De, EightBitOni, GoProSlowYo, JR0ch17, projectdp, PaWNmUnCher, RySkill, , chadb\_n00b, footpics4sale, goldyautomation, halfamomo, p4r4n0ir, skyfire100, theGwar, and zuphzuph.

Social Media

---

| Organization | Hyperlink |
| :--- | :--- |
| Discord | |
| Twitter | |
| / |
| Twitch | |
| YouTube | |

项目信息

开发语言：未知

Star 数：8

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Tools & resources for offensive and defensive security operations.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。