cyber_toolkit_pro - Professional Cybersecurity Framework - Offensive &

项目说明

CyberToolkit Pro v2.5

Professional Cybersecurity Framework — Offensive & Defensi Toolkit

A modular, extensible framework for penetration testing, security assessment, and blue team operations. Inspired by Metasploit, Burp Suite, and lightweight SIEM architectures.

> 79 tools · 17 categories · MITRE ATT&CK Matrix · Offline CVE/C · Acti Canaries · Web Dashboard & TUI

---

⚡ Quick Start

---

🏗️ Architecture

---

🔴 Red Team Tools (17 modules)

| Category | Tool | Description |
|----------|------|-------------|
| Recon | dns_lookup | DNS A/MX/NS/TXT + SPF/DMARC analysis |
| Recon | subdomain_discovery | Multi-threaded subdomain brute force |
| Recon | whois_lookup | Socket-based WHOIS with referral |
| Recon | http_fingerprint | Security headers + tech detection |
| Scanning | port_scanner | 50-thread TCP scanner + banner grab |
| Scanning | nmap_ad | 6 nmap profiles + XML parsing |
| Scanning | ser | Protocol-specific service probes |
| Scanning | nse_runner | Nmap NSE script execution |
| Web | dir_bruteforce | Directory discovery + sensiti |
| Web | http_fuzzer | Parameter fuzzing with FUZZ marker |
| Web | sqli_tester | Safe SQLi detection (25+ error patterns) |
| Web | xss_tester | Reflected XSS detection (14 payloads) |
| Exploit | re | Multi-session reverse shell handler |
| Exploit | payload_generator | 9 payload types across 6 languages |
| Exploit | exploit_runner | Modular exploit framework |
| Passwords | wordlist_attack | HTTP/FTP dictionary attack |
| Passwords | hash_cracker | MD5/SHA1/SHA256 auto-detect cracker |
| Passwords | credential_checker | Cross-service credential reuse |

🔵 Blue Team Tools (12 modules)

| Category | Tool | Description |
|----------|------|-------------|
| Detection | anomaly_detector | Threshold-based anomaly detection |
| Detection | suspicious_ip_tracker | IP watchlist + frequency tracking |
| Detection | alert_system | Rule-based security alerting |
| Log Analysis | auth_log_parser | auth.log SSH/brute-force parsing |
| Log Analysis | web_log_parser | Apache/Nginx attack detection |
| Log Analysis | ssh_bruteforce_detector | Attacker profiling |
| Forensics | file_analyzer | Multi-hash + entropy + magic bytes |
| Forensics | string_extractor | Binary strings + suspicious patterns |
| Forensics | file_type_detector | Extension mismatch detection |
| SIEM | log_aggregator | Multi-source log normalization |
| SIEM | log_search | Regex-based log search |
| SIEM | alert_generator | 6 detection rules + JSON export |

🌐 OSINT Tools (4 modules)

| Tool | Description |
|------|-------------|
| email_har | Scrape emails from web pages, DNS, common prefixes |
| social_recon | Check username across 18 social/de |
| breach_checker | HIBP API + k-anonymity password hash checking |
| google_dorker | Generate 35+ Google dork queries (files, admin, errors) |

📡 Network Security (3 modules)

| Tool | Description |
|------|-------------|
| packet_sniffer | Capture & analyze traffic (tshark/tcpdump/netstat) |
| arp_detector | ARP spoofing & MitM detection |
| dns_monitor | DNS tunneling, DGA, and poisoning detection |

📶 Wireless Security (2 modules)

| Tool | Description |
|------|-------------|
| wifi_scanner | Scan WiFi networks, analyze encryption (Windows/Linux) |
| rogue_ap_detector | Evil twin & rogue AP detection with baseline comparison |

📊 Reporting (4 modules)

| Tool | Description |
|------|-------------|
| json_report | Structured JSON with se scoring |
| html_report | Dark-themed HTML with stat cards |
| executi | Non-technical executi (HTML) |
| compliance_report | PCI-DSS, HIPAA, SOC2, OWASP mapping |

---

🛡️ Security Features (v2.5)

Target Scope Enforcement

Encrypted Credential Vault

Immutable Audit Trail

SQLite Database

Multi-Target Campaigns

---

🧪 Testing

CI runs automatically on push Actions (.github/workflows/ci.yml).

---

🔌 Creating Custom Plugins

Drop a .py file into modules/ with TOOL_INFO and run():

The tool will be auto-discovered on next launch — no registration needed.

---

🐳 Docker

---

⚠️ Legal Notice

This framework is intended for authorized security testing only. Use exclusively in:

Unauthorized use against systems you do not own is illegal. The authors assume no liability for misuse.

---

📝 License

MIT License — See LICENSE file for details.

项目信息

开发语言：Python

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Professional Cybersecurity Framework - Offensive & Defensive Security Toolkit (31 tools, 10 categories)展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。