sectools - 🛡️ tools and experiments focused on offensive and

项目说明

sectools

![Go]()
![Rust]()
![Security]()

A curated monorepo of security tools built with Go and Rust.
Each tool is independently and released as a standalone binary.

---

Tools

| Tool | Language | Description |
|------|----------|-------------|
| banner-grabber | Go | TCP banner grabbing — probes open ports and captures service banners |
| port-knocking-scanner | Go | Detects port-knocking sequences using raw packet capture (gopacket/pcap) |
| subnet-scanner | Rust | Fast async TCP port scanner for hosts and CIDR subnets (tokio-powered) |
| sectools-common | Rust | Shared library with network utilities (IP , port parsing, banner grab) |

Project Structure

Installation

From source (Go tools)

From source (Rust tools)

Pre-built binaries

Download from Releases.
Each tool has its own release page with binaries for Linux, macOS, and Windows.

Build locally

Usage

banner-grabber

port-knocking-scanner

> Requires root / CAP_NET_RAW for raw packet capture.

subnet-scanner

De

Prerequisites

Common tasks

Release Process

Each tool is and released independently using the tag pattern:

Creating a release

The release workflow will:

1. Detect which tool to release from the tag prefix
2. Build cross-platform binaries (linux/darwin/windows × amd64/arm64)
3. Generate SHA-256 checksums
4. Create a GitHub Release with changelog, install instructions, and assets

history

Tags follow the con <tool>/v<major>.<minor>.<patch>:

| Tag example | Effect |
|-------------|--------|
| banner-grabber/v1.0.0 | Releases banner-grabber v1.0.0 |
| port-knocking-scanner/v0.2.0 | Releases port-knocking-scanner v0.2.0 |
| subnet-scanner/v0.1.0 | Releases subnet-scanner v0.1.0 |

Each tool's is fully independent — releasing one tool does not affect others.

CI / CD

| Workflow | Trigger | What it does |
|----------|---------|--------------|
| Go | Push/PR touching tools/, libs/netutil/, go.mod | golangci-lint → tests (race + co) → build |
| Rust | Push/PR touching libs/sectools-common/, tools/subnet-scanner/, Cargo.toml | clippy + fmt → tests → release build |
| Security | Push/PR to main + weekly cron | go, cargo-audit, Tri |
| Release | Tag <tool>/v* | Cross-compile, checksum, GitHub Release |

Contributing

See CONTRIBUTING.md for guidelines.

License

MIT — see LICENSE for details.

项目信息

开发语言：Go

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🛡️ tools and experiments focused on offensive and defensive security展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。