Red-Teaming-Toolkit
by infosecn1nja
A curated collection of cutting-edge open-source security tools for red teamers and threat hunters, covering reconnaissance, initial access, and beyond.
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
Primary Use Case
This repository serves as a comprehensive resource for offensive security professionals and threat hunters by aggregating a wide array of open-source tools. It aims to streamline the adversary simulation process and aid in the development of detection and prevention controls by providing access to tools for various stages of an attack lifecycle.
- Comprehensive coverage of red teaming phases (Reconnaissance, Initial Access, Defense Evasion, etc.)
- Includes tools for OSINT, exploitation, and threat hunting
- Focuses on cutting-edge open-source security tools
- Facilitates adversary simulation
- Aims to improve detection and prevention capabilities
Installation
- Clone the repository: git clone https://github.com/infosecn1nja/Red-Teaming-Toolkit.git
- Navigate to the cloned directory: cd Red-Teaming-Toolkit
- Follow individual tool installation instructions as provided in their respective READMEs or linked URLs.
Usage
>_ RustScanThe Modern Port Scanner. Find ports quickly (3 seconds at its fastest). Run scripts through our scripting engine (Python, Lua, Shell supported).
>_ AmassIn-depth Attack Surface Mapping and Asset Discovery
>_ gitleaksGitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos.
>_ S3ScannerScan for open S3 buckets and dump the contents
>_ cloud_enumMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
>_ Recon-ngOpen Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
>_ busterAn advanced tool for email reconnaissance
>_ linkedin2usernameOSINT Tool: Generate username lists for companies on LinkedIn
>_ WitnessMeWeb Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
>_ pagodopagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
>_ AttackSurfaceMapperAttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
>_ SpiderFootSpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate.
>_ dnscandnscan is a python wordlist-based DNS subdomain scanner.
>_ spoofcheckA program that checks if a domain can be spoofed from. The program checks SPF and DMARC records for weak configurations that allow spoofing.
>_ LinkedIntLinkedIn Recon Tool
- Integrate this toolkit with automated attack simulation platforms to enhance red team efficiency.
- Use the reconnaissance tools in threat hunting to proactively identify attacker footholds and improve detection rules.
- Leverage the credential dumping and lateral movement tools for purple team exercises to test blue team detection and response capabilities.
- Continuously update and curate the toolkit with community contributions to stay ahead of emerging attacker techniques.
- Combine with SIEM and EDR solutions to correlate red team activities with detection alerts for comprehensive security posture assessment.
Docs Take 2 Hours. AI Takes 10 Seconds.
Ask anything about Red-Teaming-Toolkit. Installation? Config? Troubleshooting? Get answers trained on real docs and GitHub issues—not generic ChatGPT fluff.
3 free chats per tool • Instant responses • No credit card
Related Tools
Awesome-Hacking
Hack-with-Github/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
hackingtool
Z4nzu/hackingtool
ALL IN ONE Hacking Tool For Hackers
mitmproxy
mitmproxy/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
sqlmap
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
metasploit-framework
rapid7/metasploit-framework
Metasploit Framework
h4cker
The-Art-of-Hacking/h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org