9.14. 运维

9.14.1. 流量

9.14.2. 堡垒机

9.14.3. 蜜罐

9.14.4. VPN Install

9.14.5. 隧道 / 代理

  • ngrok

  • rtcp

  • Tunna

  • gost GO Simple Tunnel

  • reDuh Create a TCP circuit through validly formed HTTP requests

  • reGeorg pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn

  • Neo-reGeorg Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

  • ABPTTS TCP tunneling over HTTP/HTTPS for web application servers

  • frp A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet

  • lanproxy 内网穿透工具

  • ligolo Reverse Tunneling made easy for pentesters

  • EarthWorm 是一款用于开启 SOCKS v5 代理服务的工具,基于标准 C 开发,可提供多平台间的转接通讯,用于复杂网络环境下的数据转发。

  • Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP

  • mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

  • nps a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal

9.14.6. 代理链

  • Netch Support Socks5, Shadowsocks, ShadowsocksR, V2Ray, Trojan proxies. UDP NAT FullCone

  • proxychains a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy

9.14.7. 资产管理

  • BlueKing CMDB 面向资产及应用的企业级配置管理平台

  • ARL 资产侦察灯塔系统

9.14.8. 合规

9.14.9. 风控

  • nebula

  • Liudao “六道”实时业务风控系统

  • aswan 陌陌风控系统静态规则引擎

9.14.10. SIEM

9.14.11. 安全运维

9.14.12. 系统监控

  • netdata Real-time performance monitoring

  • bcc Tools for BPF-based Linux IO analysis, networking, monitoring, and more

9.14.13. Windows

9.14.14. 网络测试

  • Toxiproxy A TCP proxy to simulate network and system conditions for chaos and resiliency testing

9.14.15. 红队模拟

  • CALDERA Scalable Automated Adversary Emulation Platform