Directories
¶
| Path | Synopsis |
|---|---|
|
Package avkit is the AV/EDR identification fingerprint database (docs §4.12, phase P3 — "杀软识别指纹库").
|
Package avkit is the AV/EDR identification fingerprint database (docs §4.12, phase P3 — "杀软识别指纹库"). |
|
Package cleanupkit removes operational traces (docs §4.8, phase P3).
|
Package cleanupkit removes operational traces (docs §4.8, phase P3). |
|
Package cloudkit is the cloud-asset capability: it uses a caller-supplied AK/SK to read the account's identity, instances, IAM surface and object storage, and to run a command through the vendor's cloud assistant.
|
Package cloudkit is the cloud-asset capability: it uses a caller-supplied AK/SK to read the account's identity, instances, IAM surface and object storage, and to run a command through the vendor's cloud assistant. |
|
Package containerkit implements Kubernetes/Docker exposure detection and container-escape triage as a capkit capability.
|
Package containerkit implements Kubernetes/Docker exposure detection and container-escape triage as a capkit capability. |
|
Package credkit holds the credential-use primitives for authorized security testing: verifying that a discovered credential actually works.
|
Package credkit holds the credential-use primitives for authorized security testing: verifying that a discovered credential actually works. |
|
Package enterprise 提供企业信息收集能力（子公司/分支/投资/ICP 域名）。
|
Package enterprise 提供企业信息收集能力（子公司/分支/投资/ICP 域名）。 |
|
Package exploitkit provides deterministic, low-volume exploit probes for the common web entry points: command injection, SSTI, LFI, SQL injection, SSRF and deserialization payload generation.
|
Package exploitkit provides deterministic, low-volume exploit probes for the common web entry points: command injection, SSTI, LFI, SQL injection, SSRF and deserialization payload generation. |
|
Package icpkit queries the MIIT (工信部) ICP filing database at beian.miit.gov.cn.
|
Package icpkit queries the MIIT (工信部) ICP filing database at beian.miit.gov.cn. |
|
Package identitykit implements the target-side identity contract (docs §5.2): a cookie jar, CSRF token extraction, bearer-token refresh decisions, and form/JSON login flows.
|
Package identitykit implements the target-side identity contract (docs §5.2): a cookie jar, CSRF token extraction, bearer-token refresh decisions, and form/JSON login flows. |
|
Package internalnetkit performs internal-network reconnaissance from an established foothold (docs 究极渗透能力包实现方案 §4.10, phase P2).
|
Package internalnetkit performs internal-network reconnaissance from an established foothold (docs 究极渗透能力包实现方案 §4.10, phase P2). |
|
Package oastkit provides out-of-band interaction helpers backed by dnslog.cn (or a compatible self-hosted dnslog service).
|
Package oastkit provides out-of-band interaction helpers backed by dnslog.cn (or a compatible self-hosted dnslog service). |
|
Package persistkit covers persistence placement (docs §4.8, phase P3).
|
Package persistkit covers persistence placement (docs §4.8, phase P3). |
|
Package verifyrunner 提供「验证剧本」的确定性运行器（施工单 E1，见 docs/渗透Agent优化施工单-验证剧本化与假设质量闭环.md）。
|
Package verifyrunner 提供「验证剧本」的确定性运行器（施工单 E1，见 docs/渗透Agent优化施工单-验证剧本化与假设质量闭环.md）。 |
|
Package reconkit is an engine-neutral reconnaissance pipeline.
|
Package reconkit is an engine-neutral reconnaissance pipeline. |
|
Package sessionkit implements the capkit Session contract (docs §5.1) and the openers for it.
|
Package sessionkit implements the capkit Session contract (docs §5.1) and the openers for it. |
|
Package shellkit exposes the WebShell/C2 foothold as capkit session tools.
|
Package shellkit exposes the WebShell/C2 foothold as capkit session tools. |
|
delivery
Package delivery contains the pure delivery state machine.
|
Package delivery contains the pure delivery state machine. |
|
listener
Package listener is a small Go reverse-shell session manager.
|
Package listener is a small Go reverse-shell session manager. |
|
memshell
Package memshell 内存马注入载荷生成。
|
Package memshell 内存马注入载荷生成。 |
|
payload
Package payload renders minimal, protocol-compatible WebShell payloads.
|
Package payload renders minimal, protocol-compatible WebShell payloads. |
|
plan
Package plan describes a WebShell delivery without performing it.
|
Package plan describes a WebShell delivery without performing it. |
|
protocol
Package shell WebShell 流量协议层。
|
Package shell WebShell 流量协议层。 |
|
session
adapter.go bridges the WebShell model (Session + host Executor) to the core.Session contract, so a WebShell foothold gets the same Exec/upload/ download surface as SSH and every downstream kit works against it unchanged.
|
adapter.go bridges the WebShell model (Session + host Executor) to the core.Session contract, so a WebShell foothold gets the same Exec/upload/ download surface as SSH and every downstream kit works against it unchanged. |
|
assets.go 引擎响应行 → 归一化结果。
|
assets.go 引擎响应行 → 归一化结果。 |
|
Package toolparse 提供外部 CLI 工具的结构化输出解析与事实黑板自动落库。
|
Package toolparse 提供外部 CLI 工具的结构化输出解析与事实黑板自动落库。 |
Click to show internal directories.
Click to hide internal directories.