Add files via upload

tools/amass.yaml

@@ -1,9 +1,7 @@
 name: "amass"
 command: "amass"
 enabled: true
-
 short_description: "子域名枚举和网络映射工具"
-
 description: |
   Amass是一个深度子域名枚举和网络映射工具，通过多种技术发现目标域名的子域名。
 
@@ -18,7 +16,6 @@ description: |
   - 资产发现
   - 渗透测试信息收集
   - Bug bounty侦察
-
 parameters:
   - name: "mode"
     type: "string"
@@ -34,16 +31,14 @@ parameters:
     position: 0
     format: "positional"
     options: ["enum", "intel", "viz"]
-  
   - name: "domain"
     type: "string"
     description: "目标域名"
     required: true
     flag: "-d"
     format: "flag"
-  
   - name: "additional_args"
     type: "string"
     description: "额外的Amass参数"
     required: false
-
+    format: "positional"

tools/anew.yaml

@@ -1,9 +1,40 @@
 name: "anew"
-command: "anew"
+command: "python3"
+args:
+  - "-c"
+  - |
+    import shlex
+    import subprocess
+    import sys
+
+    if len(sys.argv) < 2:
+        sys.stderr.write("缺少输入数据\n")
+        sys.exit(1)
+
+    input_data = sys.argv[1]
+    output_file = sys.argv[2] if len(sys.argv) > 2 else ""
+    additional = sys.argv[3] if len(sys.argv) > 3 else ""
+
+    cmd = ["anew"]
+    if additional:
+        cmd.extend(shlex.split(additional))
+    if output_file:
+        cmd.append(output_file)
+
+    proc = subprocess.run(
+        cmd,
+        input=input_data.encode("utf-8"),
+        capture_output=True,
+        text=True,
+    )
+
+    if proc.returncode != 0:
+        sys.stderr.write(proc.stderr or proc.stdout)
+        sys.exit(proc.returncode)
+
+    sys.stdout.write(proc.stdout)
 enabled: true
-
 short_description: "数据去重工具，用于处理文件中的新行"
-
 description: |
   Anew是一个数据去重工具，用于将新行追加到文件中，自动过滤重复项。
 
@@ -18,18 +49,20 @@ description: |
   - 结果去重
   - 数据合并
   - 工具链集成
-
 parameters:
   - name: "input_data"
     type: "string"
     description: "输入数据"
     required: true
-  
+    position: 0
+    format: "positional"
   - name: "output_file"
     type: "string"
     description: "输出文件路径"
     required: false
-
+    default: ""
+    position: 1
+    format: "positional"
   - name: "additional_args"
     type: "string"
     description: |
@@ -43,4 +76,6 @@ parameters:
       - 确保参数格式正确，避免命令注入
       - 此参数会直接追加到命令末尾
     required: false
+    default: ""
+    position: 2
     format: "positional"

tools/angr.yaml

@@ -1,62 +1,95 @@
 name: "angr"
 command: "python3"
+args:
+  - "-c"
+  - |
+    import shlex
+    import sys
+
+    if len(sys.argv) < 2:
+        sys.stderr.write("缺少脚本内容\n")
+        sys.exit(1)
+
+    script_content = sys.argv[1]
+    binary = sys.argv[2] if len(sys.argv) > 2 else ""
+    find_address = sys.argv[3] if len(sys.argv) > 3 else ""
+    avoid_addresses = sys.argv[4] if len(sys.argv) > 4 else ""
+    analysis_type = sys.argv[5] if len(sys.argv) > 5 else ""
+    extra = sys.argv[6] if len(sys.argv) > 6 else ""
+
+    context = {
+        "binary_path": binary,
+        "find_address": find_address,
+        "avoid_addresses": [addr.strip() for addr in avoid_addresses.split(",") if addr.strip()],
+        "analysis_type": analysis_type or "symbolic",
+    }
+
+    if extra:
+        context["additional_args"] = shlex.split(extra)
+    else:
+        context["additional_args"] = []
+
+    # 执行用户脚本，提供上下文变量
+    exec(script_content, context)
 enabled: true
-
 short_description: "符号执行和二进制分析框架"
-
 description: |
   Angr是一个符号执行和二进制分析框架，用于自动化漏洞发现和利用。
 
-  **主要功能：**
+  **使用方式：**
-  - 符号执行
+  - 通过 `script_content` 参数提供Python脚本，可直接导入 `angr` 并访问以下变量：
-  - 控制流图分析
+    - `binary_path`: 目标二进制路径
-  - 静态分析
+    - `find_address`: 待寻找的地址（可为空）
-  - 漏洞发现
+    - `avoid_addresses`: 需要避开的地址列表
-  
+    - `analysis_type`: 自定义分析类型标记（默认symbolic）
-  **使用场景：**
+    - `additional_args`: 额外参数列表（通过 `additional_args` 传入）
-  - 二进制分析
+  - 在脚本中自行控制分析流程，可调用 `print()` 输出结果。
-  - 漏洞发现
-  - 符号执行
-  - 安全研究
-
 parameters:
-  - name: "binary"
-    type: "string"
-    description: "要分析的二进制文件路径"
-    required: true
-  
   - name: "script_content"
     type: "string"
-    description: "自定义angr脚本内容"
+    description: "要执行的angr Python脚本内容"
+    required: true
+    position: 0
+    format: "positional"
+  - name: "binary"
+    type: "string"
+    description: "要分析的二进制文件路径，将作为 binary_path 变量传递给脚本"
     required: false
-  
+    default: ""
+    position: 1
+    format: "positional"
   - name: "find_address"
     type: "string"
-    description: "符号执行中要查找的地址"
+    description: "符号执行中要查找的地址（可选，传入脚本变量 find_address）"
     required: false
-  
+    default: ""
+    position: 2
+    format: "positional"
   - name: "avoid_addresses"
     type: "string"
-    description: "要避免的地址（逗号分隔）"
+    description: "要避免的地址（逗号分隔，脚本变量 avoid_addresses）"
     required: false
-  
+    default: ""
+    position: 3
+    format: "positional"
   - name: "analysis_type"
     type: "string"
-    description: "分析类型（symbolic, cfg, static）"
+    description: "用于脚本内自定义分支的分析类型标签（例如 symbolic/cfg/static）"
     required: false
     default: "symbolic"
-
+    position: 4
+    format: "positional"
   - name: "additional_args"
     type: "string"
     description: |
-      额外的angr参数。用于传递未在参数列表中定义的angr选项。
+      额外参数，脚本中可通过 `additional_args` 列表访问。
 
-      **示例值：**
+      **示例：**
-      - 根据工具特性添加常用参数示例
+      - "--max-depth 8 --timeout 60"
 
       **注意事项：**
-      - 多个参数用空格分隔
+      - 参数会按照shell规则拆分
-      - 确保参数格式正确，避免命令注入
-      - 此参数会直接追加到命令末尾
     required: false
+    default: ""
+    position: 5
     format: "positional"

tools/api-fuzzer.yaml

@@ -1,62 +1,105 @@
 name: "api-fuzzer"
-command: "ffuf"
+command: "python3"
+args:
+  - "-c"
+  - |
+    import pathlib
+    import sys
+    import textwrap
+    from urllib.parse import urljoin
+
+    import requests
+
+    if len(sys.argv) < 2:
+        sys.stderr.write("缺少 base_url 参数\n")
+        sys.exit(1)
+
+    base_url = sys.argv[1]
+    endpoints_arg = sys.argv[2] if len(sys.argv) > 2 else ""
+    methods_arg = sys.argv[3] if len(sys.argv) > 3 else "GET,POST"
+    wordlist_path = sys.argv[4] if len(sys.argv) > 4 else ""
+    timeout = float(sys.argv[5]) if len(sys.argv) > 5 and sys.argv[5] else 10.0
+
+    methods = [m.strip().upper() for m in methods_arg.split(",") if m.strip()]
+    if not methods:
+        methods = ["GET"]
+
+    endpoints = []
+    if endpoints_arg:
+        endpoints = [ep.strip() for ep in endpoints_arg.split(",") if ep.strip()]
+    elif wordlist_path:
+        path = pathlib.Path(wordlist_path)
+        if not path.is_file():
+            sys.stderr.write(f"字典文件不存在: {path}\n")
+            sys.exit(1)
+        endpoints = [line.strip() for line in path.read_text().splitlines() if line.strip()]
+
+    if not endpoints:
+        sys.stderr.write("未提供端点列表或字典。\n")
+        sys.exit(1)
+
+    results = []
+    for endpoint in endpoints:
+        url = urljoin(base_url.rstrip("/") + "/", endpoint.lstrip("/"))
+        for method in methods:
+            try:
+                resp = requests.request(method, url, timeout=timeout, allow_redirects=False)
+                results.append({
+                    "method": method,
+                    "endpoint": endpoint,
+                    "status": resp.status_code,
+                    "length": len(resp.content),
+                    "redirect": resp.headers.get("Location", "")
+                })
+            except requests.RequestException as exc:
+                results.append({
+                    "method": method,
+                    "endpoint": endpoint,
+                    "error": str(exc)
+                })
+
+    for item in results:
+        if "error" in item:
+            print(f"[{item['method']}] {item['endpoint']} -> ERROR: {item['error']}")
+        else:
+            redirect = f" -> {item['redirect']}" if item.get("redirect") else ""
+            print(f"[{item['method']}] {item['endpoint']} -> {item['status']} ({item['length']} bytes){redirect}")
 enabled: true
-
 short_description: "API端点模糊测试工具，支持智能参数发现"
-
 description: |
-  高级API端点模糊测试工具，支持智能参数发现和漏洞评估。
+  基于requests的轻量级API端点探测脚本，可按照提供的端点列表或字典，对多个HTTP方法进行探测并记录状态码与响应长度。
-  
-  **主要功能：**
-  - API端点发现
-  - 参数模糊测试
-  - 漏洞评估
-  - 多种HTTP方法支持
-  
-  **使用场景：**
-  - API安全测试
-  - 端点发现
-  - 参数测试
-  - 安全评估
-
 parameters:
   - name: "base_url"
     type: "string"
-    description: "API基础URL"
+    description: "API基础URL，例如 https://api.example.com/"
     required: true
-    flag: "-u"
+    position: 0
-    format: "flag"
+    format: "positional"
-  
   - name: "endpoints"
     type: "string"
-    description: "要测试的特定端点（逗号分隔）"
+    description: "逗号分隔的端点列表（如 /v1/users,/v1/auth/login）"
     required: false
-  
+    default: ""
+    position: 1
+    format: "positional"
   - name: "methods"
     type: "string"
-    description: "HTTP方法（逗号分隔）"
+    description: "HTTP方法列表，逗号分隔（默认 GET,POST）"
     required: false
-    default: "GET,POST,PUT,DELETE"
+    default: "GET,POST"
-  
+    position: 2
+    format: "positional"
   - name: "wordlist"
     type: "string"
-    description: "端点发现字典"
+    description: "端点字典文件路径（当未提供endpoints时使用）"
     required: false
     default: "/usr/share/wordlists/api/api-endpoints.txt"
-    flag: "-w"
+    position: 3
-    format: "flag"
+    format: "positional"
-
+  - name: "timeout"
-  - name: "additional_args"
     type: "string"
-    description: |
+    description: "每个请求的超时时间（秒，默认10）"
-      额外的api-fuzzer参数。用于传递未在参数列表中定义的api-fuzzer选项。
-      
-      **示例值：**
-      - 根据工具特性添加常用参数示例
-      
-      **注意事项：**
-      - 多个参数用空格分隔
-      - 确保参数格式正确，避免命令注入
-      - 此参数会直接追加到命令末尾
     required: false
+    default: "10"
+    position: 4
     format: "positional"

tools/api-schema-analyzer.yaml

@@ -1,51 +1,20 @@
 name: "api-schema-analyzer"
 command: "spectral"
+args: ["lint"]
 enabled: true
-
 short_description: "API模式分析工具，识别潜在安全问题"
-
 description: |
-  分析API模式（OpenAPI/Swagger/GraphQL）并识别潜在安全问题。
+  调用 `spectral lint` 对 OpenAPI/Swagger/GraphQL 模式进行静态分析，可结合自定义规则集或输出格式。
-  
-  **主要功能：**
-  - API模式分析
-  - 安全问题识别
-  - 端点发现
-  - 建议生成
-  
-  **使用场景：**
-  - API安全审计
-  - 模式分析
-  - 安全问题发现
-  - 安全评估
-
 parameters:
   - name: "schema_url"
     type: "string"
-    description: "API模式URL（OpenAPI/Swagger/GraphQL）"
+    description: "API模式文件或URL（传递给 spectral lint 的目标）"
     required: true
-    flag: "-s"
+    position: 0
-    format: "flag"
+    format: "positional"
-  
-  - name: "schema_type"
-    type: "string"
-    description: "模式类型（openapi, swagger, graphql）"
-    required: false
-    default: "openapi"
-    flag: "--type"
-    format: "flag"
-
   - name: "additional_args"
     type: "string"
     description: |
-      额外的api-schema-analyzer参数。用于传递未在参数列表中定义的api-schema-analyzer选项。
+      额外的 Spectral 参数，例如 `--ruleset`, `--format`, `--fail-severity` 等。
-      
-      **示例值：**
-      - 根据工具特性添加常用参数示例
-      
-      **注意事项：**
-      - 多个参数用空格分隔
-      - 确保参数格式正确，避免命令注入
-      - 此参数会直接追加到命令末尾
     required: false
     format: "positional"

tools/arjun.yaml

@@ -1,9 +1,7 @@
 name: "arjun"
 command: "arjun"
 enabled: true
-
 short_description: "HTTP参数发现工具"
-
 description: |
   Arjun是一个HTTP参数发现工具，用于发现Web应用中的隐藏参数。
 
@@ -18,7 +16,6 @@ description: |
   - Web应用安全测试
   - Bug bounty侦察
   - 安全测试
-
 parameters:
   - name: "url"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     flag: "-u"
     format: "flag"
-  
   - name: "method"
     type: "string"
     description: "HTTP方法（GET, POST等）"
@@ -34,14 +30,12 @@ parameters:
     flag: "-m"
     format: "flag"
     default: "GET"
-  
   - name: "wordlist"
     type: "string"
     description: "自定义字典文件"
     required: false
     flag: "-w"
     format: "flag"
-  
   - name: "threads"
     type: "int"
     description: "线程数"
@@ -49,7 +43,6 @@ parameters:
     flag: "-t"
     format: "flag"
     default: 25
-  
   - name: "stable"
     type: "bool"
     description: "使用稳定模式"
@@ -57,7 +50,6 @@ parameters:
     flag: "--stable"
     format: "flag"
     default: false
-  
   - name: "additional_args"
     type: "string"
     description: |
@@ -74,4 +66,3 @@ parameters:
       - 此参数会直接追加到命令末尾
     required: false
     format: "positional"
-

tools/arp-scan.yaml

@@ -1,9 +1,7 @@
 name: "arp-scan"
 command: "arp-scan"
 enabled: true
-
 short_description: "ARP网络发现工具"
-
 description: |
   Arp-scan是一个ARP网络发现工具，用于发现本地网络中的活动主机。
 
@@ -18,22 +16,19 @@ description: |
   - 主机发现
   - 网络映射
   - 渗透测试
-
 parameters:
   - name: "target"
     type: "string"
     description: "目标IP范围（如果不使用local_network）"
     required: false
-    flag: "-l"
+    position: 0
-    format: "flag"
+    format: "positional"
-  
   - name: "interface"
     type: "string"
     description: "网络接口"
     required: false
     flag: "-I"
     format: "flag"
-  
   - name: "local_network"
     type: "bool"
     description: "扫描本地网络"
@@ -41,7 +36,6 @@ parameters:
     flag: "-l"
     format: "flag"
     default: false
-
   - name: "additional_args"
     type: "string"
     description: |

tools/autorecon.yaml

@@ -1,9 +1,7 @@
 name: "autorecon"
 command: "autorecon"
 enabled: true
-
 short_description: "自动化综合侦察工具"
-
 description: |
   AutoRecon是一个自动化综合侦察工具，用于执行全面的目标枚举。
 
@@ -18,7 +16,6 @@ description: |
   - 渗透测试
   - 网络侦察
   - 安全审计
-
 parameters:
   - name: "target"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "output_dir"
     type: "string"
     description: "输出目录"
@@ -34,31 +30,6 @@ parameters:
     flag: "-o"
     format: "flag"
     default: "/tmp/autorecon"
-  
-  - name: "port_scans"
-    type: "string"
-    description: "端口扫描配置"
-    required: false
-    flag: "--port-scans"
-    format: "flag"
-    default: "top-100-ports"
-  
-  - name: "service_scans"
-    type: "string"
-    description: "服务扫描配置"
-    required: false
-    flag: "--service-scans"
-    format: "flag"
-    default: "default"
-  
-  - name: "timeout"
-    type: "int"
-    description: "单个扫描的超时时间（秒）"
-    required: false
-    flag: "--timeout"
-    format: "flag"
-    default: 300
-
   - name: "additional_args"
     type: "string"
     description: |

tools/binwalk.yaml

@@ -1,9 +1,7 @@
 name: "binwalk"
 command: "binwalk"
 enabled: true
-
 short_description: "固件和文件分析工具"
-
 description: |
   Binwalk是一个固件分析工具，用于分析、提取和逆向工程固件镜像。
 
@@ -18,7 +16,6 @@ description: |
   - 文件格式识别
   - 数据提取
   - 逆向工程
-
 parameters:
   - name: "file_path"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "extract"
     type: "bool"
     description: "提取发现的文件"
@@ -34,7 +30,6 @@ parameters:
     flag: "-e"
     format: "flag"
     default: false
-
   - name: "additional_args"
     type: "string"
     description: |

tools/bloodhound.yaml

@@ -1,9 +1,7 @@
 name: "bloodhound"
 command: "bloodhound-python"
 enabled: true
-
 short_description: "Active Directory 攻击路径分析和可视化工具"
-
 description: |
   BloodHound 是一个 Active Directory 攻击路径分析和可视化工具，通过收集域内信息并分析攻击路径。
 
@@ -25,7 +23,6 @@ description: |
   - 需要 Neo4j 数据库支持
   - 收集过程可能需要较长时间
   - 建议在授权环境中使用
-
 parameters:
   - name: "domain"
     type: "string"
@@ -33,28 +30,31 @@ parameters:
     required: false
     flag: "-d"
     format: "flag"
-  
   - name: "username"
     type: "string"
     description: "域用户名"
     required: false
     flag: "-u"
     format: "flag"
-  
   - name: "password"
     type: "string"
     description: "域用户密码"
     required: false
     flag: "-p"
     format: "flag"
-  
+  - name: "collection_method"
+    type: "string"
+    description: "收集模式 (All, ACL, DCOM, LocalAdmin, RDP 等)"
+    required: false
+    default: "All"
+    flag: "-c"
+    format: "flag"
   - name: "dc"
     type: "string"
     description: "域控制器 IP 地址"
     required: false
     flag: "-dc"
     format: "flag"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/burpsuite.yaml

@@ -1,9 +1,7 @@
 name: "burpsuite"
 command: "burpsuite"
 enabled: true
-
 short_description: "Web应用安全测试平台"
-
 description: |
   Burp Suite是一个Web应用安全测试平台，提供全面的Web安全测试功能。
 
@@ -18,29 +16,25 @@ description: |
   - 渗透测试
   - 漏洞扫描
   - 安全评估
-
 parameters:
   - name: "project_file"
     type: "string"
-    description: "Burp项目文件路径"
+    description: "Burp Suite项目文件路径（--project-file）"
     required: false
     flag: "--project-file"
     format: "flag"
-  
   - name: "config_file"
     type: "string"
-    description: "Burp配置文件路径"
+    description: "自动化/扫描配置文件（--config-file）"
     required: false
     flag: "--config-file"
     format: "flag"
-  
+  - name: "user_config_file"
-  - name: "target"
     type: "string"
-    description: "目标URL"
+    description: "用户配置文件（--user-config-file）"
     required: false
-    flag: "--target"
+    flag: "--user-config-file"
     format: "flag"
-  
   - name: "headless"
     type: "bool"
     description: "无头模式运行"
@@ -48,32 +42,9 @@ parameters:
     flag: "--headless"
     format: "flag"
     default: false
-  
-  - name: "scan_type"
-    type: "string"
-    description: "要执行的扫描类型"
-    required: false
-    flag: "--scan-type"
-    format: "flag"
-  
-  - name: "output_file"
-    type: "string"
-    description: "输出文件路径"
-    required: false
-    flag: "--output"
-    format: "flag"
-
   - name: "additional_args"
     type: "string"
     description: |
-      额外的burpsuite参数。用于传递未在参数列表中定义的burpsuite选项。
+      额外的burpsuite参数。用于传递未在参数列表中定义的burpsuite选项（例如 --project-config、--log-config 等）。
-      
-      **示例值：**
-      - 根据工具特性添加常用参数示例
-      
-      **注意事项：**
-      - 多个参数用空格分隔
-      - 确保参数格式正确，避免命令注入
-      - 此参数会直接追加到命令末尾
     required: false
     format: "positional"

tools/cat.yaml

@@ -13,7 +13,6 @@ description: |
   **注意事项：**
   - 如果文件很大，结果可能会被保存到存储中
   - 只能读取文本文件，二进制文件可能显示乱码
-
 parameters:
   - name: "file"
     type: "string"
@@ -21,4 +20,3 @@ parameters:
     required: true
     format: "positional"
     position: 0
-

tools/checkov.yaml

@@ -1,9 +1,7 @@
 name: "checkov"
 command: "checkov"
 enabled: true
-
 short_description: "基础设施即代码安全扫描工具"
-
 description: |
   Checkov是一个静态代码分析工具，用于基础设施即代码（IaC）的安全扫描。
 
@@ -18,7 +16,6 @@ description: |
   - 云配置审计
   - 安全策略检查
   - 合规性检查
-
 parameters:
   - name: "directory"
     type: "string"
@@ -27,21 +24,18 @@ parameters:
     flag: "-d"
     format: "flag"
     default: "."
-  
   - name: "framework"
     type: "string"
     description: "要扫描的框架（terraform, cloudformation, kubernetes等）"
     required: false
     flag: "--framework"
     format: "flag"
-  
   - name: "check"
     type: "string"
     description: "要运行的特定检查"
     required: false
     flag: "--check"
     format: "flag"
-  
   - name: "output_format"
     type: "string"
     description: "输出格式（json, yaml, cli）"
@@ -49,7 +43,6 @@ parameters:
     flag: "--output"
     format: "flag"
     default: "json"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/checksec.yaml

@@ -1,9 +1,7 @@
 name: "checksec"
 command: "checksec"
 enabled: true
-
 short_description: "二进制安全特性检查工具"
-
 description: |
   Checksec是一个用于检查二进制文件安全特性的工具。
 
@@ -18,7 +16,6 @@ description: |
   - 保护机制检查
   - 漏洞研究
   - 安全评估
-
 parameters:
   - name: "binary"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     position: 0
     format: "positional"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/clair.yaml

@@ -1,9 +1,7 @@
 name: "clair"
 command: "clair"
-enabled: true
+enabled: false
-
 short_description: "容器漏洞分析工具"
-
 description: |
   Clair是一个容器漏洞分析工具，用于扫描容器镜像中的漏洞。
 
@@ -18,7 +16,6 @@ description: |
   - 漏洞检测
   - CI/CD集成
   - 安全审计
-
 parameters:
   - name: "image"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     flag: "--image"
     format: "flag"
-  
   - name: "config"
     type: "string"
     description: "Clair配置文件"
@@ -34,7 +30,6 @@ parameters:
     flag: "--config"
     format: "flag"
     default: "/etc/clair/config.yaml"
-  
   - name: "output_format"
     type: "string"
     description: "输出格式（json, yaml）"
@@ -42,7 +37,6 @@ parameters:
     flag: "--format"
     format: "flag"
     default: "json"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/cloudmapper.yaml

@@ -1,9 +1,7 @@
 name: "cloudmapper"
 command: "cloudmapper"
 enabled: true
-
 short_description: "AWS网络可视化和安全分析工具"
-
 description: |
   CloudMapper是一个AWS网络可视化和安全分析工具。
 
@@ -18,21 +16,20 @@ description: |
   - 安全评估
   - 网络可视化
   - 安全审计
-
 parameters:
   - name: "action"
     type: "string"
     description: "要执行的操作（collect, prepare, webserver, find_admins等）"
     required: false
     default: "collect"
-  
+    position: 0
+    format: "positional"
   - name: "account"
     type: "string"
     description: "要分析的AWS账户"
     required: false
     flag: "--account"
     format: "flag"
-  
   - name: "config"
     type: "string"
     description: "配置文件路径"
@@ -40,7 +37,6 @@ parameters:
     flag: "--config"
     format: "flag"
     default: "config.json"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/create-file.yaml

@@ -3,31 +3,31 @@ command: "python3"
 args:
   - "-c"
   - |
-      import base64
+    import base64
-      import sys
+    import sys
-      from pathlib import Path
+    from pathlib import Path
 
-      if len(sys.argv) < 3:
+    if len(sys.argv) < 3:
-          sys.stderr.write("Usage: create-file <filename> <content> [binary]\n")
+        sys.stderr.write("Usage: create-file <filename> <content> [binary]\n")
-          sys.exit(1)
+        sys.exit(1)
 
-      filename = sys.argv[1]
+    filename = sys.argv[1]
-      content = sys.argv[2]
+    content = sys.argv[2]
-      binary_arg = sys.argv[3].lower() if len(sys.argv) > 3 else "false"
+    binary_arg = sys.argv[3].lower() if len(sys.argv) > 3 else "false"
-      binary = binary_arg in ("1", "true", "yes", "on")
+    binary = binary_arg in ("1", "true", "yes", "on")
 
-      path = Path(filename)
+    path = Path(filename)
-      if not path.is_absolute():
+    if not path.is_absolute():
-          path = Path.cwd() / path
+        path = Path.cwd() / path
-      path.parent.mkdir(parents=True, exist_ok=True)
+    path.parent.mkdir(parents=True, exist_ok=True)
 
-      if binary:
+    if binary:
-          data = base64.b64decode(content)
+        data = base64.b64decode(content)
-          path.write_bytes(data)
+        path.write_bytes(data)
-      else:
+    else:
-          path.write_text(content, encoding="utf-8")
+        path.write_text(content, encoding="utf-8")
 
-      print(f"文件已创建: {path}")
+    print(f"文件已创建: {path}")
 enabled: true
 short_description: "创建文件工具"
 description: |

tools/cyberchef.yaml

@@ -1,9 +1,7 @@
 name: "cyberchef"
 command: "cyberchef"
 enabled: true
-
 short_description: "数据转换和分析工具，支持多种编码、加密和数据处理操作"
-
 description: |
   CyberChef 是一个强大的数据转换和分析工具，支持数百种数据操作。
 
@@ -25,7 +23,6 @@ description: |
   - 通常以 Web 界面运行
   - 命令行版本可能需要 Node.js
   - 功能强大，操作复杂
-
 parameters:
   - name: "recipe"
     type: "string"
@@ -33,21 +30,18 @@ parameters:
     required: true
     flag: "-Recipe"
     format: "flag"
-  
   - name: "input"
     type: "string"
     description: "输入数据（字符串或文件路径）"
     required: true
     flag: "-Input"
     format: "flag"
-  
   - name: "output"
     type: "string"
     description: "输出文件路径（可选）"
     required: false
     flag: "-Output"
     format: "flag"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/dalfox.yaml

@@ -1,9 +1,7 @@
 name: "dalfox"
 command: "dalfox"
 enabled: true
-
 short_description: "高级XSS漏洞扫描器"
-
 description: |
   Dalfox是一个高级XSS漏洞扫描器，支持多种XSS检测技术。
 
@@ -18,7 +16,6 @@ description: |
   - Web应用安全测试
   - Bug bounty侦察
   - 安全测试
-
 parameters:
   - name: "url"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     flag: "-u"
     format: "flag"
-  
   - name: "pipe_mode"
     type: "bool"
     description: "使用管道模式输入"
@@ -34,15 +30,12 @@ parameters:
     flag: "--pipe"
     format: "flag"
     default: false
-  
   - name: "blind"
-    type: "bool"
+    type: "string"
-    description: "启用盲XSS测试"
+    description: "盲XSS回调地址（例如Burp Collaborator URL）"
     required: false
-    flag: "-b"
+    flag: "--blind"
     format: "flag"
-    default: false
-  
   - name: "mining_dom"
     type: "bool"
     description: "启用DOM挖掘"
@@ -50,7 +43,6 @@ parameters:
     flag: "--mining-dom"
     format: "flag"
     default: true
-  
   - name: "mining_dict"
     type: "bool"
     description: "启用字典挖掘"
@@ -58,7 +50,6 @@ parameters:
     flag: "--mining-dict"
     format: "flag"
     default: true
-
   - name: "additional_args"
     type: "string"
     description: |

tools/delete-file.yaml

@@ -1,9 +1,7 @@
 name: "delete-file"
 command: "rm"
 enabled: true
-
 short_description: "删除文件或目录工具"
-
 description: |
   删除服务器上的文件或目录。
 
@@ -16,7 +14,6 @@ description: |
   - 文件清理
   - 临时文件删除
   - 目录清理
-
 parameters:
   - name: "filename"
     type: "string"
@@ -24,7 +21,6 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "recursive"
     type: "bool"
     description: "递归删除目录"
@@ -32,7 +28,6 @@ parameters:
     flag: "-r"
     format: "flag"
     default: false
-
   - name: "additional_args"
     type: "string"
     description: |

tools/dirb.yaml

@@ -1,10 +1,8 @@
 name: "dirb"
 command: "dirb"
 enabled: true
-
 # 简短描述（用于工具列表，减少token消耗）
 short_description: "Web目录和文件扫描工具，通过暴力破解方式发现Web服务器上的隐藏目录和文件"
-
 # 工具详细描述
 description: |
   Web目录和文件扫描工具，通过暴力破解方式发现Web服务器上的隐藏目录和文件。
@@ -27,7 +25,6 @@ description: |
   - 某些请求可能被WAF拦截
   - 建议使用合适的字典文件以提高效率
   - 扫描结果需要人工验证
-
 # 参数定义
 parameters:
   - name: "url"
@@ -54,7 +51,6 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "wordlist"
     type: "string"
     description: |
@@ -81,9 +77,8 @@ parameters:
       - 确保字典文件存在且可读
       - 大型字典会显著增加扫描时间
     required: false
-    flag: "-w"
+    position: 1
-    format: "flag"
+    format: "positional"
-  
   - name: "additional_args"
     type: "string"
     description: |
@@ -102,4 +97,3 @@ parameters:
       - 此参数会直接追加到命令末尾
     required: false
     format: "positional"
-

tools/dirsearch.yaml

@@ -1,9 +1,7 @@
 name: "dirsearch"
 command: "dirsearch"
 enabled: true
-
 short_description: "高级目录和文件发现工具"
-
 description: |
   Dirsearch是一个高级Web内容扫描器，用于发现目录和文件。
 
@@ -18,7 +16,6 @@ description: |
   - 目录枚举
   - 文件发现
   - 渗透测试
-
 parameters:
   - name: "url"
     type: "string"
@@ -26,7 +23,6 @@ parameters:
     required: true
     flag: "-u"
     format: "flag"
-  
   - name: "extensions"
     type: "string"
     description: "文件扩展名（逗号分隔）"
@@ -34,14 +30,12 @@ parameters:
     flag: "-e"
     format: "flag"
     default: "php,html,js,txt,xml,json"
-  
   - name: "wordlist"
     type: "string"
     description: "字典文件路径"
     required: false
     flag: "-w"
     format: "flag"
-  
   - name: "threads"
     type: "int"
     description: "线程数"
@@ -49,7 +43,6 @@ parameters:
     flag: "-t"
     format: "flag"
     default: 30
-  
   - name: "recursive"
     type: "bool"
     description: "启用递归扫描"
@@ -57,7 +50,6 @@ parameters:
     flag: "-r"
     format: "flag"
     default: false
-
   - name: "additional_args"
     type: "string"
     description: |

tools/dnsenum.yaml

@@ -1,9 +1,7 @@
 name: "dnsenum"
 command: "dnsenum"
 enabled: true
-
 short_description: "DNS枚举工具"
-
 description: |
   DNSenum是一个DNS信息收集工具，用于枚举DNS信息。
 
@@ -18,7 +16,6 @@ description: |
   - 子域名发现
   - 网络侦察
   - 渗透测试
-
 parameters:
   - name: "domain"
     type: "string"
@@ -26,21 +23,18 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "dns_server"
     type: "string"
     description: "要使用的DNS服务器"
     required: false
     flag: "-n"
     format: "flag"
-  
   - name: "wordlist"
     type: "string"
     description: "用于暴力破解的字典文件"
     required: false
     flag: "-f"
     format: "flag"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/docker-bench-security.yaml

@@ -1,9 +1,7 @@
 name: "docker-bench-security"
 command: "docker-bench-security"
 enabled: true
-
 short_description: "Docker安全基准检查工具"
-
 description: |
   Docker Bench for Security是一个Docker安全基准检查工具，用于检查Docker配置是否符合安全最佳实践。
 
@@ -18,30 +16,25 @@ description: |
   - 配置检查
   - 合规性验证
   - 安全评估
-
 parameters:
   - name: "checks"
     type: "string"
     description: "要运行的特定检查"
     required: false
-    flag: "--check"
+    flag: "-c"
     format: "flag"
-  
   - name: "exclude"
     type: "string"
     description: "要排除的检查"
     required: false
-    flag: "--exclude"
+    flag: "-e"
     format: "flag"
-  
   - name: "output_file"
     type: "string"
     description: "输出文件路径"
     required: false
-    flag: "--output"
+    flag: "-l"
     format: "flag"
-    default: "/tmp/docker-bench-results.json"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/dotdotpwn.yaml

@@ -1,9 +1,7 @@
 name: "dotdotpwn"
 command: "dotdotpwn"
 enabled: true
-
 short_description: "目录遍历漏洞测试工具"
-
 description: |
   DotDotPwn是一个目录遍历漏洞测试工具，支持多种协议。
 
@@ -18,15 +16,13 @@ description: |
   - Web应用安全测试
   - 渗透测试
   - 漏洞验证
-
 parameters:
   - name: "target"
     type: "string"
     description: "目标主机名或IP"
     required: true
-    flag: "-m"
+    flag: "-h"
     format: "flag"
-  
   - name: "module"
     type: "string"
     description: "要使用的模块（http, ftp, tftp等）"
@@ -34,7 +30,6 @@ parameters:
     flag: "-m"
     format: "flag"
     default: "http"
-
   - name: "additional_args"
     type: "string"
     description: |

tools/enum4linux-ng.yaml

@@ -1,9 +1,7 @@
 name: "enum4linux-ng"
 command: "enum4linux-ng"
 enabled: true
-
 short_description: "高级SMB枚举工具（Enum4linux的下一代版本）"
-
 description: |
   Enum4linux-ng是Enum4linux的下一代版本，提供更强大的SMB枚举功能。
 
@@ -18,7 +16,6 @@ description: |
   - SMB安全评估
   - 域环境侦察
   - 安全测试
-
 parameters:
   - name: "target"
     type: "string"
@@ -26,28 +23,24 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "username"
     type: "string"
     description: "用户名"
     required: false
     flag: "-u"
     format: "flag"
-  
   - name: "password"
     type: "string"
     description: "密码"
     required: false
     flag: "-p"
     format: "flag"
-  
   - name: "domain"
     type: "string"
     description: "域名"
     required: false
     flag: "-d"
     format: "flag"
-  
   - name: "shares"
     type: "bool"
     description: "枚举共享"
@@ -55,7 +48,6 @@ parameters:
     flag: "-S"
     format: "flag"
     default: true
-  
   - name: "users"
     type: "bool"
     description: "枚举用户"
@@ -63,7 +55,6 @@ parameters:
     flag: "-U"
     format: "flag"
     default: true
-  
   - name: "groups"
     type: "bool"
     description: "枚举组"
@@ -71,7 +62,6 @@ parameters:
     flag: "-G"
     format: "flag"
     default: true
-  
   - name: "policy"
     type: "bool"
     description: "枚举策略"
@@ -79,7 +69,6 @@ parameters:
     flag: "-P"
     format: "flag"
     default: true
-
   - name: "additional_args"
     type: "string"
     description: |

tools/enum4linux.yaml

@@ -1,9 +1,7 @@
 name: "enum4linux"
 command: "enum4linux"
 enabled: true
-
 short_description: "SMB枚举工具，用于Windows/Samba系统信息收集"
-
 description: |
   Enum4linux是一个用于枚举SMB共享和Windows系统信息的工具。
 
@@ -18,7 +16,6 @@ description: |
   - SMB安全评估
   - 网络信息收集
   - 域环境侦察
-
 parameters:
   - name: "target"
     type: "string"
@@ -26,10 +23,9 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "additional_args"
     type: "string"
     description: "额外的Enum4linux参数（默认：-a）"
     required: false
     default: "-a"
-
+    format: "positional"

tools/exec.yaml

@@ -2,10 +2,8 @@ name: "exec"
 command: "sh"
 args: ["-c"]
 enabled: true
-
 # 简短描述（用于工具列表，减少token消耗）
 short_description: "系统命令执行工具，用于执行Shell命令和系统操作（谨慎使用）"
-
 # 工具详细描述
 description: |
   系统命令执行工具，用于执行Shell命令和系统操作。
@@ -28,7 +26,6 @@ description: |
   - ⚠️ 所有命令执行都会被记录
   - ⚠️ 建议限制可执行的命令范围
   - ⚠️ 不要执行不可信的命令
-
 # 参数定义
 parameters:
   - name: "command"
@@ -57,7 +54,6 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
   - name: "shell"
     type: "string"
     description: |
@@ -79,7 +75,6 @@ parameters:
       - 不同shell的命令语法可能略有差异
     required: false
     default: "sh"
-  
   - name: "workdir"
     type: "string"
     description: |
@@ -99,7 +94,6 @@ parameters:
       - 确保目录存在且有访问权限
       - 相对路径相对于程序运行目录
     required: false
-
   - name: "additional_args"
     type: "string"
     description: |

tools/execute-python-script.yaml

@@ -3,28 +3,28 @@ command: "/bin/bash"
 args:
   - "-c"
   - |
-      set -euo pipefail
+    set -euo pipefail
 
-      SCRIPT_CONTENT="$1"
+    SCRIPT_CONTENT="$1"
-      ENV_NAME="${2:-default}"
+    ENV_NAME="${2:-default}"
-      ADDITIONAL_ARGS="${3:-}"
+    ADDITIONAL_ARGS="${3:-}"
 
-      BASE_DIR="${HOME}/.cyberstrike/venvs"
+    BASE_DIR="${HOME}/.cyberstrike/venvs"
-      ENV_DIR="${BASE_DIR}/${ENV_NAME}"
+    ENV_DIR="${BASE_DIR}/${ENV_NAME}"
 
-      mkdir -p "$BASE_DIR"
+    mkdir -p "$BASE_DIR"
-      if [ ! -d "$ENV_DIR" ]; then
+    if [ ! -d "$ENV_DIR" ]; then
-        python3 -m venv "$ENV_DIR"
+      python3 -m venv "$ENV_DIR"
-      fi
+    fi
 
-      # shellcheck disable=SC1090
+    # shellcheck disable=SC1090
-      source "$ENV_DIR/bin/activate"
+    source "$ENV_DIR/bin/activate"
 
-      if [ -n "$ADDITIONAL_ARGS" ]; then
+    if [ -n "$ADDITIONAL_ARGS" ]; then
-        python3 $ADDITIONAL_ARGS -c "$SCRIPT_CONTENT"
+      python3 $ADDITIONAL_ARGS -c "$SCRIPT_CONTENT"
-      else
+    else
-        python3 -c "$SCRIPT_CONTENT"
+      python3 -c "$SCRIPT_CONTENT"
-      fi
+    fi
   - "_"
 enabled: true
 short_description: "在指定虚拟环境中编写并执行Python脚本"

tools/exiftool.yaml

@@ -1,9 +1,7 @@
 name: "exiftool"
 command: "exiftool"
 enabled: true
-
 short_description: "元数据提取工具"
-
 description: |
   ExifTool用于读取、写入和编辑各种文件格式的元数据。
 
@@ -18,7 +16,6 @@ description: |
   - 元数据检查
   - 隐私保护
   - 文件分析
-
 parameters:
   - name: "file_path"
     type: "string"
@@ -26,21 +23,33 @@ parameters:
     required: true
     position: 0
     format: "positional"
-  
+  - name: "output_json"
-  - name: "output_format"
+    type: "bool"
-    type: "string"
+    description: "以JSON格式输出（等同于 -json）"
-    description: "输出格式（json, xml, csv）"
     required: false
-    flag: "-j"
+    flag: "-json"
     format: "flag"
-  
+    default: false
+  - name: "output_xml"
+    type: "bool"
+    description: "以XML格式输出（等同于 -X）"
+    required: false
+    flag: "-X"
+    format: "flag"
+    default: false
+  - name: "output_csv"
+    type: "bool"
+    description: "以CSV格式输出（等同于 -csv）"
+    required: false
+    flag: "-csv"
+    format: "flag"
+    default: false
   - name: "tags"
     type: "string"
     description: "要提取的特定标签"
     required: false
-    flag: "-TAG"
+    format: "template"
-    format: "flag"
+    template: "-{value}"
-
   - name: "additional_args"
     type: "string"
     description: |