zan8in/afrogИнструмент безопасности для Bug Bounty, Pentest и Red Teaming.
<p align="center">
<a href="#"><img src="https://raw.githubusercontent.com/zan8in/afrog/HEAD/images/afrog-logo.svg" width="60px" alt="afrog"></a>
</p>
<h4 align="center">Инструмент безопасности для Bug Bounty, пентеста и Red Teaming</h4>
<p align="center">
<a href="https://github.com/zan8in/afrog/blob/main/README.md">English</a> •
<a href="https://github.com/zan8in/afrog/blob/main/docs/README_CN.md">中文</a>
</p>
<p align="center">
<img src="https://img.shields.io/badge/Go-1.27+-00ADD8?logo=go" alt="Go version">
<a href="https://github.com/zan8in/afrog/releases/latest"><img src="https://img.shields.io/github/v/release/zan8in/afrog?include_prereleases&sort=semver" alt="Latest release"></a>
<a href="https://github.com/zan8in/afrog/stargazers"><img src="https://img.shields.io/github/stars/zan8in/afrog?style=flat-square" alt="GitHub stars"></a>
<a href="https://github.com/zan8in/afrog/blob/main/LICENSE"><img src="https://img.shields.io/github/license/zan8in/afrog" alt="License"></a>
<a href="https://github.com/zan8in/afrog/issues"><img src="https://img.shields.io/github/issues-raw/zan8in/afrog" alt="Issues"></a>
</p>
## Что такое afrog
`afrog` — это высокопроизводительный набор инструментов для сканирования безопасности, созданный для рабочих процессов bug bounty, пентеста и red team. Он объединяет быстрое зондирование целей, встроенные проверки уязвимостей, создание пользовательских PoC и автоматизацию на основе SDK в едином рабочем процессе на Go.
### Что делает afrog
- Быстрое и целенаправленное сканирование веб-целей и сетевых сервисов
- Поддержка встроенных и пользовательских PoC для практической проверки безопасности
- Снижение шума ложных срабатываний благодаря точному проектированию правил и проверок
- Гибкая интеграция с приложениями на Go, сценариями автоматизации и приватными конвейерами PoC
## Установка
### Зависимости
- Go 1.27 или новее
### Бинарный релиз
Скачайте последний релиз по ссылке:
- <https://github.com/zan8in/afrog/releases/latest>
### Сборка из исходного кода
```bash
git clone https://github.com/zan8in/afrog.git
cd afrog
go mod tidy
go build -o afrog cmd/afrog/main.go
./afrog -h
```
### Установка через Go
```bash
go install -v github.com/zan8in/afrog/v3/cmd/afrog@latest
```
## Быстрый старт
Сканирование одной цели:
```bash
afrog -t https://example.com
```
Сканирование нескольких целей из файла:
```bash
afrog -T targets.txt
```
Запуск только проверок уровня high и critical:
```bash
afrog -T targets.txt -S high,critical
```
Запустите встроенную веб-консоль (откройте `http://127.0.0.1:16868` в браузере и войдите, используя пароль, выведенный в терминал):
```bash
afrog -web
```
## Документация
Документация организована в пять руководств:
| Руководство | С чего начать |
| --- | --- |
| Руководство пользователя | [Что такое afrog и как его использовать](https://github.com/zan8in/afrog/blob/main/docs/en/user-guide/01-overview.md) |
| Веб-консоль | [Запуск сканирований и управление результатами в браузере](https://github.com/zan8in/afrog/blob/main/docs/en/web/01-overview.md) |
| Руководство по написанию PoC | [Напишите свой первый PoC](https://github.com/zan8in/afrog/blob/main/docs/en/poc/01-quickstart.md) |
| Руководство по использованию SDK | [Встраивание afrog в вашу программу на Go](https://github.com/zan8in/afrog/blob/main/docs/en/sdk/01-quickstart.md) |
| Курируемые PoC | [Включение лицензированных курируемых PoC](https://github.com/zan8in/afrog/blob/main/docs/en/curated/01-overview.md) |
## Участники PoC
<div><table frame=void>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/b6be986588e2221bd337ee40e357c48dd0d29511c6a69749b5c368e5d8162f9d.png"
alt="Contributor avatar"
/>
<br>
<a href="https://blog.csdn.net/U_U520"><sub>不动明王</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/da42e8648ed7404a1096f71113b8aba807abdbfa7e381cdc9e713627b0b65c89.png"
alt="Contributor avatar"
/>
<br>
<a href="https://www.linuxlz.com/"><sub>雪山</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/f7e7e78f1c2d308a5216c92f1973ed95929da6bfe461eaa4c4d0960b0a37db7c.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/White-hua"><sub>White-hua</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/d4ab098e69125f1c2b73bad60125163b350d3ccc167d7f2a40f7d604f6bc9349.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0)"><sub>123456</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/c786e7372573e88d6cfb0f03bc7a67fdaf380927f4074697824533c147fb527e.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/ifofor"><sub>ifofor</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/fef7f04c04c090469b7fa51f6cf9bab53bbd4706a9882873f9569bf206b999b4.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/SkinAir"><sub>Air</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/14f6556e592680b9f916bc49c3ba8b80c993887117fb626f0ffb41f69d73d6ff.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/zhizhuoshuma"><sub>执着</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/93e66b515fac4263e80bd6cdcaf832a4847a2926a5d802cb236dc1553b536fac.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/purple-WL"><sub>purple-WL</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/042e18fc2615eb699f1d5146a1fa9a1724c5a58b85cffe8f81541a6ee5360e54.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>throat</sub></a>
</td>
</tr>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/05448a4fb9aab282a80bc3d949a41616ebecf31bc29a3ccb8910f39be7b21000.png"
alt="Contributor avatar"
/>
<br>
<a href="http://secx.store:4000/archives/"><sub>Secx</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/7ff53adf002374f9553fdee9fadaa33a4428929411c16e0b89884ca77358a83d.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/yueyu0740"><sub>冰河</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/4eed8bf0fe3b7e1ab26beae0606813f8b3ea13844e3ee19a6c03ab7975e5a6ba.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>Sheen</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/64711092b7b7bf2f1a8b83d8ab414fba925d0fa28ddad66656015c56f0ab95f9.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>a16</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/0688060188e981a059e50998b3dc937102c1f201ddddb1cab3fb7d1c6f6a8071.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>A1</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/2a95c724ca11344b06fd983725a04219b4f7510046efa4570ed2cfd465514cc9.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/rainbow2972"><sub>rainbow2972</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/46ee62db6bafd06e954530595d4994e8c00ed766a008916ec9d33a942fa49dac.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/wuha0926"><sub>wuha0926</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/b9b9a64672b22b987ce6a437183c6aa63202f65ab293cefe95dff1a208487993.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>茄子</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/79f2cc361bf54d6def96c81da792d96f8d65e3993a9df67fb689f6f4bf2130d1.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>lei_sec</sub></a>
</td>
</tr>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/70800195b402df9b8b6356e4a9870f0ed4e82cce0d62e18b48d25382ef09e208.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/G-H-Z"><sub>G-H-Z</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/bea2840b6462e56a8591c7d6567685bf95357924380120db38e928472d393760.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/LDDP"><sub>wh1te</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/5f46f7adb68b1aff71ff941cc01552c3aa9f3dd08597f4e3cab04b72989726ba.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>清月</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/824c2276bc4a6058f833a895ed1680821da4adcb95c2c62c0a33120b4807a747.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>york</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/4abf40648670a149718b0f4a6248fabce0ff6a84573d06eefa790004a1b80043.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>7eleven.eth</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/b9c31a0c06d5b77063719507e39d144b73466142a2aa5ff4308a5c2d57e9bf99.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/Double-q1015"><sub>Double...</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/ff3456ab4eff5ca2dd673f5d31e75c077a2678b6dbcbde92df7d315d0ffa03f6.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/iceyjchen"><sub>ICEY_</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/a8b53cbcc9057a8b786b8cc4751d8a75eaff84d23b8a2f8990a5ded2d18a9b7a.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/Ablackcatlazy"><sub>lazy</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/53ff47c2a0e4ce3a1b73f08119fbef6376d05427406d26c9aa6a0f1cf7e558d2.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>free2e</sub></a>
</td>
</tr>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/3f183ede38557aff22ccebc6930ba5a6c006a2c05a98f68d2938e692abb1162a.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>m4sk</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/3d31507955289aeba1a894da57c9b9cda800e2ad136474197440d1f019c660db.png"
alt="Contributor avatar"
/>
<br>
<a href="https://www.yuque.com/chenmoshuren/qyxg2k"><sub>沉默树人</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/06b07ea4bd3bd12852b4156942934531d0424a1921da09560d47fb8ad54217e5.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>陈麻子</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/794b76cbfb1b0334674fbe63af67780f99657c4b13f5e7a6936eae6fee3c20c4.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/leonardo-o1"><sub>leonardo-o1</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/5564c37dda6daf29791adb1e8ec3534bc120abe2ae1cacbee01219cb993946c8.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>江湖人称魏...</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/14e7f4fcad75f813aed6b5a246505e590fe170fbfb01b131c1c5acf98cb998ce.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>若兮风</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/73179f29b26d12b3154a522d975f4568d624936e8e5a1cd770d824edefa8458c.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>-sudo</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/525e48a81be5f3935aa6ed15bf5f2f25f98cd7b45041d96e6e4d6dc0925f4c20.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/Cuerz"><sub>Cuerz</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/dca2a99be27a6a4de936363319fd7d549e0b698b735a01500381eb6382534ee9.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>laohuan12138</sub></a>
</td>
</tr>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/9fc2f6ab553f081a3f15c74991c39b010969e00563c4667bc1acde7876e2291b.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/exp0l0zzz"><sub>exp0l0zzz</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/3c6f4421b22cc5babce8b8c0e799f0c25424e2402fd2db98a70075f0bbd4e385.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/1derian"><sub>1derian</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/243d2b4c4c713041bee097db17622cd667607f5f140239af081f07f649a5d79e.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/CMDB-M"><sub>CMDB-M</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/4751d4e902358d2a9f6f66aea87d2dabb6a8e8c92c46043c03a58276e3a09714.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:(0);"><sub>li1u</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/14e936dc6f1544ba72a08ca53ae05545c49a6ac50c5e817e6a2b16fec222667a.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/s0nd9r"><sub>oxsonder</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/18f73b4682bebe241739d78b09017a370b80c0e3eb50de99e3ddb2e1fd1015ec.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>Zhiliao</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/6f89875a464f73bb6de8c2f04096dc46cb9693c7fd4b6d1b38bd6bd347ac94c5.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>段</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/90059da0a56db73106e94a04de961a7c9c630ef0019e04b1bc447cf92a289105.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/HuiTaiL6"><sub>HuiTaiL</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/b66f6077afa623b286d5e2926143d14febd90844fb23b6d832a453ed0f2a9f5d.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/Miracles666"><sub>Miracles666</sub></a>
</td>
</tr>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/96eeb1fb82b8170a7268b74126aede0edab4d9d8b7a1fe4e352446e3a8b91b82.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>Observer</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/5bb6736e6eafbc093a7df2082a75271f5ec81868b79b676e35d525c115425931.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>黑熊</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/b8e606d4239ef2196f8bcbe333241423d8381532a5276fc00698ff98e8362e9a.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>TryA9ain</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/ec1d88ea2cdd62d4c65389aac72ce407a46063d9cd04b58c7b978162ccc6a69a.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/fgz00"><sub>fgz00</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/97e348f42ed9b9b19659134c1a438a16f3fdfc9bfb3815bda25a47757118a9e0.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/Y3y1ng"><sub>Y3y1ng</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/84302f067105b2ce6744c55408427f3188c65a2956784c0fdb793d2453fb4c0f.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>二大爷</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/06e71fbffef515ceb4870fdad14b3a4d27078688a9edc623d47b750cef6142b9.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/wanswu"><sub>Wans</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/5865093ceddaf62249d34355fbfdf5b860cb601da8426032295be80a8345c6bc.png"
alt="Contributor avatar"
/>
<br>
<a href="https://github.com/hbdxmz"><sub>海边的小米粥</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/ad99a7d285842e79110269d5cbc080f216c6522e9d5908720d5adef65b75f3a5.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>Wen</sub></a>
</td>
</tr>
<tr>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/3de24fcc1088c1921090e84b7a701f76fa0f256a1afed8c1982a9ad93920c105.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>SULAB</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/c8f312d6a22ffa63ef9259808e3937a247ba1f12bdba33367ee6a28a6c685ba0.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0);"><sub>ZacharyZcR</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/a2a008345cb31d5ac5a50752aa5102cbef9c788ca808d04b1d565d12d6d055cc.png"
alt="Contributor avatar"
/>
<br>
<a href="https://superhero.blog.csdn.net/"><sub>Superhero</sub></a>
</td>
<td align="center">
<img src="https://assets.kitploit.com/production/public/readmes/5376/3ba922a5df1914f199fc4f718f414f10a4d262e6737729a22672d74d96d38f8e.png"
alt="Contributor avatar"
/>
<br>
<a href="javascript:void(0)"><sub>k5rC85Lma</sub></a>
</td>
</tr>
</table></div>
## Сообщество
Чтобы присоединиться к дискуссионной группе afrog в WeChat, добавьте аккаунт afrog и отметьте его как `afrog`.
<img src="https://raw.githubusercontent.com/zan8in/afrog/main/images/discussion.jpg" width="33%" alt="discussion group">
## 404Starlink
afrog является частью [404Starlink](https://github.com/knownsec/404StarLink).
## Отказ от ответственности
Этот инструмент предназначен только для легально авторизованной работы по обеспечению безопасности. Не сканируйте неавторизованные цели. Пользователь несёт полную ответственность за любое неправомерное использование или незаконную деятельность.