红蓝队环境自动化部署工具
$ wget -O f8x https://f8x.wgpsec.org/f8x && chmod +x f8x && bash f8x -h
click to copy
# 为什么选择 f8x
多场景覆盖
红队、蓝队、渗透、云、安全开发、代理 — 一套脚本搞定
即装即用
自动检测依赖，按需编译/拉取，支持主流 Linux + arm64
可插拔选项
通过 flag 自由组合，减少重复配置
CI/CD 友好
创建 /tmp/IS_CI 即可非交互运行，适配流水线
# f8x -h
Batch installation
-b: install Basic Environment(gcc, make, git, vim, telnet, jq, unzip ...)
-p: install Proxy Environment(Warning : Use only when needed)
-d: install Development Environment(python3, pip3, Go, Docker, SDKMAN)
-k(a/b/c/d/e): install Pentest environment(hashcat, ffuf, OneForAll, impacket ...)
-s: install Blue Team Environment(Fail2Ban, chkrootkit, rkhunter)
-f: install Other Tools(AdguardTeam, trash-cli, fzf)
-cloud: install Cloud Applications(Terraform, Serverless, wrangler)
-all: fully automated deployment
Development Environment
-docker: install docker
-docker-cn: install docker (aliyun source)
-lua: install lua
-nn: install npm & NodeJs
-go: install golang
-oraclejdk(8/11/17): install oraclejdk
-openjdk: install openjdk
-py3(7/8/9/10): install python3(Based on package manager)
-py2: install python2(Based on package manager)
-py2-f: force install python2(Recommended if -py2 fails)
-pip2-f: force install pip2(Recommended if -py2 fails)
-pyenv: install pyenv
-perl: install perl
-ruby: install ruby(If that fails, try -ruby-f)
-rust: install rust
-code: install code-server
-chromium: install Chromium(Used with rad, crawlergo)
-crawl: install crawl tools
-phantomjs: install PhantomJS
Blue Team Tools
-binwalk: install binwalk
-binwalk-f: force install binwalk(Recommended if -binwalk fails)
-clamav: install ClamAV
-lt: install LogonTracer(High hardware requirements)
-suricata: install Suricata
-vol: install volatility
-vol3: install volatility3
Red Team Tools
-aircrack: install aircrack-ng
-bypass: install Bypass
-wpscan: install wpscan
-wx: install wxappUnpacker
-yakit: install yakit
Red Team Infrastructure
-arl: install ARL (~872 MB)(github.com/TophantTechnology/ARL)
-awvs15: install AWVS15
-cs45: install CobaltStrike 4.5
-frp: install frp
-interactsh: install interactsh
-merlin: install merlin
-msf: install Metasploit
-mobsf: install MobSF (~1.54 GB)
-mythic: install mythic
-nodejsscan: install nodejsscan (~873 MB)
-nps: install nps
-pupy: install pupy
-rg: install RedGuard
-http: install simplehttpserver
-sliver: install sliver-server && client
-sliver-client: install sliver-client
-sps: install SharPyShell
-viper: install Viper (~2.1 GB)
Vulnerable Environments
-metarget: install metarget
-vulhub: install vulhub (~210 MB)
-vulfocus: install vulfocus (~1.04 GB)
-TerraformGoat: install TerraformGoat
Miscellaneous Services
-asciinema: install asciinema
-aa: install aaPanel
-1panel: install 1Panel
-bt: install 宝塔服务
-clash: install clash
-nginx: install nginx
-ssh: install ssh(RedHat default, no need to reinstall)
-ssr: install ssr
-zsh: install zsh
Other
-clear: Clean up system usage traces
-info: View system information
-optimize: Optimize performance
-remove: Uninstall vps cloud monitoring
-rmlock: Run the Unlock module
-swap: Configuring swap partitions
-update: Update f8x
-upgrade: Upgrade some tools
# 快速组合方案
- # 安装全部侦查 + 利用工具
- alias pentest-full='f8x -ka -kb' 渗透全套
- # Python3, Go, Docker, Node.js, SDKMAN
- alias dev-env='f8x -d' 开发环境
- # Fail2Ban, rkhunter, anti-portscan
- alias blue-team='f8x -s' 蓝队防御
- # CobaltStrike + frp + RedGuard
- alias c2-setup='f8x -cs45 -frp -rg' C2 快速部署
- # 基础工具 + SSH + Zsh
- alias basic-all='f8x -b -ssh -zsh' 基础环境
- # nmap, httpx, subfinder, ffuf ...
- alias recon-light='f8x -ka' 轻量侦查
# redc × f8x 融合
# redc 多云部署平台内置 f8x 软件商店，部署后一键装机
redc GUI ──▶ 软件商店 (98 tools) ──▶ SSH ──▶ VPS
│
├── wget -O /tmp/f8x https://f8x.wgpsec.org/f8x
├── bash /tmp/f8x -nmap -ffuf -httpx
└── 实时输出 → SSH 终端
# f8x 作为 redc 的软件安装引擎，用户通过 GUI 选择工具，redc 通过 SSH 在目标机器执行 f8x
GUI 软件商店
在 redc 中以可视化商店形式浏览 f8x 全部 98 个工具模块，分类筛选、搜索、批量勾选
SSH 终端联动
安装过程在 redc 内置 SSH 终端实时展示，用户可直接交互处理安装选项
多云部署后装机
redc 一键部署 AWS/阿里云/GCP 等 VPS 后，直接在软件商店选择工具完成环境搭建
catalog 自动同步
f8x 工具目录通过 catalog.json 自动同步到 redc，f8x 新增工具后 redc 自动更新
# 使用示例
# 下载安装 f8x
$ curl -o f8x https://f8x.wgpsec.org/f8x && chmod +x f8x
$ mv f8x /usr/local/bin/
# 安装基础环境 + 渗透工具集
$ f8x -b
$ f8x -ka
# 部署 C2 基础设施
$ f8x -cs45 -frp -rg
# CI/CD 非交互模式
$ touch /tmp/IS_CI && f8x -k
# CTF 环境
$ wget -O f8x-ctf https://f8x.wgpsec.org/f8x-ctf && bash f8x-ctf -help
# 中间件/数据库环境
$ wget -O f8x-dev https://f8x.wgpsec.org/f8x-dev && bash f8x-dev -help
# 固定工具版本
$ vim f8x_version.sh # 覆盖变量以固定版本
# 在线演示录像
# FAQ
-p 选项做什么?
替换 DNS、检查基础编译环境、可选编译安装 Proxychains-ng、提示配置 /etc/proxychains.conf、设置 pip 与 docker 代理并重启服务。
如何避免交互?
创建 /tmp/IS_CI 文件即可在 CI/CD 中非交互执行 f8x。
许可证与社区?
Apache License 2.0 · 404Team StarLink 2.0