abc123info/BlueTeamTools
Some data may be outdated — see provenance labels.
蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。 observed · 2026-10-06
Health v2 · maintenance only
85/100
- Activity 86
- Release rhythm 87
- Longevity 81
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 28.0
- age_days: 1141
- days_rel: 88
- days_push: 88
- n_releases_24m: 11
Adoption not part of the score
1882 stars · 109 forks observed · 2026-10-06
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
BlueTeamTools is a Java-based GUI toolbox that aggregates utilities for blue-team security analysts, covering memory-shell decompilation, webshell traffic decryption (Behinder, Godzilla, AntSword), Shiro/CAS/Log4j2 payload decoding, pcap traffic analysis, and Java deserialization packet analysis. It also includes encoding/decoding helpers, cyberspace asset mapping via Fofa/Hunter search, IP/port connection analysis, and AI-assisted identification of malicious traffic and DGA domains.
Use cases
- decrypt behinder or godzilla webshell traffic
- analyze java deserialization attack payloads
- decompile memory shell class files
- analyze pcap traffic for attack behavior
- decode shiro or log4j2 exploit payloads
- search fofa and hunter for exposed assets
- analyze ip and port connections during incident response
- decode and encode various formats during security analysis
When to choose
- you are a blue-team/SOC analyst triaging web attacks and webshell traffic
- you need to decrypt or decompile memory shells and deserialization payloads
- you want an all-in-one offline toolbox for pcap analysis and payload decoding
When to avoid
- you need a red-team offensive toolkit rather than defensive analysis
- you require a supported, licensed enterprise product with SLAs
- you need a headless/CLI tool for automation pipelines
Facets
application · maturity active
security reverse-engineering parser search-engine developer-tools gui security developer-tools networking reverse-engineering windows jvm blue-team incident-response webshell-decryption traffic-analysis pcap-analysis memory-shell-analysis deserialization threat-hunting soc-tools java-gui linux macos desktop
1 source
- readme: https://github.com/abc123info/BlueTeamTools · fetched 2026-10-06 · f85f44a914ed
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| abc123info/BlueTeamTools | main | 85 |
For agents
markdown · JSON · MCP: product_card(name="abc123info/BlueTeamTools")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem