Skip to content
View Real-Fruit-Snacks's full-sized avatar

Block or report Real-Fruit-Snacks

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Real-Fruit-Snacks/README.md

Real-Fruit-Snacks

Building offensive security tools — one wave at a time

Python Go JavaScript TypeScript Shell

Featured Projects


Siphon

Lightweight C2 — ECDH P-256 forward secrecy, AES-256-GCM encryption, uTLS fingerprinting

Docs Go


Aquifer

Linux post-exploitation — kernel namespace isolation, polymorphic beacons, 36 stealth modules

Docs Go


Riptide

Collaborative browser terminal — real-time sync, credential vault, variable substitution

Docs JS


Shallows

Browser-native Linux terminals — no servers, no installs, no accounts, just open and type

Docs JS

Streak

C2 & Post-Exploitation

Tool What It Does Language
Aquifer Linux post-exploitation framework with kernel namespace isolation and polymorphic beacons Go
Siphon Lightweight C2 framework — ECDH P-256 forward secrecy, AES-256-GCM, uTLS fingerprinting Go
Wellspring Payload delivery server — token-gated access, 12 delivery methods, AES-256-GCM encryption at rest Go
Spillway Reverse/bind FUSE filesystem mount over TLS 1.3 Go
Undertow Statically-linked SSH server — reverse shells, SFTP, port forwarding Go

Enumeration & Exploitation

Tool What It Does Language
Riptide Collaborative browser terminal & playbook workspace for red teams JS
Runoff Extract AD attack paths & quick wins from BloodHound CE Python
Maelstrom NetExec wrapper — 35+ AD enumeration modules in a single command Python
Rapids Modular credential spraying — 28 protocol modules with pass-the-hash Python
Seep Windows privilege escalation enumeration — 16 checks, 97 tools, MITRE ATT&CK mapping Python
Whirlpool Privilege escalation reasoning engine — parses LinPEAS/WinPEAS output Python

Reference & Environments

Tool What It Does Language
Shallows Browser-native Linux terminals powered by x86 emulation — no servers, no installs JS
Ripple Browser-based Vim editor — CodeMirror 6, Catppuccin Mocha, zero dependencies JS
Deluge Nmap & RustScan output parser with color-coded reports and multi-format export Python
Surge Offline-first command reference with fuzzy search & variable substitution JS
Fathom Lightning-fast offline man pages browser with TLDR summaries JS
Sunken-Archive Personal knowledge base & digital garden built on Quartz TS

Utilities

Tool What It Does Language
Tidemark Obsidian plugin — replace variables in markdown with YAML frontmatter values TS
LigoloSupport One-command ligolo-ng tunnel setup Shell

Snake

Followers Repos Focus

All tools are built for authorized security testing and educational purposes.

Popular repositories Loading

  1. Siphon Siphon Public

    Lightweight C2 framework for red team operations. ECDH P-256 forward secrecy, AES-256-GCM encryption, uTLS Chrome fingerprinting.

    Go 4 1

  2. Riptide Riptide Public

    Collaborative browser-based terminal and playbook workspace for penetration testing, CTF competitions, and red team operations. Real-time sync, credential vault, variable substitution, output parsi…

    JavaScript 3

  3. Deluge Deluge Public

    Advanced parser & formatter for Nmap and RustScan outputs — color-coded terminal reports, multi-format exports, and interactive scanning with Catppuccin styling.

    Python 1

  4. LigoloSupport LigoloSupport Public

    One-command setup script for ligolo-ng tunneling. Auto-downloads binaries, configures TUN interface, and guides you through pivoting.

    Shell

  5. Rapids Rapids Public

    Modular credential spraying tool for authorized security testing. 28 native Python protocol modules with automatic port scanning, adaptive skipping, and pass-the-hash support.

    Python

  6. Undertow Undertow Public

    Statically-linked SSH server in Go — reverse/bind shell, SFTP, port forwarding, TLS wrapping

    Shell