|
| 1 | +--- |
| 2 | +title: 安全工具 |
| 3 | +weight: 4 |
| 4 | +description: 区块链/Web3安全工具 |
| 5 | +keywords: |
| 6 | + - smart contract security |
| 7 | + - 智能合约安全 |
| 8 | + - Token 安全 |
| 9 | + - DeFi 安全 |
| 10 | + - Web3安全工具 |
| 11 | +--- |
| 12 | + |
| 13 | +> 内容主要来自 [Web3-Security-Tools](https://github.com/Quillhash/Web3-Security-Tools)，做部分补充 |
| 14 | +
|
| 15 | +## 总览 |
| 16 | + |
| 17 | + |
| 18 | +## VM相关 |
| 19 | +- [ZIION VM](https://www.ziion.org/) |
| 20 | + |
| 21 | +## 区块链取证工具 |
| 22 | + |
| 23 | +### 区块链浏览器 |
| 24 | + |
| 25 | +- [Etherscan](https://etherscan.io/) |
| 26 | +- [btc.com](https://btc.com/) |
| 27 | +- [Bscscan](https://bscscan.com/) |
| 28 | +- [Polygonscan](https://polygonscan.com/) |
| 29 | +- *通用浏览器* |
| 30 | + 1. [Blockchain.com](https://www.blockchain.com/explorer) |
| 31 | + 2. [Blockchair.com](https://blockchair.com/) |
| 32 | + |
| 33 | +### 智能合约反编译 |
| 34 | + |
| 35 | +- [Dedaub](https://library.dedaub.com/decompile) |
| 36 | +- [Panoramix](https://github.com/palkeo/panoramix) |
| 37 | +- [abi-decompiler](https://github.com/Decurity/abi-decompiler) |
| 38 | +- [Eveem](http://www.eveem.org/) Solidity反编译器 |
| 39 | + |
| 40 | + |
| 41 | +### 浏览器插件 |
| 42 | + |
| 43 | +- [Tenderly](https://chrome.google.com/webstore/detail/tenderly-debugger/miiolgcpknpjjfagkaddfgakbdenenfn) |
| 44 | +- [MetaDock](https://chrome.google.com/webstore/detail/metadock/fkhgpeojcbhimodmppkbbliepkpcgcoo) |
| 45 | +- [Sentio](https://chromewebstore.google.com/detail/sentio/kkdofmcnddcnldoingfpiojnnkdcbhnf) |
| 46 | +- [Blockchair](https://chrome.google.com/webstore/detail/blockchair/fhhkkooikehnkaodebbfnkinedlllcfk) |
| 47 | +- [Impersonator](https://chrome.google.com/webstore/detail/impersonator/hgihfkmoibhccfdohjdbklmmcknjjmgl) |
| 48 | + |
| 49 | +### Rug 检查工具 |
| 50 | + |
| 51 | +- [Rug Pull Finder](https://www.rugpullfinder.io/confirmedrugpulls) |
| 52 | +- [bscheck](http://bscheck.eu/) |
| 53 | +- [rugscreen](http://rugscreen.com/) |
| 54 | +- [QuillCheck](https://quillaudits.com/tools/quillcheck/) |
| 55 | +- [poocoin’s rugcheck](https://poocoin.app/rugcheck) |
| 56 | +- [tokensniffer](https://tokensniffer.com/) |
| 57 | +- [rugpulldetector](http://rugpulldetector.com/) |
| 58 | +- [rugdoc honeypot checker](https://rugdoc.io/honeypot/) |
| 59 | + |
| 60 | +### Txn 可视化工具 |
| 61 | + |
| 62 | +- [MistTrack](https://misttrack.io/) |
| 63 | +- [ethtx.info](https://ethtx.info/) |
| 64 | +- [Front-running explorer](https://zeromev.org/) |
| 65 | +- [Phalcon BlockSec](https://phalcon.blocksec.com/?s=09) |
| 66 | +- [Bitquery Explorer](https://explorer.bitquery.io/) |
| 67 | +- [Tx eth samczsun](https://tx.eth.samczsun.com/) |
| 68 | +- [Tenderly](https://tenderly.co/) |
| 69 | +- [Sentio](https://app.sentio.xyz/explorer) |
| 70 | +- [Socketscan](https://socketscan.io/) |
| 71 | +- [3D VR blockchain visualization](https://ethresear.ch/t/open-source-3d-and-vr-blockchain-visualizations/3297/2) |
| 72 | +- [eigenphi.io](https://eigenphi.io/) |
| 73 | +- [nansen.ai](https://nansen.ai) |
| 74 | +- [**Officer CIA’s Investigation tools list**](https://github.com/OffcierCia/On-Chain-Investigations-Tools-List) |
| 75 | + |
| 76 | + |
| 77 | +### Toke 流程可视化 |
| 78 | + |
| 79 | +- [breadcrumbs.app](https://www.breadcrumbs.app/) |
| 80 | +- [bloxy.info](https://bloxy.info/) |
| 81 | +- [ethtective.com](http://ethtective.com/) |
| 82 | + |
| 83 | + |
| 84 | +### 杂项工具 |
| 85 | + |
| 86 | +- [ETH Toolbox](https://eth-toolbox.com/) |
| 87 | +- [DethCode](https://github.com/dethcrypto/dethcode) |
| 88 | +- [Cryptocurrencies OSINT](https://start.me/p/ek4rxK/cryptocurrency-osint) |
| 89 | +- [DeBank](https://debank.com/) |
| 90 | +- [Tutela](https://tutela.xyz/) |
| 91 | + |
| 92 | +--- |
| 93 | + |
| 94 | +## 智能合约审计工具 |
| 95 | + |
| 96 | +### 测试框架 |
| 97 | + |
| 98 | +- [Foundry](https://github.com/foundry-rs/foundry) |
| 99 | +- [Hardhat](https://hardhat.org/) |
| 100 | +- [Brownie](https://eth-brownie.readthedocs.io/en/stable/) |
| 101 | +- [Truffle](https://trufflesuite.com/) |
| 102 | + |
| 103 | +### Fuzzers |
| 104 | + |
| 105 | +- [Echidna](https://github.com/crytic/echidna) |
| 106 | +- [Foundry Fuzz](https://book.getfoundry.sh/forge/fuzz-testing) |
| 107 | +- [ChainFuzz](https://github.com/ChainSecurity/ChainFuzz) |
| 108 | +- [Harvey](https://mariachris.github.io/Pubs/FSE-2020-Harvey.pdf) |
| 109 | +- [sFuzz](https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=6068&context=sis_research) |
| 110 | + |
| 111 | +### VS Code 插件 |
| 112 | + |
| 113 | +- [Solidity Visual Developer](https://marketplace.visualstudio.com/items?itemName=tintinweb.solidity-visual-auditor) |
| 114 | +- [Slither VSC](https://marketplace.visualstudio.com/items?itemName=trailofbits.slither-vscode) |
| 115 | +- [Inline Bookmarks](https://github.com/tintinweb/vscode-inline-bookmarks) |
| 116 | +- [Solidity Metrics](https://marketplace.visualstudio.com/items?itemName=tintinweb.solidity-metrics) |
| 117 | +- [EthOver](https://marketplace.visualstudio.com/items?itemName=tintinweb.vscode-ethover) |
| 118 | +- [GraphViz Interactive Preview](https://marketplace.visualstudio.com/items?itemName=tintinweb.graphviz-interactive-preview) |
| 119 | +- [Mythx VSC](https://marketplace.visualstudio.com/items?itemName=MythX.mythxvsc) |
| 120 | +- [Remix VSC](https://marketplace.visualstudio.com/items?itemName=RemixProject.ethereum-remix) |
| 121 | + |
| 122 | +### 格式化及格式检查 |
| 123 | + |
| 124 | +- [EthLint](https://github.com/duaraghav8/Ethlint) |
| 125 | +- [solidity-coverage](https://github.com/sc-forks/solidity-coverage) |
| 126 | +- [Prettier](https://prettier.io/) + [Solidity Plugin](https://github.com/prettier-solidity/prettier-plugin-solidity) |
| 127 | +- [Doc-Gen](https://mtmacdonald.github.io/docgen/docs/index.html) |
| 128 | +- [Solhint](https://github.com/protofire/solhint) |
| 129 | +- [sol function profiler](https://github.com/EricR/sol-function-profiler) |
| 130 | +- [BSOL](https://github.com/Giulio2002/bsol) 一个为Solidity代码片段和智能合约编写基准测试的工具 |
| 131 | + |
| 132 | +### 可视化工具 |
| 133 | + |
| 134 | +- [Solidity Visual Developer](https://marketplace.visualstudio.com/items?itemName=tintinweb.solidity-visual-auditor) |
| 135 | +- [Sūrya](https://github.com/ConsenSys/surya) |
| 136 | +- [Solgraph](https://github.com/raineorshine/solgraph) |
| 137 | +- [EVM Lab](https://github.com/ethereum/evmlab) |
| 138 | +- [Ethereum-graph-debugger](https://github.com/fergarrui/ethereum-graph-debugger) |
| 139 | + |
| 140 | +### 动静态分析 |
| 141 | + |
| 142 | +- [Slither](https://github.com/crytic/slither) |
| 143 | +- [MythX](https://mythx.io/) |
| 144 | +- [Mythril](https://github.com/ConsenSys/mythril) |
| 145 | +- [Manticore](https://github.com/trailofbits/manticore) |
| 146 | +- [securify2](https://github.com/eth-sri/securify2) |
| 147 | +- [Eth Security Toolbox](https://github.com/trailofbits/eth-security-toolbox) |
| 148 | +- [smartcheck](https://github.com/smartdec/smartcheck) |
| 149 | +- [solidityscan.com](https://solidityscan.com/) |
| 150 | +- [Fuzzinglab’s Octopus](https://github.com/FuzzingLabs/octopus) |
| 151 | +- [Pakala](https://github.com/palkeo/pakala) 以太坊攻击性漏洞扫描器，详见[使用Pakala窃取以太坊](https://www.palkeo.com/en/projets/ethereum/stealing_ether.html) |
| 152 | +- [Karl](https://github.com/cleanunicorn/karl) 智能合约安全漏洞检查工具 |
| 153 | +- [Verisol](https://github.com/microsoft/verisol) 来自微软的Solidity智能合约的正式验证和分析工具 |
| 154 | + |
| 155 | +### 审计指南 |
| 156 | + |
| 157 | +- [The Auditors Book](https://theauditorbook.com/) |
| 158 | +- [Solodit.xyz](https://solodit.xyz/dashboard) |
| 159 | +- [Audit Hero](https://audit-hero.com/search-findings) |
| 160 | +- [Solidity Attack Vectors](https://github.com/Quillhash/Solidity-Attack-Vectors) |
| 161 | +- [Audit Checklist](https://github.com/tamjid0x01/SmartContracts-audit-checklist) |
| 162 | +- [Awesome Solidity Gas Optimizations](https://github.com/iskdrews/awesome-solidity-gas-optimization) |
| 163 | +- [Secureum Blogs](https://substack.com/profile/23643769-rajeev-secureum) |
| 164 | +- [Diligence - Smart Contract Best Practices](https://consensys.github.io/smart-contract-best-practices/attacks/) |
| 165 | +- [Blockchain Hacking QuickStart Guide](https://start.blockchainhax.com) |
| 166 | +- [How to Become a Smart Contract Auditor by Cmichel](https://cmichel.io/how-to-become-a-smart-contract-auditor/) |
| 167 | + |
| 168 | +--- |
| 169 | + |
| 170 | +## 钱包安全 |
| 171 | +- [Stelo Labs](https://stelolabs.com/) |
| 172 | +- [BlowFish](https://blowfish.xyz/) |
| 173 | +- [Pocket Universe](https://www.pocketuniverse.app/) |
| 174 | +- [Wallet Guard](https://walletguard.app/) |
| 175 | +- [Interlock](https://www.interlock.network/) |
| 176 | +- [Revoke.cash](https://revoke.cash/) |
| 177 | +- [Novus](https://www.usenovus.io) |
| 178 | +- [Web3 Antivirus](https://web3antivirus.io/) |
| 179 | +- [PeckShield Alert](https://chrome.google.com/webstore/detail/peckshieldalert/dakkielolpafjbgnjnakddabmbbkcioe) |
| 180 | + |
| 181 | + |
| 182 | +### 更多参考 |
| 183 | + |
| 184 | +[https://github.com/OffcierCia/On-Chain-Investigations-Tools-List](https://github.com/OffcierCia/On-Chain-Investigations-Tools-List) |
| 185 | +[https://github.com/shantanhunt/Smart-Contract-Auditor-Tools-and-Techniques](https://github.com/shantanhunt/Smart-Contract-Auditor-Tools-and-Techniques) |
| 186 | +[https://github.com/Anugrahsr/Awesome-web3-Security](https://github.com/Anugrahsr/Awesome-web3-Security) </br> |
| 187 | +[https://github.com/RektifyAI/auditing-demystified](https://github.com/RektifyAI/auditing-demystified) |
| 188 | + |
0 commit comments