Offensive red teaming suite for Windows, macOS & Linux
Recon · Exploit · Phish · Payload · Evade · Privesc · C2 · Exfil · Ops · Team
No terminal crawling. No piecing together a dozen tools.
Choose your platform:
Quickest — grab the latest installer from the Releases page:
RedHawk Setup 0.1.7.exe → run it → done
From source:
git clone https://github.com/srivanththeattack/redhawk.git
cd redhawk
npm install
npm run packageThat produces release\RedHawk Setup <version>.exe. Run the installer.
git clone https://github.com/srivanththeattack/redhawk.git
cd redhawk
bash scripts/install-deps-mac.shOr manually:
brew install nmap python3 node
pip3 install requests beautifulsoup4 dnspython python-whois colorama tqdm aiohttp
npm install
npm run packageProduces release/RedHawk-<version>.dmg and release/RedHawk-<version>.zip.
git clone https://github.com/srivanththeattack/redhawk.git
cd redhawk
bash scripts/install-deps-linux.shOr manually:
# Debian/Ubuntu
sudo apt install nmap python3 python3-pip whois curl wget git jq scrot
pip3 install requests beautifulsoup4 dnspython python-whois colorama tqdm aiohttp
npm install
npm run packageProduces release/RedHawk-<version>.AppImage, .deb, and .rpm.
bash <(curl -sL https://raw.githubusercontent.com/srivanththeattack/redhawk/master/scripts/install-deps-linux.sh) # Linux
bash <(curl -sL https://raw.githubusercontent.com/srivanththeattack/redhawk/master/scripts/install-deps-mac.sh) # macOSRedHawk handles most of these automatically, but here's what's needed under the hood:
| Dependency | Windows | macOS | Linux |
|---|---|---|---|
| Nmap | Auto-installed via NSIS or "Install Deps" | brew install nmap |
apt install nmap |
| Python 3 | Embedded — downloaded on first launch | brew install python3 |
apt install python3 python3-pip |
| Node.js | Auto-installed via NSIS or "Install Deps" | brew install node |
apt install nodejs |
| Metasploit (Exploit tab) | WSL: msfrpc -P redhawk -S -f -j |
brew install metasploit |
apt install metasploit-framework |
| Evilginx2 (Phish tab) | WSL or NSIS installer | go install github.com/kgretzky/evilginx2@latest |
Same |
| WSL | Auto-installed by NSIS | N/A | N/A |
- Launch RedHawk — the Recon tab opens with a pre-filled target (
example.com) - Hit "Launch Scan" — runs WHOIS, DNS, subdomains, email OSINT, and a Nmap port scan automatically
- Browse results — each scan section is collapsible, results are saved to history
- Switch tabs — Exploit (Metasploit), Phish (evilginx2 campaigns), Payload (shells + obfuscation), Evade (AMSI bypass + injection), Privesc (escalation), C2 (command server + malleable profiles), Exfil (data collection), Ops (operation tracking), or Team (shared collaboration hub)
Press Ctrl+Enter from the target input to launch a scan without touching the mouse.
| Module | Highlights |
|---|---|
| 🛰 Recon | WHOIS, DNS, Subdomains, Email OSINT, HTTP Headers, GeoIP, Reverse DNS, Nmap integration, Port & Service Discovery |
| 💥 Exploit | Metasploit RPC integration, exploit search, payload generation, session management |
| 🎣 Phish | Evilginx2 integration, campaign management, phishlet support, credential capture |
| 💀 Payload | Reverse shell generation, shellcode generation, payload import, multiple obfuscation methods |
| 🥷 Evade | AMSI bypass techniques, ETW patching, Defender checks, process injection utilities |
| 🔓 Privesc | System enumeration, privilege checks, registry analysis, PowerUp integration, exploit suggestions |
| 📡 C2 | HTTP/HTTPS command server, beacon configuration, malleable profiles, task console, multiple agent types |
| 📦 Exfil | File collection, browser data collection, screenshot capture, encrypted packaging |
| 📋 Ops | Findings management, notes, screenshots, timelines, operation tracking |
| 👥 Team | Shared notes, collaboration, live activity feed, target coordination |
- Team collaboration — built-in shared hub with live activity feed, findings, notes, and target coordination. No separate server setup — it's part of the C2
- Malleable C2 profiles — customize beacon URIs, response headers, user-agent, and sleep patterns. 4 built-in profiles (default, cs-like, minimal, onedrive) plus JSON editor for custom profiles
- Split panes — work on Recon and C2 side-by-side. Drag dividers to resize. Toggle on/off in Settings
- Hamburger menu — single ☰ button replaces separate Updates, Help, Settings, and History buttons
- Settings panel — full-screen Apple-style settings with 4 sections (General, Tab Order, Appearance, Operations)
- Tab reordering — drag-and-drop tabs to reorder the navigation bar. Ctrl+Tab / Ctrl+Shift+Tab to cycle
- Toggleable preferences — Compact Mode, Status Bar, Auto-Save, Split Panes — all in Settings > General
- 30 themes — Dark, Light, Dracula, Nord, Monokai, Catppuccin, Tokyo Night, SynthWave, Cyberpunk, and more
- Cyber Kill Chain — visual progress bar tracks which phase you're actively working on
- Operations — group targets, scans, and activity into named operations. Export full op reports
- History sidebar — per-tab scan history and activity log with clear button
- Help & Updates — built-in searchable help and GitHub release checker in the hamburger menu
- Scan modes — Quick, Full, Stealth (
-sS -T2 -f), and Hyper (-T5 -A) scans - 10 agent types — Python, PowerShell (with AMSI-bypassed variant), Batch, Bash, SH, C#, VBA, Nim, Rust
⚠️ RedHawk is a red teaming tool designed for authorized security testing only.You must have explicit written permission before using this tool against any system or network. Unauthorized access is illegal in most jurisdictions and punishable by law.
The developer assumes no liability and is not responsible for any misuse or damage.
npm run dev # Vite hot-reload for the renderer
npm run build # Compile renderer + electron
npm run package # Build platform installer (exe/dmg/AppImage)
npm run typecheck # TypeScript type checkingnpm run package produces:
| Platform | Output |
|---|---|
| Windows | release\RedHawk Setup <version>.exe + portable .exe |
| macOS | release/RedHawk-<version>.dmg + .zip |
| Linux | release/RedHawk-<version>.AppImage + .deb + .rpm |
React 18 · TypeScript · Tailwind CSS · Zustand · Electron 31 · Vite · Python 3 · Nmap
Note
RedHawk is currently in active beta.
This project was developed iteratively with significant AI assistance throughout the design, implementation, testing, and documentation process. AI was used as a development aid to accelerate prototyping and refinement, while all architecture, feature selection, integration decisions, and final code review were directed by the project's author.
As RedHawk is still in beta, you may encounter bugs, incomplete features, performance issues, or breaking changes between releases. Feedback, bug reports, and feature suggestions are greatly appreciated and help improve the project.
GPLv3 — free to use, modify, and distribute. If you improve it, share it back.