​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #POC

📦 项目名称： wildfly-rce-poc
👤 项目作者： chern0bit
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 19:56:14

📝 项目描述：
Proof-of-concept exploits for two WildFly RCE paths: pre-authentication CORBA/IIOP deserialization and a Jackson JSON parser bypass. For authorized testing only.

🔗 点击访问项目地址
GitHub
GitHub - chern0bit/wildfly-rce-poc: Proof-of-concept exploits for two WildFly RCE paths: pre-authentication CORBA/IIOP deserialization…
GitHub - chern0bit/wildfly-rce-poc: Proof-of-concept exploits for two WildFly RCE paths: pre-authentication CORBA/IIOP deserialization…
Proof-of-concept exploits for two WildFly RCE paths: pre-authentication CORBA/IIOP deserialization and a Jackson JSON parser bypass. For authorized testing only. - chern0bit/wildfly-rce-poc
RCE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #CVE #Stored

📦 项目名称： CVE-2025-29471
👤 项目作者： skraft9
🛠 开发语言： Unknown
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 19:09:00

📝 项目描述：
Stored XSS in Nagios Log Server 2024R1.3.1

🔗 点击访问项目地址
GitHub
GitHub - skraft9/CVE-2025-29471: Stored XSS in Nagios Log Server 2024R1.3.1
GitHub - skraft9/CVE-2025-29471: Stored XSS in Nagios Log Server 2024R1.3.1
Stored XSS in Nagios Log Server 2024R1.3.1. Contribute to skraft9/CVE-2025-29471 development by creating an account on GitHub.
XSS CVE Stored
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #malware

📦 项目名称： pdf-malware-analyzer
👤 项目作者： nishchaygaur
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 19:23:08

📝 项目描述：
A Flask-based PDF security analyzer that uses static analysis, weighted heuristics, YARA rules, and risk scoring to detect suspicious PDF characteristics.

🔗 点击访问项目地址
GitHub
GitHub - nishchaygaur/pdf-malware-analyzer: A Flask-based PDF security analyzer that uses static analysis, weighted heuristics…
GitHub - nishchaygaur/pdf-malware-analyzer: A Flask-based PDF security analyzer that uses static analysis, weighted heuristics…
A Flask-based PDF security analyzer that uses static analysis, weighted heuristics, YARA rules, and risk scoring to detect suspicious PDF characteristics. - nishchaygaur/pdf-malware-analyzer
YARA rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule

📦 项目名称： 100-days-of-yara
👤 项目作者： screwz475
🛠 开发语言： YARA
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 19:45:30

📝 项目描述：
no rule of this repo is guaranteed to work properly

🔗 点击访问项目地址
GitHub
GitHub - screwz475/100-days-of-yara: no rule of this repo is guaranteed to work properly
GitHub - screwz475/100-days-of-yara: no rule of this repo is guaranteed to work properly
no rule of this repo is guaranteed to work properly - screwz475/100-days-of-yara
YARA rule
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Reflected #DOM

📦 项目名称： XSSPECTER
👤 项目作者： Orest002
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 18:49:23

📝 项目描述：
DOM & reflected XSS scanner with payload mutation and headless-Chrome execution detection (Playwright).

🔗 点击访问项目地址
GitHub
GitHub - Orest002/XSSPECTER: DOM & reflected XSS scanner with payload mutation and headless-Chrome execution detection (Playwright).
DOM & reflected XSS scanner with payload mutation and headless-Chrome execution detection (Playwright). - Orest002/XSSPECTER
XSS Reflected DOM
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： scanner
👤 项目作者： trevorcapps
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 18:54:52

📝 项目描述：
Vulnerability scanner based on nmap and nuclei

🔗 点击访问项目地址
GitHub
GitHub - trevorcapps/scanner: Vulnerability scanner based on nmap and nuclei
GitHub - trevorcapps/scanner: Vulnerability scanner based on nmap and nuclei
Vulnerability scanner based on nmap and nuclei. Contribute to trevorcapps/scanner development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： cve-2026-19900-PoC
👤 项目作者： on3sk-0x1
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 18:09:19

📝 项目描述：
cve-2026-19900-PoC

🔗 点击访问项目地址
GitHub
GitHub - on3sk-0x1/cve-2026-19900-PoC: cve-2026-19900-PoC
GitHub - on3sk-0x1/cve-2026-19900-PoC: cve-2026-19900-PoC
cve-2026-19900-PoC. Contribute to on3sk-0x1/cve-2026-19900-PoC development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： TryHackMe---Ignite-Writeup
👤 项目作者： HackerRank7
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 17:48:56

📝 项目描述：
Complete walkthrough for the TryHackMe Ignite lab, detailing Fuel CMS 1.4.1 Remote Code Execution (RCE) exploitation and Linux Privilege Escalation.

🔗 点击访问项目地址
GitHub
GitHub - HackerRank7/TryHackMe---Ignite-Writeup: Complete walkthrough for the TryHackMe Ignite lab, detailing Fuel CMS 1.4.1 Remote…
GitHub - HackerRank7/TryHackMe---Ignite-Writeup: Complete walkthrough for the TryHackMe Ignite lab, detailing Fuel CMS 1.4.1 Remote…
Complete walkthrough for the TryHackMe Ignite lab, detailing Fuel CMS 1.4.1 Remote Code Execution (RCE) exploitation and Linux Privilege Escalation. - HackerRank7/TryHackMe---Ignite-Writeup
RCE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： web-Vulnerability-Scanner
👤 项目作者： ng-sudo
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 17:58:46

📝 项目描述：
A web vulnerability scanning tool written in Python for checking already known website Vulnerabilities

🔗 点击访问项目地址
GitHub
GitHub - ng-sudo/web-Vulnerability-Scanner: A web vulnerability scanning tool written in Python for checking already known website…
GitHub - ng-sudo/web-Vulnerability-Scanner: A web vulnerability scanning tool written in Python for checking already known website…
A web vulnerability scanning tool written in Python for checking already known website Vulnerabilities - ng-sudo/web-Vulnerability-Scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #POC #CVE

📦 项目名称： CVE-2026-19632
👤 项目作者： ghostpels
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 18:01:17

📝 项目描述：
Unauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress)

🔗 点击访问项目地址
GitHub
GitHub - ghostpels/CVE-2026-19632: Unauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress)
GitHub - ghostpels/CVE-2026-19632: Unauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress)
Unauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress) - ghostpels/CVE-2026-19632
POC CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： NovaC2
👤 项目作者： Cyb3rPh4nt0n
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 16:57:57

📝 项目描述：
A lightweight, asynchronous Command & Control (C2) framework built with Python, FastAPI, and NiceGUI, featuring secure AES-GCM encrypted communication for ethical hacking labs.

🔗 点击访问项目地址
GitHub
GitHub - Cyb3rPh4nt0n/NovaC2: A lightweight, asynchronous Command & Control (C2) framework built with Python, FastAPI, and NiceGUI…
GitHub - Cyb3rPh4nt0n/NovaC2: A lightweight, asynchronous Command & Control (C2) framework built with Python, FastAPI, and NiceGUI…
A lightweight, asynchronous Command & Control (C2) framework built with Python, FastAPI, and NiceGUI, featuring secure AES-GCM encrypted communication for ethical hacking labs. - Cyb3rPh4nt...
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： network-vulnerability-scanner
👤 项目作者： Logeshwaran-bit
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 15:46:37

📝 项目描述：
A Python-based network vulnerability scanner using Nmap to identify open ports and potential vulnerabilities.

🔗 点击访问项目地址
GitHub
GitHub - Logeshwaran-bit/network-vulnerability-scanner: A Python-based network vulnerability scanner using Nmap to identify open…
GitHub - Logeshwaran-bit/network-vulnerability-scanner: A Python-based network vulnerability scanner using Nmap to identify open…
A Python-based network vulnerability scanner using Nmap to identify open ports and potential vulnerabilities. - Logeshwaran-bit/network-vulnerability-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #POC

📦 项目名称： xss-poc-test
👤 项目作者： nothingnhm
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 15:18:48

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - nothingnhm/xss-poc-test
GitHub - nothingnhm/xss-poc-test
Contribute to nothingnhm/xss-poc-test development by creating an account on GitHub.
XSS POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CobaltStrike #Profile #Beacon

📦 项目名称： docker-cobaltstrike
👤 项目作者： chryzsh
🛠 开发语言： Shell
⭐ Star数量： 29 | 🍴 Fork数量： 2
📅 更新时间： 2026-09-04 15:45:43

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - chryzsh/docker-cobaltstrike
GitHub - chryzsh/docker-cobaltstrike
Contribute to chryzsh/docker-cobaltstrike development by creating an account on GitHub.
CobaltStrike Profile Beacon
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #红队

📦 项目名称： red-team-skill-tree
👤 项目作者： lupingQAQ
🛠 开发语言： Unknown
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 16:02:50

📝 项目描述：
Red team skill tree — full-stack offensive security reference: recon, AD attacks, C2 development, AV/EDR evasion, cloud-native & AI-powered attacks. 红队全栈技能参考（蓝军技能树）

🔗 点击访问项目地址
GitHub
GitHub - lupingQAQ/red-team-skill-tree: Red team skill tree — full-stack offensive security reference: recon, AD attacks, C2 development…
GitHub - lupingQAQ/red-team-skill-tree: Red team skill tree — full-stack offensive security reference: recon, AD attacks, C2 development…
Red team skill tree — full-stack offensive security reference: recon, AD attacks, C2 development, AV/EDR evasion, cloud-native & AI-powered attacks. 红队全栈技能参考（蓝军技能树） - lupingQAQ/red-team-skill-tree
C2 红队
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-34197-PoC
👤 项目作者： nirvanasec
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 15:46:37

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
nirvanasec/CVE-2026-34197-PoC
nirvanasec/CVE-2026-34197-PoC
Contribute to nirvanasec/CVE-2026-34197-PoC development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #RCE

📦 项目名称： gha-lab-b16a4f3554
👤 项目作者： pvharmo2
🛠 开发语言： C++
⭐ Star数量： 0 | 🍴 Fork数量： 1
📅 更新时间： 2026-09-04 15:52:03

📝 项目描述：
Security-research lab: CVE-2026-24480 pull_request_target pre-commit RCE in qgis/QGIS (snapshot at vulnerable commit)

🔗 点击访问项目地址
GitHub
GitHub - pvharmo2/gha-lab-b16a4f3554: Security-research lab: CVE-2026-24480 pull_request_target pre-commit RCE in qgis/QGIS (snapshot…
GitHub - pvharmo2/gha-lab-b16a4f3554: Security-research lab: CVE-2026-24480 pull_request_target pre-commit RCE in qgis/QGIS (snapshot…
Security-research lab: CVE-2026-24480 pull_request_target pre-commit RCE in qgis/QGIS (snapshot at vulnerable commit) - pvharmo2/gha-lab-b16a4f3554
CVE RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： codsoft_tasks
👤 项目作者： rshamith777-cpu
🛠 开发语言： TypeScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 14:59:58

📝 项目描述：
Completed cybersecurity projects for CODSOFT Internship (August Batch C16) — Task 1: SecureVault (AES-256 File Sharing), Task 2: Sovereign Network Packet Analyzer (SOC Workstation), and Task 3: CodeSentinel (Static Vulnerability Scanner).

🔗 点击访问项目地址
GitHub
GitHub - rshamith777-cpu/codsoft_tasks: Completed cybersecurity projects for CODSOFT Internship (August Batch C16) — Task 1: SecureVault…
Completed cybersecurity projects for CODSOFT Internship (August Batch C16) — Task 1: SecureVault (AES-256 File Sharing), Task 2: Sovereign Network Packet Analyzer (SOC Workstation), and Task 3: Cod...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #威胁情报 #IOC #样本 #恶意样本

📦 项目名称： cti-aggregator-mcp
👤 项目作者： 0x783kb
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 10:03:45

📝 项目描述：
基于Model Context Protocol (MCP) 的威胁情报聚合工具。自动查询13+开源情报源，为 IP/域名/URL/文件哈希生成专业安全画像。

🔗 点击访问项目地址
GitHub
GitHub - 0x783kb/cti-aggregator-mcp: 基于Model Context Protocol (MCP) 的威胁情报聚合工具。自动查询13+开源情报源，为 IP/域名/URL/文件哈希生成专业安全画像。
基于Model Context Protocol (MCP) 的威胁情报聚合工具。自动查询13+开源情报源，为 IP/域名/URL/文件哈希生成专业安全画像。 - 0x783kb/cti-aggregator-mcp
威胁情报 IOC 样本 恶意样本
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： defender_explorer
👤 项目作者： HackingLZ
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-09-04 14:40:18

📝 项目描述：
Browse, search, and analyze Microsoft Defender VDM signature definitions — 8.6M+ signatures, YARA generation, Lua decompilation, auto-sync

🔗 点击访问项目地址
GitHub
GitHub - HackingLZ/defender_explorer: Browse, search, and analyze Microsoft Defender VDM signature definitions — 8.6M+ signatures…
GitHub - HackingLZ/defender_explorer: Browse, search, and analyze Microsoft Defender VDM signature definitions — 8.6M+ signatures…
Browse, search, and analyze Microsoft Defender VDM signature definitions — 8.6M+ signatures, YARA generation, Lua decompilation, auto-sync - HackingLZ/defender_explorer
YARA malware
Before
After
Back to Top