​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：log4j / log4shell IoCs from multiple sources put together in one big file (IPs) more coming soon (CVE-2021-44228)
URL：https://github.com/Nate0634034090/nate158g-m-w-n-l-p-d-a-o-e
GitHub
GitHub - Nate0634034090/nate158g-m-w-n-l-p-d-a-o-e: ### This module requires Metasploit: https://metasploit.com/download# Current…
GitHub - Nate0634034090/nate158g-m-w-n-l-p-d-a-o-e: ### This module requires Metasploit: https://metasploit.com/download# Current…
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Exploit::Remote Rank = No...
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, known as Log4Shell.
URL：https://github.com/romanutti/log4shell-vulnerable-app
GitHub
GitHub - romanutti/log4shell-vulnerable-app: This repository contains a Spring Boot web application vulnerable to CVE-2021-44228…
GitHub - romanutti/log4shell-vulnerable-app: This repository contains a Spring Boot web application vulnerable to CVE-2021-44228…
This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, known as log4shell. - romanutti/log4shell-vulnerable-app
GitHub监控消息提醒！！！

更新了：免杀
描述：go语言免杀shellcode
URL：https://github.com/k3rwin/shellcode-bypass-go
GitHub
GitHub - k3rwin/shellcode-bypass-go: go语言免杀shellcode
GitHub - k3rwin/shellcode-bypass-go: go语言免杀shellcode
go语言免杀shellcode. Contribute to k3rwin/shellcode-bypass-go development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：笔者的在原作者池风水利用工具(以下简称工具)基础上进行二次开发,新增了全自动获取内核调试模块符号的偏移量及配置参数和不同漏洞利用方式优化等功能, 解决了不同Windows版本适配问题,工具包括适配驱动和利用程序两部分组成,实现了在Windows 10 19H1之后任意版本包括满补丁系统上的稳定利用.
URL：https://github.com/cbwang505/poolfengshui
GitHub
GitHub - cbwang505/poolfengshui: 笔者的在原作者池风水利用工具(以下简称工具)基础上进行二次开发,新增了全自动获取内核调试模块符号的偏移量及配置参数和不同漏洞利用方式优化等功能, 解决了不同Windows版本适配问题,工…
GitHub - cbwang505/poolfengshui: 笔者的在原作者池风水利用工具(以下简称工具)基础上进行二次开发,新增了全自动获取内核调试模块符号的偏移量及配置参数和不同漏洞利用方式优化等功能, 解决了不同Windows版本适配问题,工…
笔者的在原作者池风水利用工具(以下简称工具)基础上进行二次开发,新增了全自动获取内核调试模块符号的偏移量及配置参数和不同漏洞利用方式优化等功能, 解决了不同Windows版本适配问题,工具包括适配驱动和利用程序两部分组成,实现了在Windows 10 19H1之后任意版本包括满补丁系统上的稳定利用. - cbwang505/poolfengshui
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.
URL：https://github.com/boku7/BokuLoader
GitHub
GitHub - boku7/BokuLoader: A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt…
GitHub - boku7/BokuLoader: A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt…
A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! - boku7/BokuLoader
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB exploit
URL：https://github.com/30440r/gex
GitHub
GitHub - 30440r/gex: Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)
GitHub - 30440r/gex: Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)
Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s) - 30440r/gex
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：CVE-2021-44832
URL：https://github.com/DanielRuf/CVE-2021-44832
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Presents how to exploit CVE-2021-44228 vulnerability.
URL：https://github.com/MarceloLeite2604/log4j-vulnerability
GitHub
GitHub - MarceloLeite2604/log4j-vulnerability: Presents how to exploit CVE-2021-44228 vulnerability.
Presents how to exploit CVE-2021-44228 vulnerability. - MarceloLeite2604/log4j-vulnerability
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Section Mapping Process Injection (secinject): Cobalt Strike BOF
URL：https://github.com/apokryptein/secinject
GitHub
GitHub - apokryptein/secinject: Section Mapping Process Injection (secinject): Cobalt Strike BOF
GitHub - apokryptein/secinject: Section Mapping Process Injection (secinject): Cobalt Strike BOF
Section Mapping Process Injection (secinject): Cobalt Strike BOF - apokryptein/secinject
GitHub监控消息提醒！！！

更新了：Red Team
描述：Active Directory Red Team Tools
URL：https://github.com/nobelh/ActiveDirectory
GitHub
GitHub - nobelh/ActiveDirectory: Active Directory Red Team Tools
GitHub - nobelh/ActiveDirectory: Active Directory Red Team Tools
Active Directory Red Team Tools. Contribute to nobelh/ActiveDirectory development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：Red Team
描述：A collection of awesome software, libraries, learning tutorials, documents and books, technical resources and cool stuff about Red Team in Cybersecurity.
URL：https://github.com/paulveillard/cybersecurity-red-team
GitHub
GitHub - paulveillard/cybersecurity-red-team: An ongoing & curated collection of awesome software best practices and techniques…
GitHub - paulveillard/cybersecurity-red-team: An ongoing & curated collection of awesome software best practices and techniques…
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technica...
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：CVE-2021-3707 , CVE-2021-3708
URL：https://github.com/HadiMed/firmware-analysis
GitHub
GitHub - HadiMed/DSL-2750U-Full-chain: CVE-2021-3707 , CVE-2021-3708
GitHub - HadiMed/DSL-2750U-Full-chain: CVE-2021-3707 , CVE-2021-3708
CVE-2021-3707 , CVE-2021-3708. Contribute to HadiMed/DSL-2750U-Full-chain development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Script to create a log4j (CVE-2021-44228) exploit with support for different methods of getting a reverse shell
URL：https://github.com/a5tra/log4j-exploit-builder
GitHub
GitHub - a5tra/log4j-exploit-builder: Script to create a log4j (CVE-2021-44228) exploit with support for different methods of getting…
GitHub - a5tra/log4j-exploit-builder: Script to create a log4j (CVE-2021-44228) exploit with support for different methods of getting…
Script to create a log4j (CVE-2021-44228) exploit with support for different methods of getting a reverse shell - GitHub - a5tra/log4j-exploit-builder: Script to create a log4j (CVE-2021-44228) exp...
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Discover Log4Shell vulnerability [CVE-2021-45105]
URL：https://github.com/name/log4j
GitHub
GitHub - name/log4j: Discover Log4Shell vulnerability [CVE-2021-44832]
Discover Log4Shell vulnerability [CVE-2021-44832]. Contribute to name/log4j development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Explore CVE-2021-44228, a vulnerability in log4j affecting almost all software under the sun.
URL：https://github.com/Bhagwatjadhav1997/tryhackme-Solar-exploiting-log4j
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：CVE-2021-45232 POC
URL：https://github.com/Ifory885/CVE-2021-45232
GitHub
GitHub - Ifory885/CVE-2021-45232: CVE-2021-45232 POC
GitHub - Ifory885/CVE-2021-45232: CVE-2021-45232 POC
CVE-2021-45232 POC. Contribute to Ifory885/CVE-2021-45232 development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Detection script for CVE-2021-42278 and CVE-2021-42287
URL：https://github.com/cybersecurityworks553/noPac-detection
GitHub
GitHub - cybersecurityworks553/noPac-detection: Detection script for CVE-2021-42278 and CVE-2021-42287
GitHub - cybersecurityworks553/noPac-detection: Detection script for CVE-2021-42278 and CVE-2021-42287
Detection script for CVE-2021-42278 and CVE-2021-42287 - cybersecurityworks553/noPac-detection
GitHub监控消息提醒！！！

更新了：Red Team
描述：Overlord - Red Teaming Infrastructure Automation
URL：https://github.com/qsecure-labs/overlord
GitHub
GitHub - qsecure-labs/overlord: Overlord - Red Teaming Infrastructure Automation
GitHub - qsecure-labs/overlord: Overlord - Red Teaming Infrastructure Automation
Overlord - Red Teaming Infrastructure Automation. Contribute to qsecure-labs/overlord development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：IOCs for CVE-2021-44228
URL：https://github.com/cungts/VTI-IOCs-CVE-2021-44228
GitHub
cungts/VTI-IOCs-CVE-2021-44228
cungts/VTI-IOCs-CVE-2021-44228
IOCs for CVE-2021-44228. Contribute to cungts/VTI-IOCs-CVE-2021-44228 development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Burp插件，可以通过Burp代理选中请求，生成Cobalt Strike的profile文件
URL：https://github.com/Peithon/JustC2file
GitHub
GitHub - Peithon/JustC2file: Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)
GitHub - Peithon/JustC2file: Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)
Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile) - Peithon/JustC2file
Before
After
Back to Top