​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：PoCb of OpenSSL CVE-2022-1292
URL：https://github.com/Ghost1032/CVE-2022-1292

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：鱼竿钓鱼干的学习笔记文档
URL：https://github.com/reillyquintin/-

标签：#钓鱼
钓鱼
GitHub监控消息提醒！！！

更新了：漏洞POC
描述：fastjson漏洞POC代码
URL：https://github.com/YoungBear/FastjsonPoc

标签：#漏洞POC
GitHub
GitHub - YoungBear/FastjsonPoc: fastjson漏洞POC代码
GitHub - YoungBear/FastjsonPoc: fastjson漏洞POC代码
fastjson漏洞POC代码. Contribute to YoungBear/FastjsonPoc development by creating an account on GitHub.
漏洞POC
GitHub监控消息提醒！！！

更新了：Red Team
描述：Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
URL：https://github.com/MaicolRuiz01/Campeonato

标签：#Red Team
GitHub
GitHub - MaicolRuiz01/Campeonato: JAVA application that allows you to register the teams that are going to participate in a soccer…
GitHub - MaicolRuiz01/Campeonato: JAVA application that allows you to register the teams that are going to participate in a soccer…
JAVA application that allows you to register the teams that are going to participate in a soccer championship, of which you are interested in saving the team code, name and team captain, who in tur...
Red
GitHub监控消息提醒！！！

更新了：Red Team
描述：Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
URL：https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection

标签：#Red Team
GitHub
GitHub - sbasu7241/AWS-Threat-Simulation-and-Detection: Playing around with Stratus Red Team (Cloud Attack simulation tool) and…
GitHub - sbasu7241/AWS-Threat-Simulation-and-Detection: Playing around with Stratus Red Team (Cloud Attack simulation tool) and…
Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic - sbasu7241/AWS-Threat-Simulation-and-Detection
Red
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合
URL：https://github.com/west9b/F5-BIG-IP-POC

标签：#CVE-2022
GitHub
GitHub - west9b/F5-BIG-IP-POC: CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合
GitHub - west9b/F5-BIG-IP-POC: CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合
CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合. Contribute to west9b/F5-BIG-IP-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Mass RCE VIA CVE-2022-6809 AND THE METASPLOIT MODULE
URL：https://github.com/ChrisopherJohanso/CVE-2022-26809-RCE

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：SetoolMaster是一款进阶型社会工程学工具，包括了全球定位、Ngrok、Seeker高精度定位、网页钓鱼、病毒攻击、恐吓勒索信、爬虫、网站克隆、物联网设备搜索等
URL：https://github.com/LinWin-Cloud/setool-master

标签：#钓鱼
GitHub
GitHub - LinWin-Cloud/setool-master: SetoolMaster是一款让你入门即入狱的python3开发的进阶型社会工程学工具。包括了全球定位、Ngrok内网穿透、Seeker高精度定位、网页钓鱼、病毒攻击、恐吓勒索信…
SetoolMaster是一款让你入门即入狱的python3开发的进阶型社会工程学工具。包括了全球定位、Ngrok内网穿透、Seeker高精度定位、网页钓鱼、病毒攻击、恐吓勒索信、爬虫、网站克隆、物联网设备搜索等，同时拥有中文支持，内置大量钓鱼模板，设计用于组织级别红队渗透测试，用于团队组织设备型协同，经过非常多的实战演练，效果出众，远超同行产品 - LinWin-Cloud/setool-...
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment POC exploit
URL：https://github.com/0x4E0x650x6F/Wordpress-cve-CVE-2022-21661

标签：#CVE-2022
GitHub
GitHub - 0x4E0x650x6F/Wordpress-cve-CVE-2022-21661: Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment POC exploit
GitHub - 0x4E0x650x6F/Wordpress-cve-CVE-2022-21661: Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment POC exploit
Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment POC exploit - 0x4E0x650x6F/Wordpress-cve-CVE-2022-21661
CVE
GitHub监控消息提醒！！！

更新了：内存马
描述：用Java agent实现内存马等功能
URL：https://github.com/ethushiroha/JavaAgentTools

标签：#内存马
GitHub
GitHub - ethushiroha/JavaAgentTools: 用Java agent实现内存马等功能
GitHub - ethushiroha/JavaAgentTools: 用Java agent实现内存马等功能
用Java agent实现内存马等功能. Contribute to ethushiroha/JavaAgentTools development by creating an account on GitHub.
内存马
GitHub监控消息提醒！！！

更新了：应急响应
描述：用于Linux应急响应，排查异常用户登入情况。
URL：https://github.com/enomothem/Whoamifuck

标签：#应急响应
GitHub
GitHub - enomothem/Whoamifuck: 用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。
用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。 - enomothem/Whoamifuck
应急响应
GitHub监控消息提醒！！！

更新了：免杀
描述：ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er
URL：https://github.com/Tas9er/ByPassBehinder

标签：#免杀
GitHub
GitHub - Tas9er/ByPassBehinder: ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er
GitHub - Tas9er/ByPassBehinder: ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er
ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er. Contribute to Tas9er/ByPassBehinder development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：内存马
描述：记录总结Java内存马的类型和相关代码示例
URL：https://github.com/threeworld/JavaMemShell

标签：#内存马
GitHub
GitHub - threeworld/JavaMemShell: 记录总结Java内存马的类型和相关代码示例
记录总结Java内存马的类型和相关代码示例. Contribute to threeworld/JavaMemShell development by creating an account on GitHub.
内存马
GitHub监控消息提醒！！！

更新了：Red Team
描述：SaltStack for Red Team Operations
URL：https://github.com/red-dragon-tech/redsalt

标签：#Red Team
GitHub
GitHub - red-dragon-tech/redsalt: Salt Project for Red Team Operations
GitHub - red-dragon-tech/redsalt: Salt Project for Red Team Operations
Salt Project for Red Team Operations. Contribute to red-dragon-tech/redsalt development by creating an account on GitHub.
Red
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过burp破解版的截止日期限制. This is a tool to bypass the cracked version of the burpsuite_pro(Larry_Lau) certification deadline through time reversal.
URL：https://github.com/xcanwin/XBurpCrack

标签：#绕过
GitHub
GitHub - xcanwin/XBurpCrack: 绕过burp破解版的截止日期限制. This is a tool to bypass the cracked version of the burpsuite_pro(Larry_Lau) certification…
GitHub - xcanwin/XBurpCrack: 绕过burp破解版的截止日期限制. This is a tool to bypass the cracked version of the burpsuite_pro(Larry_Lau) certification…
绕过burp破解版的截止日期限制. This is a tool to bypass the cracked version of the burpsuite_pro(Larry_Lau) certification deadline through time reversal. - xcanwin/XBurpCrack
绕过
GitHub监控消息提醒！！！

更新了：钓鱼
描述：go语言实现钓鱼抓取微信信息，搜索微信AccInfo.dat文件，从中正则匹配出当前微信名，手机号，邮箱，地区等信息，发送到cobaltstrike服务器。
URL：https://github.com/west9b/WeChatPhishing

标签：#钓鱼
GitHub
GitHub - west9b/WeChatPhishing: go语言实现钓鱼抓取微信信息，搜索微信AccInfo.dat文件，从中正则匹配出当前微信名，手机号，邮箱，地区等信息，发送到cobaltstrike服务器。
GitHub - west9b/WeChatPhishing: go语言实现钓鱼抓取微信信息，搜索微信AccInfo.dat文件，从中正则匹配出当前微信名，手机号，邮箱，地区等信息，发送到cobaltstrike服务器。
go语言实现钓鱼抓取微信信息，搜索微信AccInfo.dat文件，从中正则匹配出当前微信名，手机号，邮箱，地区等信息，发送到cobaltstrike服务器。 - GitHub - west9b/WeChatPhishing: go语言实现钓鱼抓取微信信息，搜索微信AccInfo.dat文件，从中正则匹配出当前微信名，手机号，邮箱，地区等信息，发送到cobaltstrike服务器。
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-1609 WordPress Weblizar后门
URL：https://github.com/savior-only/CVE-2022-1609

标签：#CVE-2022
GitHub
GitHub - savior-only/CVE-2022-1609: CVE-2022-1609 WordPress Weblizar后门
GitHub - savior-only/CVE-2022-1609: CVE-2022-1609 WordPress Weblizar后门
CVE-2022-1609 WordPress Weblizar后门. Contribute to savior-only/CVE-2022-1609 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：my webshell with korean.
URL：https://github.com/spacepig-Kr/webshell

标签：#webshell
GitHub
GitHub - spacepig-Kr/webshell: my webshell with korean.
GitHub - spacepig-Kr/webshell: my webshell with korean.
my webshell with korean. Contribute to spacepig-Kr/webshell development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-24494
URL：https://github.com/vportal/AFD

标签：#CVE-2022
GitHub
GitHub - vportal/AFD: CVE-2022-24494
GitHub - vportal/AFD: CVE-2022-24494
CVE-2022-24494. Contribute to vportal/AFD development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记
URL：https://github.com/Relph1119/black-hat-python-2ed

标签：#渗透测试
GitHub
GitHub - Relph1119/black-hat-python-2nd: 《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记
GitHub - Relph1119/black-hat-python-2nd: 《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记
《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记 - GitHub - Relph1119/black-hat-python-2nd: 《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记
渗透测试
Before
After
Back to Top