​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 PoC
URL：https://github.com/IamVSM/msdt-follina

标签：#CVE-2022
GitHub
GitHub - IamVSM/msdt-follina: Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 Attack Vector
GitHub - IamVSM/msdt-follina: Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 Attack Vector
Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 Attack Vector - IamVSM/msdt-follina
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)
URL：https://github.com/h3v0x/CVE-2022-26134

标签：#CVE-2022
GitHub
GitHub - hev0x/CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)
GitHub - hev0x/CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)
Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134) - hev0x/CVE-2022-26134
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：一些渗透测试学习笔记
URL：https://github.com/a1phaboy/pentestNote

标签：#渗透测试
GitHub
GitHub - a1phaboy/pentestNote: 一些渗透测试学习笔记
GitHub - a1phaboy/pentestNote: 一些渗透测试学习笔记
一些渗透测试学习笔记. Contribute to a1phaboy/pentestNote development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：渗透测试
描述：一些渗透测试学习笔记
URL：https://github.com/a1phaboy/pentest

标签：#渗透测试
GitHub
GitHub - a1phaboy/pentestNote: 一些渗透测试学习笔记
GitHub - a1phaboy/pentestNote: 一些渗透测试学习笔记
一些渗透测试学习笔记. Contribute to a1phaboy/pentestNote development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Proof of Concept/Test for CVE-2022-24713 on Ubuntu
URL：https://github.com/ItzSwirlz/CVE-2022-24713-POC

标签：#CVE-2022
GitHub
GitHub - ItzSwirlz/CVE-2022-24713-POC: Proof of Concept/Test for CVE-2022-24713 on Ubuntu
GitHub - ItzSwirlz/CVE-2022-24713-POC: Proof of Concept/Test for CVE-2022-24713 on Ubuntu
Proof of Concept/Test for CVE-2022-24713 on Ubuntu - GitHub - ItzSwirlz/CVE-2022-24713-POC: Proof of Concept/Test for CVE-2022-24713 on Ubuntu
CVE
GitHub监控消息提醒！！！

更新了：代码注入
描述：PHP代码审计（SQL注入+XSS+CSRF+命令注入）
URL：https://github.com/githubXiaowangzi/NP-Manager

标签：#代码注入
GitHub
GitHub - githubXiaowangzi/NP-Manager: Apk控制流混淆；Apk-Dex2C；Res资源混淆；Dex、jar、smali文件的相互转换； Dex、Pdf文件合并； Apk、dex、jar混淆和字符串加密； Apk签名、共存；…
GitHub - githubXiaowangzi/NP-Manager: Apk控制流混淆；Apk-Dex2C；Res资源混淆；Dex、jar、smali文件的相互转换； Dex、Pdf文件合并； Apk、dex、jar混淆和字符串加密； Apk签名、共存；…
Apk控制流混淆；Apk-Dex2C；Res资源混淆；Dex、jar、smali文件的相互转换； Dex、Pdf文件合并； Apk、dex、jar混淆和字符串加密； Apk签名、共存； Res资源混淆； Dex、AXML、ARSC文件编辑及翻译；字符串加密(Apk、dex)； 一键添加Xposed检测，一键添加弹窗、对话框； axml反编译/回编译； 一键LOG添加； 一键添加字符串解密L...
代码注入
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134。
URL：https://github.com/W01fh4cker/Serein

标签：#CVE-2022
GitHub
GitHub - W01fh4cker/Serein: 【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited…
GitHub - W01fh4cker/Serein: 【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited…
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。 - W01fh4cker/Se...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-29464 PoC for WSO2 products
URL：https://github.com/jimidk/Better-CVE-2022-29464

标签：#CVE-2022
GitHub
GitHub - jimidk/Better-CVE-2022-29464: CVE-2022-29464 PoC for WSO2 products
CVE-2022-29464 PoC for WSO2 products. Contribute to jimidk/Better-CVE-2022-29464 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：PoC of CVE-2022-22978 vulnerability in Spring Security framework
URL：https://github.com/ducluongtran9121/CVE-2022-22978-PoC

标签：#CVE-2022
GitHub
GitHub - ducluongtran9121/CVE-2022-22978-PoC: PoC of CVE-2022-22978 vulnerability in Spring Security framework
PoC of CVE-2022-22978 vulnerability in Spring Security framework - ducluongtran9121/CVE-2022-22978-PoC
CVE
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：漏洞资产手机、漏洞扫描、漏洞利用、后门上传一体化的工具
URL：https://github.com/sh3llCat2007/zhMM

标签：#漏洞利用
漏洞利用
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过学校防火墙对百度网盘的限制
URL：https://github.com/mzdluo123/bypass_block

标签：#绕过
GitHub
GitHub - mzdluo123/bypass_block: 绕过学校防火墙对百度网盘的限制
GitHub - mzdluo123/bypass_block: 绕过学校防火墙对百度网盘的限制
绕过学校防火墙对百度网盘的限制. Contribute to mzdluo123/bypass_block development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-26133 Exploit
URL：https://github.com/0xAbbarhSF/CVE-2022-26133

标签：#CVE-2022
GitHub
GitHub - 0xAbbarhSF/CVE-2022-26133: CVE-2022-26133 Exploit
GitHub - 0xAbbarhSF/CVE-2022-26133: CVE-2022-26133 Exploit
CVE-2022-26133 Exploit . Contribute to 0xAbbarhSF/CVE-2022-26133 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Confluence OGNL expression injected RCE(CVE-2022-26134) poc and exp
URL：https://github.com/SNCKER/CVE-2022-26134

标签：#CVE-2022
GitHub
GitHub - SNCKER/CVE-2022-26134: [CVE-2022-26134]Confluence OGNL expression injected RCE with sandbox bypass.
GitHub - SNCKER/CVE-2022-26134: [CVE-2022-26134]Confluence OGNL expression injected RCE with sandbox bypass.
[CVE-2022-26134]Confluence OGNL expression injected RCE with sandbox bypass. - SNCKER/CVE-2022-26134
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC
URL：https://github.com/shamo0/CVE-2022-26134

标签：#CVE-2022
GitHub
GitHub - shamo0/CVE-2022-26134: Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code…
GitHub - shamo0/CVE-2022-26134: Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code…
Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC - shamo0/CVE-2022-26134
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：（CVE-2022-26134）an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server
URL：https://github.com/Brucetg/CVE-2022-26134

标签：#CVE-2022
GitHub
GitHub - Brucetg/CVE-2022-26134: （CVE-2022-26134）an unauthenticated and remote OGNL injection vulnerability resulting in code execution…
GitHub - Brucetg/CVE-2022-26134: （CVE-2022-26134）an unauthenticated and remote OGNL injection vulnerability resulting in code execution…
（CVE-2022-26134）an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server - GitHub - Brucetg/CVE-2022-26134: （CVE-2022-26134）an ...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers.
URL：https://github.com/th3b3ginn3r/CVE-2022-26134-Exploit-Detection

标签：#CVE-2022
GitHub
GitHub - th3b3ginn3r/CVE-2022-26134-Exploit-Detection: This repository contains Yara rule and the method that a security investigator…
GitHub - th3b3ginn3r/CVE-2022-26134-Exploit-Detection: This repository contains Yara rule and the method that a security investigator…
This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers. - GitHub - th3b3ginn3r/CVE-2022-2...
CVE
GitHub监控消息提醒！！！

更新了：红队
描述：网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC
URL：https://github.com/jiaocoll/BeeScan-web

标签：#红队
GitHub
GitHub - jiaocoll/BeeScan-web: 网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC | Cyberspace Asset Detection, Network Mapping, Go Language…
GitHub - jiaocoll/BeeScan-web: 网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC | Cyberspace Asset Detection, Network Mapping, Go Language…
网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC | Cyberspace Asset Detection, Network Mapping, Go Language, Distributed, Scanning, Asset Detection, Asset Mapping, Red Team, SRC - jiaocoll/BeeScan-web
红队
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote Code Execution (RCE)
URL：https://github.com/Nwqda/CVE-2022-26134

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection
URL：https://github.com/crowsec-edtech/CVE-2022-26134

标签：#CVE-2022
GitHub
GitHub - crowsec-edtech/CVE-2022-26134: CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection
CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection - crowsec-edtech/CVE-2022-26134
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-26134 Proof of Concept
URL：https://github.com/jbaines-r7/through_the_wire

标签：#CVE-2022
GitHub
GitHub - jbaines-r7/through_the_wire: CVE-2022-26134 Proof of Concept
GitHub - jbaines-r7/through_the_wire: CVE-2022-26134 Proof of Concept
CVE-2022-26134 Proof of Concept. Contribute to jbaines-r7/through_the_wire development by creating an account on GitHub.
CVE
Before
After
Back to Top