​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：A python based exploit for CVE-2022-30525
URL：https://github.com/ProngedFork/CVE-2022-30525

标签：#CVE-2022
GitHub
GitHub - ProngedFork/CVE-2022-30525: CVE-2022-30525 POC
GitHub - ProngedFork/CVE-2022-30525: CVE-2022-30525 POC
CVE-2022-30525 POC. Contribute to ProngedFork/CVE-2022-30525 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：How to think like a Red Teamer
URL：https://github.com/minispooner/think-red-teaming

标签：#Red Team
Red
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike Malleable C2 reference profile
URL：https://github.com/Pernat1y/cobaltstrike-malleable-c2-reference

标签：#Cobalt Strike
Cobalt
GitHub监控消息提醒！！！

更新了：webshell
描述：Goofy way of downloading a php webshell for a ctf
URL：https://github.com/dabull2112/php-download-ctf

标签：#webshell
webshell
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-26134 - Confluence Pre-Auth Remote Code Execution via OGNL Injection
URL：https://github.com/Chocapikk/CVE-2022-26134

标签：#CVE-2022
GitHub
GitHub - Chocapikk/CVE-2022-26134: CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection
GitHub - Chocapikk/CVE-2022-26134: CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection
CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection - Chocapikk/CVE-2022-26134
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
URL：https://github.com/safakTamsesCS/PicusSecurity4.Week.Repo

标签：#CVE-2022
GitHub
GitHub - safakTamsesCS/PicusSecurity4.Week.Repo: CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
GitHub - safakTamsesCS/PicusSecurity4.Week.Repo: CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina - GitHub - safakTamsesCS/PicusSecurity4.Week.Repo: CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
CVE
GitHub监控消息提醒！！！

更新了：反序列化
描述：轻巧便利的Json序列化和反序列化工具 Lightweight and convenient tool for JSON serialization and deserialization
URL：https://github.com/lhzcm/LHZ.FastJson

标签：#反序列化
GitHub
GitHub - lhzcm/LHZ.FastJson: 轻巧便利的Json序列化和反序列化工具 Lightweight and convenient tool for JSON serialization and deserialization
轻巧便利的Json序列化和反序列化工具 Lightweight and convenient tool for JSON serialization and deserialization - lhzcm/LHZ.FastJson
反序列化
GitHub监控消息提醒！！！

更新了：反序列化
描述：这是超级美眉xml序列化、反序列化帮助模块，适用于koa框架
URL：https://github.com/qiuwenwu/mm_xml

标签：#反序列化
GitHub
GitHub - qiuwenwu/mm_xml: 这是超级美眉xml序列化、反序列化帮助模块，适用于koa框架
GitHub - qiuwenwu/mm_xml: 这是超级美眉xml序列化、反序列化帮助模块，适用于koa框架
这是超级美眉xml序列化、反序列化帮助模块，适用于koa框架. Contribute to qiuwenwu/mm_xml development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-24806 and CVE-2022-24807 are an unauthenticated RCE vulnerability in magento and adobe commerce
URL：https://github.com/oturu/CVE-2022-24806-MASS-RCE

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：Offensive Security | Red Team
URL：https://github.com/manojshrestha00/theHarvester

标签：#Red Team
GitHub
GitHub - manojxshrestha/theHarvester: theHarvester is a very simple to use, yet powerful and effective tool designed to be used…
GitHub - manojxshrestha/theHarvester: theHarvester is a very simple to use, yet powerful and effective tool designed to be used…
theHarvester is a very simple to use, yet powerful and effective tool designed to be used in the early stages of a penetration test or red team engagement. Use it for open source intelligence (OSIN...
Red
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：proof of concept to CVE-2022-30190 (follina)
URL：https://github.com/AmitNiz/follina_cve_2022-30190

标签：#CVE-2022
GitHub
GitHub - amitniz/follina_cve_2022-30190: proof of concept to CVE-2022-30190 (follina)
GitHub - amitniz/follina_cve_2022-30190: proof of concept to CVE-2022-30190 (follina)
proof of concept to CVE-2022-30190 (follina). Contribute to amitniz/follina_cve_2022-30190 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：writeup and poc for [CVE-2022-26809]
URL：https://github.com/scoobydoobi/CVE-2022-26809-RCE

标签：#CVE-2022
GitHub
GitHub - scoobydoobi/CVE-2022-26809-RCE: writeup and poc for [CVE-2022-26809]
GitHub - scoobydoobi/CVE-2022-26809-RCE: writeup and poc for [CVE-2022-26809]
writeup and poc for [CVE-2022-26809]. Contribute to scoobydoobi/CVE-2022-26809-RCE development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：用于weblogic的渗透测试
URL：https://github.com/pperk/WeblogicScan

标签：#渗透测试
GitHub
GitHub - pperk/WeblogicScan: 用于weblogic的渗透测试
GitHub - pperk/WeblogicScan: 用于weblogic的渗透测试
用于weblogic的渗透测试. Contribute to pperk/WeblogicScan development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：用于weblogic漏洞利用
URL：https://github.com/pperk/weblogic

标签：#漏洞利用
漏洞利用
GitHub监控消息提醒！！！

更新了：红队
描述：红队基础设施自动化部署工具
URL：https://github.com/lmckydai/QAX-A-Team

标签：#红队
GitHub
lmckydai/QAX-A-Team
lmckydai/QAX-A-Team
红队基础设施自动化部署工具. Contribute to lmckydai/QAX-A-Team development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：bypass av
描述：用go写的一个shellcode免杀加载器，可过360火绒
URL：https://github.com/F6JO/Reflex_BypassAV

标签：#bypass av
bypass
GitHub监控消息提醒！！！

更新了：Red Team
描述：Suite of scripts that cover the phases of a Red Team Attack Lifecycle.
URL：https://github.com/mcsquizzy/red-team-toolbox

标签：#Red Team
GitHub
GitHub - mcsquizzy/red-team-toolbox: Suite of scripts that cover the phases of a Red Team Attack Lifecycle.
GitHub - mcsquizzy/red-team-toolbox: Suite of scripts that cover the phases of a Red Team Attack Lifecycle.
Suite of scripts that cover the phases of a Red Team Attack Lifecycle. - GitHub - mcsquizzy/red-team-toolbox: Suite of scripts that cover the phases of a Red Team Attack Lifecycle.
Red
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：[CVE-2022-26134] Attlasian Confluence RCE
URL：https://github.com/KeepWannabe/BotCon

标签：#CVE-2022
GitHub
GitHub - KeepWannabe/BotCon: [CVE-2022-26134] Attlasian Confluence RCE
GitHub - KeepWannabe/BotCon: [CVE-2022-26134] Attlasian Confluence RCE
[CVE-2022-26134] Attlasian Confluence RCE. Contribute to KeepWannabe/BotCon development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：generate evasion php webshell
URL：https://github.com/Arg1nt/chaos

标签：#webshell
webshell
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试工具一键部署
URL：https://github.com/0x076/VPS_vps__attack-frame

标签：#渗透测试
GitHub
GitHub - 0x076/VPS_vps__attack-frame: 渗透测试工具一键部署
GitHub - 0x076/VPS_vps__attack-frame: 渗透测试工具一键部署
渗透测试工具一键部署. Contribute to 0x076/VPS_vps__attack-frame development by creating an account on GitHub.
渗透测试
Before
After
Back to Top