​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：绕过
描述：利用缓冲区溢出执行特定代码（绕过静态检测）（现只有Ret2Libc技术的版本）
URL：https://github.com/StrawberryMilkChocolate00xff/Programming_SOF

标签：#绕过
绕过
GitHub监控消息提醒！！！

更新了：免杀
描述：webshell免杀案例
URL：https://github.com/rexSurprise/webshell-free

标签：#免杀
GitHub
GitHub - r3x5ur/webshell-free: webshell免杀案例
GitHub - r3x5ur/webshell-free: webshell免杀案例
webshell免杀案例. Contribute to r3x5ur/webshell-free development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：This is working POC of CVE-2022-36271
URL：https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271

标签：#CVE-2022
GitHub
GitHub - SaumyajeetDas/POC-of-CVE-2022-36271: This is working POC of CVE-2022-36271
GitHub - SaumyajeetDas/POC-of-CVE-2022-36271: This is working POC of CVE-2022-36271
This is working POC of CVE-2022-36271 . Contribute to SaumyajeetDas/POC-of-CVE-2022-36271 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike UDRL for memory scanner evasion.
URL：https://github.com/kyleavery/AceLdr

标签：#Cobalt Strike
GitHub
GitHub - kyleavery/AceLdr: Cobalt Strike UDRL for memory scanner evasion.
GitHub - kyleavery/AceLdr: Cobalt Strike UDRL for memory scanner evasion.
Cobalt Strike UDRL for memory scanner evasion. Contribute to kyleavery/AceLdr development by creating an account on GitHub.
Cobalt
GitHub监控消息提醒！！！

更新了：webshell
描述：一款类似菜刀的webshell管理软件。基于UWP平台，以支持DPI缩放。目前是开发初期，还没有实现基本功能。
URL：https://github.com/dybb8999/HMagicShell

标签：#webshell
GitHub
GitHub - dybb8999/HMagicShell: 一款类似菜刀的webshell管理软件。基于UWP平台，以支持DPI缩放。目前是开发初期，还没有实现基本功能。
GitHub - dybb8999/HMagicShell: 一款类似菜刀的webshell管理软件。基于UWP平台，以支持DPI缩放。目前是开发初期，还没有实现基本功能。
一款类似菜刀的webshell管理软件。基于UWP平台，以支持DPI缩放。目前是开发初期，还没有实现基本功能。 - GitHub - dybb8999/HMagicShell: 一款类似菜刀的webshell管理软件。基于UWP平台，以支持DPI缩放。目前是开发初期，还没有实现基本功能。
webshell
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：HTTP3-attacks (CVE-2022-30592)
URL：https://github.com/efchatz/HTTP3-attacks

标签：#CVE-2022
GitHub
GitHub - efchatz/HTTP3-attacks: HTTP3-attacks (CVE-2022-30592)
HTTP3-attacks (CVE-2022-30592). Contribute to efchatz/HTTP3-attacks development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：代码审计
描述：Power7089的博客。专注渗透测试，Java代码审计，努力扬帆，驶向远方！
URL：https://github.com/Power7089/power7089.github.io

标签：#代码审计
GitHub
GitHub - Power7089/power7089.github.io: Power7089的博客。专注渗透测试，Java代码审计，努力扬帆，驶向远方！
GitHub - Power7089/power7089.github.io: Power7089的博客。专注渗透测试，Java代码审计，努力扬帆，驶向远方！
Power7089的博客。专注渗透测试，Java代码审计，努力扬帆，驶向远方！. Contribute to Power7089/power7089.github.io development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：bypass av
描述：免杀学习笔记
URL：https://github.com/colind0pe/AV-Bypass-Learning

标签：#bypass av
GitHub
GitHub - colind0pe/AV-Bypass-Learning: 免杀学习笔记
GitHub - colind0pe/AV-Bypass-Learning: 免杀学习笔记
免杀学习笔记. Contribute to colind0pe/AV-Bypass-Learning development by creating an account on GitHub.
bypass
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process.
URL：https://github.com/ScriptIdiot/patchit

标签：#Cobalt Strike
GitHub
GitHub - ScriptIdiot/BOF-patchit: An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both…
An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available. - ScriptIdiot/BOF-patchit
Cobalt
GitHub监控消息提醒！！！

更新了：Red Team
描述：Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad de Santiago, agosto 2022.
URL：https://github.com/Ppamo/usach_phishing_lab_202208

标签：#Red Team
GitHub
GitHub - Ppamo/usach_phishing_lab_202208: Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad…
GitHub - Ppamo/usach_phishing_lab_202208: Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad…
Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad de Santiago, agosto 2022. - Ppamo/usach_phishing_lab_202208
Red
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)
URL：https://github.com/jbaines-r7/theway

标签：#CVE-2022
GitHub
GitHub - jbaines-r7/theway: A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)
GitHub - jbaines-r7/theway: A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)
A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829) - jbaines-r7/theway
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：免杀
URL：https://github.com/shellfeel/Ant-AntV

标签：#免杀
GitHub
GitHub - shellfeel/Ant-AntV: 一个经过实战考验的免杀程序生成器
一个经过实战考验的免杀程序生成器. Contribute to shellfeel/Ant-AntV development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：漏洞EXP
描述：白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目
URL：https://github.com/BaizeSec/bylibrary

标签：#漏洞EXP
GitHub
GitHub - BaizeSec/bylibrary: 白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目
GitHub - BaizeSec/bylibrary: 白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目
白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目. Contribute to BaizeSec/bylibrary development by creating an account on GitHub.
漏洞EXP
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：metasploit and python module for CVE-2022-26809 windows rpc rce via smb 445
URL：https://github.com/Ziggy78/CVE-2022-26809-MASS-RCE

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：https://nvd.nist.gov/vuln/detail/CVE-2022-34169
URL：https://github.com/bor8/CVE-2022-34169

标签：#CVE-2022
GitHub
GitHub - bor8/CVE-2022-34169: https://nvd.nist.gov/vuln/detail/CVE-2022-34169
GitHub - bor8/CVE-2022-34169: https://nvd.nist.gov/vuln/detail/CVE-2022-34169
https://nvd.nist.gov/vuln/detail/CVE-2022-34169. Contribute to bor8/CVE-2022-34169 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-24500 Windows SMB Unauthenticated Remote Code Execution Vulnerability
URL：https://github.com/Daro1967/CVE-2022-24500-MASS-RCE

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
URL：https://github.com/CodeXTF2/Burp2Malleable

标签：#Cobalt Strike
GitHub
GitHub - CodeXTF2/Burp2Malleable: Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable…
Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles - CodeXTF2/Burp2Malleable
Cobalt
GitHub监控消息提醒！！！

更新了：Red Team
描述：In this repo you will find some projects related to Red Teaming
URL：https://github.com/pathakabhi24/RedTeam-Projects

标签：#Red Team
GitHub
GitHub - pathakabhi24/RedTeam-Projects: In this repo you will find some projects related to Red Teaming
GitHub - pathakabhi24/RedTeam-Projects: In this repo you will find some projects related to Red Teaming
In this repo you will find some projects related to Red Teaming - GitHub - pathakabhi24/RedTeam-Projects: In this repo you will find some projects related to Red Teaming
Red
GitHub监控消息提醒！！！

更新了：渗透测试
描述：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
URL：https://github.com/TophantTechnology/ARL

标签：#渗透测试
渗透测试
GitHub监控消息提醒！！！

更新了：反序列化
描述：Java安全漫谈 - 12.反序列化篇(6)
URL：https://github.com/d3rypt0n/JavaSec-ser06

标签：#反序列化
GitHub
GitHub - crypt0nX/JavaSec-ser06: Java安全漫谈 - 12.反序列化篇(6)
GitHub - crypt0nX/JavaSec-ser06: Java安全漫谈 - 12.反序列化篇(6)
Java安全漫谈 - 12.反序列化篇(6). Contribute to crypt0nX/JavaSec-ser06 development by creating an account on GitHub.
反序列化
Before
After
Back to Top