​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：RCE
描述：A fine-grained ripeness qualification network is proposed, termed as RCE-Net and RCE-Net with RetinexNet. S-H Robotics Lab
URL：https://github.com/harvesting-group/RipenessQualification

标签：#RCE
GitHub
GitHub - harvesting-group/RipenessQualification: A fine-grained ripeness qualification network is proposed, termed as RCE-Net and…
GitHub - harvesting-group/RipenessQualification: A fine-grained ripeness qualification network is proposed, termed as RCE-Net and…
A fine-grained ripeness qualification network is proposed, termed as RCE-Net and RCE-Net with RetinexNet. S-H Robotics Lab - harvesting-group/RipenessQualification
RCE
GitHub监控消息提醒！！！

更新了：hvv
描述：swa20250405066io40q7k24c2j1pf3hvv9y
URL：https://github.com/static-web-apps-testing-org/swa20250405066io40q7k24c2j1pf3hvv9y

标签：#hvv
hvv
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Environment used to find Moodle CVE-2025-26529
URL：https://github.com/NightBloodz/moodleTestingEnv

标签：#CVE-2025
GitHub
GitHub - NightBloodz/moodleTestingEnv: Environment used to find Moodle CVE-2025-26529
GitHub - NightBloodz/moodleTestingEnv: Environment used to find Moodle CVE-2025-26529
Environment used to find Moodle CVE-2025-26529. Contribute to NightBloodz/moodleTestingEnv development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：内存马
描述：通过字节码对比检测agent内存马.
URL：https://github.com/keven1z/simpleMSS

标签：#内存马
GitHub
GitHub - keven1z/simpleMSS: 通过字节码对比检测agent内存马.
通过字节码对比检测agent内存马. Contribute to keven1z/simpleMSS development by creating an account on GitHub.
内存马
GitHub监控消息提醒！！！

更新了：hvv
描述：swa2025040416hvvuezzb3aizjdxor5q4ca
URL：https://github.com/static-web-apps-testing-org/swa2025040416hvvuezzb3aizjdxor5q4ca

标签：#hvv
hvv
GitHub监控消息提醒！！！

更新了：hvv
描述：swa2025040414xqwxzu8f2718hvvapjcmkk
URL：https://github.com/static-web-apps-testing-org/swa2025040414xqwxzu8f2718hvvapjcmkk

标签：#hvv
GitHub
GitHub - static-web-apps-testing-org/swa2025040414xqwxzu8f2718hvvapjcmkk: swa2025040414xqwxzu8f2718hvvapjcmkk
swa2025040414xqwxzu8f2718hvvapjcmkk. Contribute to static-web-apps-testing-org/swa2025040414xqwxzu8f2718hvvapjcmkk development by creating an account on GitHub.
hvv
GitHub监控消息提醒！！！

更新了：渗透测试
描述：该工具的主要目标是对hw蓝队的网络流量进行详细分析，识别潜在的安全威胁，特别是针对Web应用的攻击（如SQL注入、XSS、Webshell等）。它通过模块化设计让用户能够根据需要选择和定制不同的功能，适用于安全研究人员、渗透测试人员和网络管理员等专业人士。
URL：https://github.com/CuriousLearnerDev/TrafficEye

标签：#渗透测试
GitHub
GitHub - CuriousLearnerDev/TrafficEye: This tool is designed to help penetration testers and network administrators identify potential…
GitHub - CuriousLearnerDev/TrafficEye: This tool is designed to help penetration testers and network administrators identify potential…
This tool is designed to help penetration testers and network administrators identify potential security threats, especially those targeting web applications such as SQL injection, XSS, and WebShe...
渗透测试
GitHub监控消息提醒！！！

更新了：sql注入
描述：SQL Firewall, Prevent SQL injection, 防sql注入
URL：https://github.com/gongfan1213/7640groupwork

标签：#sql注入
GitHub
GitHub - VanGongwanxiaowan/7640groupwork: 基于Python和 MySQL的电子商务平台，提供了供应商管理、产品目录、搜索系统模块，实现标签驱动的产品发现功能，通过执行 SQL 语句搜索包含指定标签或名称片段的产…
基于Python和 MySQL的电子商务平台，提供了供应商管理、产品目录、搜索系统模块，实现标签驱动的产品发现功能，通过执行 SQL 语句搜索包含指定标签或名称片段的产品。订单管理和产品搜索等功能。供应商管理模块，支持供应商列表展示与注册，通过执行 SQL 语句实现对vendors表的查询和插入操作。产品目录模块，实现产品浏览与添加功能，提供按供应商 ID 浏览产品和添加新产品的功能，对pr...
sql注入
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
URL：https://github.com/Kirbirls/Anydesk-Exploit-CVE-2025-12654-RCE-Builder

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：seo|黑帽seo|sem|sem开户|竞价开户|域名||老域名|备案域名|批发域名|服务器||香港服务器|美国服务器|韩国服务器|台湾服务器|多ip服务器|站群||站群软件|蜘蛛池软件|建站工具|渗透||渗透拿站|webshell|免杀木马|远控|劫持|提权|流量||流量变现|收流量|卖流量
URL：https://github.com/seocn/seocn

标签：#免杀
GitHub
GitHub - seocn/seocn.github.io: seo|黑帽seo|sem|sem开户|竞价开户|域名||老域名|备案域名|批发域名|服务器||香港服务器|美国服务器|韩国服务器|台湾服务器|多ip服务器|站群||站群软件|蜘蛛池软件|…
GitHub - seocn/seocn.github.io: seo|黑帽seo|sem|sem开户|竞价开户|域名||老域名|备案域名|批发域名|服务器||香港服务器|美国服务器|韩国服务器|台湾服务器|多ip服务器|站群||站群软件|蜘蛛池软件|…
seo|黑帽seo|sem|sem开户|竞价开户|域名||老域名|备案域名|批发域名|服务器||香港服务器|美国服务器|韩国服务器|台湾服务器|多ip服务器|站群||站群软件|蜘蛛池软件|建站工具|渗透||渗透拿站|webshell|免杀木马|远控|劫持|提权|流量||流量变现|收流量|卖流量 - seocn/seocn.github.io
免杀
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
URL：https://github.com/h3st4k3r/CVE-2025-30065

标签：#CVE-2025
GitHub
GitHub - h3st4k3r/CVE-2025-30065: This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization.…
GitHub - h3st4k3r/CVE-2025-30065: This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization.…
This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantiate arbitrary record types during parsi...
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述： WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution (RCE)
URL：https://github.com/Nxploited/CVE-2025-30911

标签：#RCE
GitHub
GitHub - Nxploited/CVE-2025-30911: WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution…
GitHub - Nxploited/CVE-2025-30911: WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution…
WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution (RCE) - Nxploited/CVE-2025-30911
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Monstra CMS 3.0.4 Authenticated RCE via theme injection
URL：https://github.com/wcheng729/Monstra-3.0.4-RCE

标签：#RCE
GitHub
GitHub - wcheng729/Monstra-3.0.4-RCE: Monstra CMS 3.0.4 Authenticated RCE via theme injection
GitHub - wcheng729/Monstra-3.0.4-RCE: Monstra CMS 3.0.4 Authenticated RCE via theme injection
Monstra CMS 3.0.4 Authenticated RCE via theme injection - wcheng729/Monstra-3.0.4-RCE
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Subrion File Upload Bypass to RCE (Authenticated)
URL：https://github.com/Drew-Alleman/CVE-2018-19422

标签：#RCE
GitHub
GitHub - Drew-Alleman/CVE-2018-19422: Subrion File Upload Bypass to RCE and Custom File Upload (Authenticated) POC
Subrion File Upload Bypass to RCE and Custom File Upload (Authenticated) POC - Drew-Alleman/CVE-2018-19422
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-2294 < Wordpress Kubio[Plugin] - Local File Inclusion[LFI].
URL：https://github.com/realcodeb0ss/CVE-2025-2294-PoC

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-30567 - WordPress WP01 < Path traversal
URL：https://github.com/realcodeb0ss/CVE-2025-30567-PoC

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：漏洞复现
描述：cve-2025-22223 漏洞复现
URL：https://github.com/1ucky7/cve-2025-22223-demo-1.0.0

标签：#漏洞复现
GitHub
GitHub - 1ucky7/cve-2025-22223-demo-1.0.0: cve-2025-22223 漏洞复现
GitHub - 1ucky7/cve-2025-22223-demo-1.0.0: cve-2025-22223 漏洞复现
cve-2025-22223 漏洞复现. Contribute to 1ucky7/cve-2025-22223-demo-1.0.0 development by creating an account on GitHub.
漏洞复现
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述： Collection of Beacon Object Files (BOF) for Cobalt Strike
URL：https://github.com/ohkuom/BOF-Kit

标签：#Cobalt Strike
GitHub
GitHub - ohkuom/BOF-Kit: Collection of Beacon Object Files (BOF) for Cobalt Strike
Collection of Beacon Object Files (BOF) for Cobalt Strike - ohkuom/BOF-Kit
Cobalt
GitHub监控消息提醒！！！

更新了：反序列化
描述：Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。
URL：https://github.com/Chave0v0/ShiroAttack2_Pro

标签：#反序列化
GitHub
GitHub - Chave0v0/ShiroAttack2_Pro: Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。
Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。. Contribute to Chave0v0/ShiroAttack2_Pro development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)
URL：https://github.com/fahimalshihab/NextBypass

标签：#CVE-2025
GitHub
GitHub - fahimalshihab/NextBypass: Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)
GitHub - fahimalshihab/NextBypass: Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)
Next.js Middleware Authorization Bypass Tool (CVE-2025-29927) - fahimalshihab/NextBypass
CVE
Before
After
Back to Top