📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：CVE-2022-42889-POC_TEXT4SHELL
URL：https://github.com/jayaram-yalla/CVE-2022-42889-POC_TEXT4SHELL
标签：#CVE-2022
更新了：CVE-2022
描述：CVE-2022-42889-POC_TEXT4SHELL
URL：https://github.com/jayaram-yalla/CVE-2022-42889-POC_TEXT4SHELL
标签：#CVE-2022
GitHub
GitHub - jayaram-yalla/CVE-2022-42889-POC_TEXT4SHELL: CVE-2022-42889-POC_TEXT4SHELL
CVE-2022-42889-POC_TEXT4SHELL. Contribute to jayaram-yalla/CVE-2022-42889-POC_TEXT4SHELL development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：A simple application that shows how to exploit the CVE-2022-42889 vulnerability
URL：https://github.com/korteke/CVE-2022-42889-POC
标签：#CVE-2022
更新了：CVE-2022
描述：A simple application that shows how to exploit the CVE-2022-42889 vulnerability
URL：https://github.com/korteke/CVE-2022-42889-POC
标签：#CVE-2022
GitHub
GitHub - korteke/CVE-2022-42889-POC: A simple application that shows how to exploit the CVE-2022-42889 vulnerability
A simple application that shows how to exploit the CVE-2022-42889 vulnerability - korteke/CVE-2022-42889-POC
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：This project includes a python script which generates malicious commands leveraging CVE-2022-42889 vulnerability
URL：https://github.com/stavrosgns/Text4ShellPayloads
标签：#CVE-2022
更新了：CVE-2022
描述：This project includes a python script which generates malicious commands leveraging CVE-2022-42889 vulnerability
URL：https://github.com/stavrosgns/Text4ShellPayloads
标签：#CVE-2022
GitHub
GitHub - stavrosgns/Text4ShellPayloads: This project includes a python script which generates malicious commands leveraging CVE…
This project includes a python script which generates malicious commands leveraging CVE-2022-42889 vulnerability - stavrosgns/Text4ShellPayloads
GitHub监控消息提醒！！！
更新了：漏洞POC
描述：(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理，主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等，并且会持续更新。
URL：https://github.com/zangcc/Aazhen-RexHa
标签：#漏洞POC
更新了：漏洞POC
描述：(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理，主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等，并且会持续更新。
URL：https://github.com/zangcc/Aazhen-RexHa
标签：#漏洞POC
GitHub
GitHub - zangcc/Aazhen-RexHa: 自研JavaFX图形化漏洞扫描工具，支持扫描的漏洞分别是： ThinkPHP-2.x-RCE， ThinkPHP-5.0.23-RCE， ThinkPHP5.0.x-5.0.23通杀RCE， ThinkPHP5…
自研JavaFX图形化漏洞扫描工具，支持扫描的漏洞分别是： ThinkPHP-2.x-RCE， ThinkPHP-5.0.23-RCE， ThinkPHP5.0.x-5.0.23通杀RCE， ThinkPHP5-SQL注入&敏感信息泄露， ThinkPHP 3.x 日志泄露NO.1， ThinkPHP 3.x 日志泄露NO.2， ThinkPHP 5.x 数据库信息泄露的漏洞...
GitHub监控消息提醒！！！
更新了：sql注入
描述：thinkphp3.2.3 sql注入检测小脚本
URL：https://github.com/11skk/thinkphp
标签：#sql注入
更新了：sql注入
描述：thinkphp3.2.3 sql注入检测小脚本
URL：https://github.com/11skk/thinkphp
标签：#sql注入
GitHub
GitHub - cmjlove1/thinkphp: thinkphp3.2.3 sql注入检测小脚本
thinkphp3.2.3 sql注入检测小脚本. Contribute to cmjlove1/thinkphp development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：Red Team
描述：Red Team Toolkit for CTF's and Learning for Windows Offense
URL：https://github.com/JHKLing/Red-VS-Blue-Project
标签：#Red Team
更新了：Red Team
描述：Red Team Toolkit for CTF's and Learning for Windows Offense
URL：https://github.com/JHKLing/Red-VS-Blue-Project
标签：#Red Team
GitHub
GitHub - JHKLing/Red-VS-Blue-Project: In this project, you will work on a Red Team vs. Blue Team scenario in which you will play…
In this project, you will work on a Red Team vs. Blue Team scenario in which you will play the role of both pentester and SOC analyst. As the Red Team, you will attack a vulnerable VM within your e...
GitHub监控消息提醒！！！
更新了：红队
描述：检测邮件发送的可行性，可用来红队作战中对目标邮箱账户测试。The feasibility sent by the detection mail can be used for the target mailbox account test in the Red Team battle.
URL：https://github.com/808Mak1r/CEmail
标签：#红队
更新了：红队
描述：检测邮件发送的可行性，可用来红队作战中对目标邮箱账户测试。The feasibility sent by the detection mail can be used for the target mailbox account test in the Red Team battle.
URL：https://github.com/808Mak1r/CEmail
标签：#红队
GitHub
GitHub - 808Mak1r/CEmail: 检测邮件发送的可行性，可用来红队作战中对目标邮箱账户测试。The feasibility sent by the detection mail can be used for the target mailbox…
检测邮件发送的可行性，可用来红队作战中对目标邮箱账户测试。The feasibility sent by the detection mail can be used for the target mailbox account test in the Red Team battle. - 808Mak1r/CEmail
GitHub监控消息提醒！！！
更新了：webshell
描述：Yara rule for web threat (webshell, redirector)
URL：https://github.com/farhanfaisal/yararule_web
标签：#webshell
更新了：webshell
描述：Yara rule for web threat (webshell, redirector)
URL：https://github.com/farhanfaisal/yararule_web
标签：#webshell
GitHub
GitHub - farhanfaisal/yararule_web: Yara rule for web threat (webshell, redirector)
Yara rule for web threat (webshell, redirector). Contribute to farhanfaisal/yararule_web development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：渗透测试
描述：渗透测试脚本, by Tr0e.
URL：https://github.com/Tr0e/MyTools
标签：#渗透测试
更新了：渗透测试
描述：渗透测试脚本, by Tr0e.
URL：https://github.com/Tr0e/MyTools
标签：#渗透测试
GitHub
GitHub - Tr0e/MobileTools: Android渗透测试脚本, by Tr0e.
Android渗透测试脚本, by Tr0e. Contribute to Tr0e/MobileTools development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：webshell
描述：A modified version of the well-known webshell - P.A.S. by Profexer. Tries to solve the problem of detecting some requests and responses by various WAF/IDS.
URL：https://github.com/cr1f/P.A.S.-Fork
标签：#webshell
更新了：webshell
描述：A modified version of the well-known webshell - P.A.S. by Profexer. Tries to solve the problem of detecting some requests and responses by various WAF/IDS.
URL：https://github.com/cr1f/P.A.S.-Fork
标签：#webshell
GitHub
GitHub - cr1f/P.A.S.-Fork: A modified version of the well-known webshell - P.A.S. by Profexer. Tries to solve the problem of detecting…
A modified version of the well-known webshell - P.A.S. by Profexer. Tries to solve the problem of detecting some requests and responses by various WAF/IDS. - cr1f/P.A.S.-Fork
GitHub监控消息提醒！！！
更新了：免杀
描述：ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender（其他杀软未测试）。
URL：https://github.com/Axx8/ShellCode_Loader
标签：#免杀
更新了：免杀
描述：ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender（其他杀软未测试）。
URL：https://github.com/Axx8/ShellCode_Loader
标签：#免杀
GitHub
GitHub - SecNN/ShellCode_Loader: ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前…
ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender（其他杀软未测试）。 - SecNN/ShellCode_Loader
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：Zabbix-SAML-Bypass: CVE-2022-23131
URL：https://github.com/Vulnmachines/Zabbix-CVE-2022-23131
标签：#CVE-2022
更新了：CVE-2022
描述：Zabbix-SAML-Bypass: CVE-2022-23131
URL：https://github.com/Vulnmachines/Zabbix-CVE-2022-23131
标签：#CVE-2022
GitHub
GitHub - Vulnmachines/Zabbix-CVE-2022-23131: Zabbix-SAML-Bypass: CVE-2022-23131
Zabbix-SAML-Bypass: CVE-2022-23131. Contribute to Vulnmachines/Zabbix-CVE-2022-23131 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：[fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
URL：https://github.com/hosch3n/FastjsonVulns
标签：#CVE-2022
更新了：CVE-2022
描述：[fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
URL：https://github.com/hosch3n/FastjsonVulns
标签：#CVE-2022
GitHub
GitHub - hosch3n/FastjsonVulns
Contribute to hosch3n/FastjsonVulns development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：Powertek PDU身份绕过
URL：https://github.com/Henry4E36/CVE-2022-33174
标签：#CVE-2022
更新了：CVE-2022
描述：Powertek PDU身份绕过
URL：https://github.com/Henry4E36/CVE-2022-33174
标签：#CVE-2022
GitHub
GitHub - Henry4E36/CVE-2022-33174: Powertek PDU身份绕过
Powertek PDU身份绕过. Contribute to Henry4E36/CVE-2022-33174 development by creating an account on GitHub.
