​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.
URL：https://github.com/CodeXTF2/ScreenshotBOF

标签：#Cobalt Strike
GitHub
GitHub - CodeXTF2/ScreenshotBOF: An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a…
An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory. - CodeXTF2/ScreenshotBOF
Cobalt
GitHub监控消息提醒！！！

更新了：免杀
描述：将shellcode转换特殊的数据类型，用于过静态免杀
URL：https://github.com/GPiiiiii/SpecialShellcode

标签：#免杀
GitHub
GitHub - GPiiiiii/SpecialShellcode: 将shellcode转换特殊的数据类型，用于过静态免杀
GitHub - GPiiiiii/SpecialShellcode: 将shellcode转换特殊的数据类型，用于过静态免杀
将shellcode转换特殊的数据类型，用于过静态免杀. Contribute to GPiiiiii/SpecialShellcode development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：bypass av
描述：免杀 defender 360 cobalstrike shellcode
URL：https://github.com/screetsec/TheFatRat

标签：#bypass av
GitHub
GitHub - screetsec/TheFatRat: Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation…
GitHub - screetsec/TheFatRat: Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation…
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and th...
bypass
GitHub监控消息提醒！！！

更新了：红蓝对抗
描述：红蓝对抗中，对目标单位名称使用天眼查，进行批量化查询。
URL：https://github.com/mengmeng9921/-

标签：#红蓝对抗
GitHub
GitHub - mengmeng9921/G3forBeian: 红蓝对抗中，对目标单位名称使用天眼查，进行批量化查询。
GitHub - mengmeng9921/G3forBeian: 红蓝对抗中，对目标单位名称使用天眼查，进行批量化查询。
红蓝对抗中，对目标单位名称使用天眼查，进行批量化查询。. Contribute to mengmeng9921/G3forBeian development by creating an account on GitHub.
红蓝对抗
GitHub监控消息提醒！！！

更新了：Red Team
描述：An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills needed to join.
URL：https://github.com/SNU-Red-Force/.github

标签：#Red Team
GitHub
GitHub - SNU-Red-Force/.github: An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills…
GitHub - SNU-Red-Force/.github: An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills…
An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills needed to join. - GitHub - SNU-Red-Force/.github: An Introductory Repository for SNU Red Team. Thi...
Red
GitHub监控消息提醒！！！

更新了：Red Team
描述：An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills needed to join.
URL：https://github.com/SNU-Red-Team/.github

标签：#Red Team
GitHub
GitHub - SNUC-Zero-Day/.github: An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills…
GitHub - SNUC-Zero-Day/.github: An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills…
An Introductory Repository for SNU Red Team. This Repository outlines the Prerequisites and Skills needed to join. - SNUC-Zero-Day/.github
Red
GitHub监控消息提醒！！！

更新了：内存马
描述：红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具
URL：https://github.com/Ricehahaa/seckeySystem

标签：#内存马
GitHub
GitHub - Ricehahaa/seckeySystem: 一个几年前黑马的小项目（密钥协商系统），但当时的一些其他功能没实现，这里把剩下的功能都实现了（当然代码是在原有基础上扩展的再加修改些许bug）用到的主要技术有连接池，多线程，网络通信，A…
GitHub - Ricehahaa/seckeySystem: 一个几年前黑马的小项目（密钥协商系统），但当时的一些其他功能没实现，这里把剩下的功能都实现了（当然代码是在原有基础上扩展的再加修改些许bug）用到的主要技术有连接池，多线程，网络通信，A…
一个几年前黑马的小项目（密钥协商系统），但当时的一些其他功能没实现，这里把剩下的功能都实现了（当然代码是在原有基础上扩展的再加修改些许bug）用到的主要技术有连接池，多线程，网络通信，ASN.1报文编解码，工厂模式，共享内存，利用openssl库里的加密算法进行加密，最后还有常用MYSQL的API接口（原项目是oracle的，但是虚拟机上没装，但其实都一样😅）。项目整体不难，可以拿来巩固大家...
内存马
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-39197
URL：https://github.com/adeljck/CVE-2022-39197

标签：#CVE-2022
GitHub
GitHub - adeljck/CVE-2022-39197: CVE-2022-39197
GitHub - adeljck/CVE-2022-39197: CVE-2022-39197
CVE-2022-39197. Contribute to adeljck/CVE-2022-39197 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：generate evasion php webshell
URL：https://github.com/microsoftdevtm/chaos

标签：#webshell
webshell
GitHub监控消息提醒！！！

更新了：Red Team
描述：Tools and Techniques for Red Team / Penetration Testing
URL：https://github.com/A-poc/RedTeam-Tools

标签：#Red Team
GitHub
GitHub - A-poc/RedTeam-Tools: Tools and Techniques for Red Team / Penetration Testing
GitHub - A-poc/RedTeam-Tools: Tools and Techniques for Red Team / Penetration Testing
Tools and Techniques for Red Team / Penetration Testing - A-poc/RedTeam-Tools
Red
GitHub监控消息提醒！！！

更新了：渗透测试
描述：一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS)辅助分析工具
URL：https://github.com/sulab999/AppMessenger

标签：#渗透测试
GitHub
GitHub - sulab999/AppMessenger: 一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具
一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具 - sulab999/AppMessenger
渗透测试
GitHub监控消息提醒！！！

更新了：钓鱼
描述：基于深度强化学习的原神自动钓鱼AI
URL：https://github.com/7eu7d7/genshin_auto_fish

标签：#钓鱼
GitHub
GitHub - 7eu7d7/genshin_auto_fish: 基于深度强化学习的原神自动钓鱼AI
GitHub - 7eu7d7/genshin_auto_fish: 基于深度强化学习的原神自动钓鱼AI
基于深度强化学习的原神自动钓鱼AI. Contribute to 7eu7d7/genshin_auto_fish development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试笔记
URL：https://github.com/7estUser/PenetrateNotes

标签：#渗透测试
GitHub
GitHub - 7estUser/PenetrateNotes: 渗透测试、攻防姿势笔记
GitHub - 7estUser/PenetrateNotes: 渗透测试、攻防姿势笔记
渗透测试、攻防姿势笔记. Contribute to 7estUser/PenetrateNotes development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：绕过
描述：zijie 通用绕过 ssl pinning 脚本
URL：https://github.com/hazen1314/hook_dy_ssl

标签：#绕过
绕过
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL v 3.0.0 through v.3.0.6
URL：https://github.com/corelight/CVE-2022-3602

标签：#CVE-2022
GitHub
GitHub - corelight/CVE-2022-3602: Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL…
GitHub - corelight/CVE-2022-3602: Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL…
Detects attempts at exploitation of CVE-2022-3602, a remote code execution vulnerability in OpenSSL v 3.0.0 through v.3.0.6 - corelight/CVE-2022-3602
CVE
GitHub监控消息提醒！！！

更新了：sql注入
描述：批量扫描url是否存在sql注入问题
URL：https://github.com/11072162/batch_scan_sql_Injection

标签：#sql注入
GitHub
GitHub - 11072162/batch_scan_sql_Injection: 批量扫描url是否存在sql注入问题
GitHub - 11072162/batch_scan_sql_Injection: 批量扫描url是否存在sql注入问题
批量扫描url是否存在sql注入问题. Contribute to 11072162/batch_scan_sql_Injection development by creating an account on GitHub.
sql注入
GitHub监控消息提醒！！！

更新了：内网渗透
描述：内网渗透自动化
URL：https://github.com/lllzzh/autoTest

标签：#内网渗透
内网渗透
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-39425 PoC
URL：https://github.com/bob11vrdp/CVE-2022-39425

标签：#CVE-2022
GitHub
GitHub - bob11vrdp/CVE-2022-39425: CVE-2022-39425 PoC
GitHub - bob11vrdp/CVE-2022-39425: CVE-2022-39425 PoC
CVE-2022-39425 PoC. Contribute to bob11vrdp/CVE-2022-39425 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：A Golang version of the Rusty Recon Botfrom HuskyHacks' Responsible Red Teaming course.
URL：https://github.com/An00bRektn/gopher-recon-bot

标签：#Red Team
GitHub
GitHub - An00bRektn/gopher-recon-bot: A Golang version of the Rusty Recon Bot from HuskyHacks' Responsible Red Teaming course.
GitHub - An00bRektn/gopher-recon-bot: A Golang version of the Rusty Recon Bot from HuskyHacks' Responsible Red Teaming course.
A Golang version of the Rusty Recon Bot from HuskyHacks' Responsible Red Teaming course. - An00bRektn/gopher-recon-bot
Red
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Finds Cobalt Strike fingerprint on targets via traffic telemetry
URL：https://github.com/eremit4/cs-discovery

标签：#Cobalt Strike
GitHub
GitHub - eremit4/cs-discovery: Detecting Cobalt Strike Team Servers on targets through traffic telemetry.
GitHub - eremit4/cs-discovery: Detecting Cobalt Strike Team Servers on targets through traffic telemetry.
Detecting Cobalt Strike Team Servers on targets through traffic telemetry. - eremit4/cs-discovery
Cobalt
Before
After
Back to Top