​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-4009 PoC/EXP
URL：https://github.com/realcodeb0ss/CVE-2025-4009

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-31650
URL：https://github.com/assad12341/Dos-exploit-

标签：#CVE-2025
GitHub
GitHub - assad12341/Dos-exploit-: CVE-2025-31650
GitHub - assad12341/Dos-exploit-: CVE-2025-31650
CVE-2025-31650. Contribute to assad12341/Dos-exploit- development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Fortinet RCE PoC
URL：https://github.com/assad12341/stack-based-buffer-overflow-vulnerability

标签：#RCE
GitHub
GitHub - assad12341/stack-based-buffer-overflow-vulnerability: Fortinet RCE PoC
GitHub - assad12341/stack-based-buffer-overflow-vulnerability: Fortinet RCE PoC
Fortinet RCE PoC. Contribute to assad12341/stack-based-buffer-overflow-vulnerability development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-33053 Proof Of Concept (PoC)
URL：https://github.com/DevBuiHieu/CVE-2025-33053-Proof-Of-Concept

标签：#CVE-2025
GitHub
GitHub - DevBuiHieu/CVE-2025-33053-Proof-Of-Concept: CVE-2025-33053 Proof Of Concept (PoC)
GitHub - DevBuiHieu/CVE-2025-33053-Proof-Of-Concept: CVE-2025-33053 Proof Of Concept (PoC)
CVE-2025-33053 Proof Of Concept (PoC). Contribute to DevBuiHieu/CVE-2025-33053-Proof-Of-Concept development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.
URL：https://github.com/sensepost/shellnot

标签：#RCE
GitHub
GitHub - sensepost/shellnot: Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context…
GitHub - sensepost/shellnot: Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context…
Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed. - sensepost/shellnot
RCE
GitHub监控消息提醒！！！

更新了：hvv
描述：Generate clients for hvv gti api
URL：https://github.com/vigonotion/gengti

标签：#hvv
GitHub
GitHub - vigonotion/gengti: Generate clients for hvv gti api
GitHub - vigonotion/gengti: Generate clients for hvv gti api
Generate clients for hvv gti api. Contribute to vigonotion/gengti development by creating an account on GitHub.
hvv
GitHub监控消息提醒！！！

更新了：攻防
描述：Lightweight-network-attack-and-defense-learning-simulation-environment 輕便化之網路攻防學習模擬環境
URL：https://github.com/guan4tou2/Lnadlse

标签：#攻防
GitHub
GitHub - guan4tou2/Lnadlse: Lightweight-network-attack-and-defense-learning-simulation-environment 輕便化之網路攻防學習模擬環境
GitHub - guan4tou2/Lnadlse: Lightweight-network-attack-and-defense-learning-simulation-environment 輕便化之網路攻防學習模擬環境
Lightweight-network-attack-and-defense-learning-simulation-environment 輕便化之網路攻防學習模擬環境 - guan4tou2/Lnadlse
攻防
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27817
URL：https://github.com/kk12-30/CVE-2025-27817

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Streamit WordPress Theme - Subscriber File Upload to RCE
URL：https://github.com/Yucaerin/Streamit

标签：#RCE
GitHub
GitHub - Yucaerin/Streamit: Streamit WordPress Theme - Subscriber File Upload to RCE
GitHub - Yucaerin/Streamit: Streamit WordPress Theme - Subscriber File Upload to RCE
Streamit WordPress Theme - Subscriber File Upload to RCE - Yucaerin/Streamit
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-21333
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-21333

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory via Cobalt Strike
URL：https://github.com/mendacus/chrome-abe-decryption-bof

标签：#Cobalt Strike
GitHub
GitHub - mendacus/chrome-abe-decryption-bof: A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory…
GitHub - mendacus/chrome-abe-decryption-bof: A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory…
A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory via Cobalt Strike - mendacus/chrome-abe-decryption-bof
Cobalt
GitHub监控消息提醒！！！

更新了：信息收集
描述：信息收集
URL：https://github.com/maybeyjb/information

标签：#信息收集
GitHub
GitHub - maybeyjb/information: 信息收集
GitHub - maybeyjb/information: 信息收集
信息收集. Contribute to maybeyjb/information development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：RISC-V内核漏洞检测工具 - CVEChecker/SyzDirect
URL：https://github.com/kongkiyiji/CVE

标签：#漏洞检测
GitHub
kongkiyiji/CVE
RISC-V内核漏洞检测工具 - CVEChecker/SyzDirect. Contribute to kongkiyiji/CVE development by creating an account on GitHub.
漏洞检测
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025.
URL：https://github.com/DennZFV/RCE-CVE-2025

标签：#CVE-2025
GitHub
GitHub - DennZFV/RCE-CVE-2025: PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025.
GitHub - DennZFV/RCE-CVE-2025: PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025.
PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025. - DennZFV/RCE-CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025.
URL：https://github.com/DennModzz/RCE-CVE-2025

标签：#RCE
GitHub
GitHub - DennZFV/RCE-CVE-2025: PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025.
GitHub - DennZFV/RCE-CVE-2025: PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025.
PoC for Remote Code Execution (RCE) vulnerabilities identified in 2025. - DennZFV/RCE-CVE-2025
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-24252
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-24252

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：RISC-V平台内核漏洞检测工具 - Kernel Vulnerability Detection Tool for RISC-V Platform
URL：https://github.com/kongkiyiji/CVEChecker

标签：#漏洞检测
GitHub
GitHub - kongkiyiji/CVEChecker: RISC-V平台内核漏洞检测工具 - Kernel Vulnerability Detection Tool for RISC-V Platform
GitHub - kongkiyiji/CVEChecker: RISC-V平台内核漏洞检测工具 - Kernel Vulnerability Detection Tool for RISC-V Platform
RISC-V平台内核漏洞检测工具 - Kernel Vulnerability Detection Tool for RISC-V Platform - kongkiyiji/CVEChecker
漏洞检测
GitHub监控消息提醒！！！

更新了：免杀
描述：使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀
URL：https://github.com/misaka19008/PerlinPuzzle-Webshell-PHP

标签：#免杀
GitHub
GitHub - misaka19008/PerlinPuzzle-Webshell-PHP: 使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀
使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀. Contribute to misaka19008/PerlinPuzzle-Webshell-PHP development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：Write-up and proof of concepts for my vulnerability CVE-2021-30862, 1-click RCE bug in iOS iTunes U
URL：https://github.com/3h6-1/CVE-2021-30862

标签：#RCE
GitHub
GitHub - 3h6-1/CVE-2021-30862: Write-up and proof of concepts for CVE-2021-30862, 1-click RCE bug in iOS iTunes U
GitHub - 3h6-1/CVE-2021-30862: Write-up and proof of concepts for CVE-2021-30862, 1-click RCE bug in iOS iTunes U
Write-up and proof of concepts for CVE-2021-30862, 1-click RCE bug in iOS iTunes U - 3h6-1/CVE-2021-30862
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.
URL：https://github.com/A3-N/shellnot

标签：#RCE
GitHub
GitHub - sensepost/shellnot: Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context…
GitHub - sensepost/shellnot: Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context…
Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed. - sensepost/shellnot
RCE
Before
After
Back to Top