​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🚨 CVE-2025-5309 Multi-Method SSTI Scanner | BeyondTrust Detection Tool by Issam
URL：https://github.com/issamjr/CVE-2025-5309-Scanner

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC CVE-2025-49144
URL：https://github.com/Vr00mm/CVE-2025-49144

标签：#CVE-2025
GitHub
GitHub - Vr00mm/CVE-2025-49144: PoC CVE-2025-49144
GitHub - Vr00mm/CVE-2025-49144: PoC CVE-2025-49144
PoC CVE-2025-49144 . Contribute to Vr00mm/CVE-2025-49144 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：POC of oscommerce 2.3.4 RCE
URL：https://github.com/s4m98/oscommerce_2.3.4_rce

标签：#RCE
GitHub
GitHub - s4m98/oscommerce_2.3.4_rce: POC of oscommerce 2.3.4 RCE
GitHub - s4m98/oscommerce_2.3.4_rce: POC of oscommerce 2.3.4 RCE
POC of oscommerce 2.3.4 RCE. Contribute to s4m98/oscommerce_2.3.4_rce development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-1718 - Hitachi Energy FTP Reboot Vulnerability Scanner
URL：https://github.com/issamjr/CVE-2025-1718-Scanner

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：免杀shellcode加载器
URL：https://github.com/mingshenhk/ChenYanXi

标签：#免杀
GitHub
GitHub - mingshenhk/ChenYanXi: ChenYanXi是一个基于 Python 编写的多功能高级壳体生成器，专为研究数据保护、反调试与内存加载执行机制而设计。它集成了 多层数据加密（AES/DES + zlib）、动态密钥派生…
GitHub - mingshenhk/ChenYanXi: ChenYanXi是一个基于 Python 编写的多功能高级壳体生成器，专为研究数据保护、反调试与内存加载执行机制而设计。它集成了 多层数据加密（AES/DES + zlib）、动态密钥派生…
ChenYanXi是一个基于 Python 编写的多功能高级壳体生成器，专为研究数据保护、反调试与内存加载执行机制而设计。它集成了 多层数据加密（AES/DES + zlib）、动态密钥派生、控制流混淆、反沙箱与调试器检测、注册表伪装 以及 无文件内存执行 等多种防护与隐藏技术。 用户可指定任意二进制 payload（如 shellcode、ELF、EXE 等），该工具将自动封装为可执行的...
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：the POC of package.json RCE
URL：https://github.com/orwagodfather/NPM-RCE

标签：#RCE
GitHub
GitHub - orwagodfather/NPM-RCE: the POC of package.json RCE
GitHub - orwagodfather/NPM-RCE: the POC of package.json RCE
the POC of package.json RCE. Contribute to orwagodfather/NPM-RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：反序列化
描述：z1sec的java反序列化学习、cc链复现靶场
URL：https://github.com/z1sec/javasec01

标签：#反序列化
GitHub
GitHub - z1sec/javasec01: z1sec的java反序列化学习、cc链复现靶场
GitHub - z1sec/javasec01: z1sec的java反序列化学习、cc链复现靶场
z1sec的java反序列化学习、cc链复现靶场. Contribute to z1sec/javasec01 development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：It is the details of CVE-2025-45466
URL：https://github.com/zgsnj123/CVE-2025-45466

标签：#CVE-2025
GitHub
GitHub - zgsnj123/CVE-2025-45466: It is the details of CVE-2025-45466
GitHub - zgsnj123/CVE-2025-45466: It is the details of CVE-2025-45466
It is the details of CVE-2025-45466. Contribute to zgsnj123/CVE-2025-45466 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-4322 – Unauthenticated Privilege Escalation via Password Update \"Account Takeover\" 🔥
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-4322

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-1094
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-1094

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-45710
URL：https://github.com/partywavesec/CVE-2025-45710

标签：#CVE-2025
GitHub
GitHub - partywavesec/CVE-2025-45710: CVE-2025-45710
GitHub - partywavesec/CVE-2025-45710: CVE-2025-45710
CVE-2025-45710. Contribute to partywavesec/CVE-2025-45710 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-26466 .rb module for msfconsole
URL：https://github.com/mrowkoob/CVE-2025-26466-msf

标签：#CVE-2025
GitHub
GitHub - mrowkoob/CVE-2025-26466-msf: CVE-2025-26466 - SSH Ping DoS Ruby module for Metasploit Framework
GitHub - mrowkoob/CVE-2025-26466-msf: CVE-2025-26466 - SSH Ping DoS Ruby module for Metasploit Framework
CVE-2025-26466 - SSH Ping DoS Ruby module for Metasploit Framework - mrowkoob/CVE-2025-26466-msf
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Mass-CVE-2025-3248
URL：https://github.com/dennisec/Mass-CVE-2025-3248

标签：#CVE-2025
GitHub
GitHub - dennisec/Mass-CVE-2025-3248: Mass-CVE-2025-3248
Mass-CVE-2025-3248. Contribute to dennisec/Mass-CVE-2025-3248 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-3248
URL：https://github.com/dennisec/CVE-2025-3248

标签：#CVE-2025
GitHub
dennisec/CVE-2025-3248
dennisec/CVE-2025-3248
CVE-2025-3248. Contribute to dennisec/CVE-2025-3248 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]
URL：https://github.com/0-d3y/langflow-rce-exploit

标签：#CVE-2025
GitHub
GitHub - 0-d3y/langflow-rce-exploit: Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]
GitHub - 0-d3y/langflow-rce-exploit: Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]
Remote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ] - 0-d3y/langflow-rce-exploit
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usage
URL：https://github.com/Taowmz/Anydesk-Exploit-CVE-2025-12654-RCE-Builder

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)
URL：https://github.com/behindsecurity/phpipam-rce-authenticated

标签：#RCE
GitHub
GitHub - behindsecurity/phpipam-rce-authenticated: phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)
GitHub - behindsecurity/phpipam-rce-authenticated: phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)
phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated) - behindsecurity/phpipam-rce-authenticated
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Powerful unauthenticated RCE scanner for CVE-2025-3248 affecting Langflow < 1.3.0
URL：https://github.com/issamjr/CVE-2025-3248-Scanner

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A powerful Python scanner to detect CVE-2025-49113 vulnerability in Roundcube Webmail. Developed by Issam Junior (@issamiso).
URL：https://github.com/issamjr/CVE-2025-49113-Scanner

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usage
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-3248

标签：#CVE-2025
CVE
Before
After
Back to Top