​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-22457
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-22457

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0
URL：https://github.com/BridgerAlderson/CVE-2025-27591-PoC

标签：#CVE-2025
GitHub
GitHub - BridgerAlderson/CVE-2025-27591-PoC: CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service…
GitHub - BridgerAlderson/CVE-2025-27591-PoC: CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service…
CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0 - BridgerAlderson/CVE-2025-27591-PoC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.
URL：https://github.com/ill-deed/CVE-2025-34085-Multi-target

标签：#CVE-2025
GitHub
GitHub - ill-deed/CVE-2025-34085-Multi-target: Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress…
GitHub - ill-deed/CVE-2025-34085-Multi-target: Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress…
Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets. - ill-deed/CVE-2025-3...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27591
URL：https://github.com/rvizx/CVE-2025-27591

标签：#CVE-2025
GitHub
GitHub - rvizx/CVE-2025-27591: Below v0.8.1 - Local Privilege Escalation (CVE-2025-27591) - PoC Exploit
GitHub - rvizx/CVE-2025-27591: Below v0.8.1 - Local Privilege Escalation (CVE-2025-27591) - PoC Exploit
Below v0.8.1 - Local Privilege Escalation (CVE-2025-27591) - PoC Exploit - rvizx/CVE-2025-27591
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27591
URL：https://github.com/obamalaolu/CVE-2025-27591

标签：#CVE-2025
GitHub
GitHub - obamalaolu/CVE-2025-27591: CVE-2025-27591
GitHub - obamalaolu/CVE-2025-27591: CVE-2025-27591
CVE-2025-27591. Contribute to obamalaolu/CVE-2025-27591 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-25257
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-25257

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.
URL：https://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool

标签：#CVE-2025
GitHub
GitHub - adilburaksen/CVE-2025-25257-Exploit-Tool: Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.
GitHub - adilburaksen/CVE-2025-25257-Exploit-Tool: Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.
Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb. - adilburaksen/CVE-2025-25257-Exploit-Tool
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2024-40453 - Squirrelly v9.0.0 RCE. Poc
URL：https://github.com/BwithE/CVE-2024-40453

标签：#RCE
GitHub
GitHub - BwithE/CVE-2024-40453: CVE-2024-40453 - Squirrelly v9.0.0 RCE. Poc
GitHub - BwithE/CVE-2024-40453: CVE-2024-40453 - Squirrelly v9.0.0 RCE. Poc
CVE-2024-40453 - Squirrelly v9.0.0 RCE. Poc. Contribute to BwithE/CVE-2024-40453 development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：代码审计
描述：关注代码审计
URL：https://github.com/Gr1mX-Sec/code_audit

标签：#代码审计
GitHub
GitHub - Gr1mX-Sec/code_audit: 关注代码审计
GitHub - Gr1mX-Sec/code_audit: 关注代码审计
关注代码审计. Contribute to Gr1mX-Sec/code_audit development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Explore the CVE-2025-5777 vulnerability in Citrix NetScaler. This script highlights a memory leak issue for educational purposes. 🐱💻🔍
URL：https://github.com/sentilaso1/CVE-2025-24813-Apache-Tomcat-RCE-PoC

标签：#CVE-2025
GitHub
GitHub - sentilaso1/CVE-2025-24813-Apache-Tomcat-RCE-PoC: Proof of Concept for CVE-2025-24813, a Remote Code Execution vulnerability…
GitHub - sentilaso1/CVE-2025-24813-Apache-Tomcat-RCE-PoC: Proof of Concept for CVE-2025-24813, a Remote Code Execution vulnerability…
Proof of Concept for CVE-2025-24813, a Remote Code Execution vulnerability in Apache Tomcat. This PoC exploits unsafe deserialization via crafted session files uploaded through HTTP PUT requests, a...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Explore the CVE-2025-5777 vulnerability in Citrix NetScaler. This script highlights a memory leak issue for educational purposes. 🐱💻🔍
URL：https://github.com/Jishanluhar/CVE-2025-5777

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：漏洞复现
描述：DVWA 漏洞复现练习
URL：https://github.com/yyyyds11/dvwa-xss-lab

标签：#漏洞复现
GitHub
GitHub - yydsQvQ/dvwa-xss-lab: DVWA 漏洞复现练习
GitHub - yydsQvQ/dvwa-xss-lab: DVWA 漏洞复现练习
DVWA 漏洞复现练习. Contribute to yydsQvQ/dvwa-xss-lab development by creating an account on GitHub.
漏洞复现
GitHub监控消息提醒！！！

更新了：红队
描述：本工具是一个用于解决红队进行攻防演练时快速检索漏洞储备对应目标的资产
URL：https://github.com/iQingshan/VRST

标签：#红队
GitHub
GitHub - iQingshan/VRST: 本工具是一个用于解决红队进行攻防演练时快速检索漏洞储备对应目标的资产
GitHub - iQingshan/VRST: 本工具是一个用于解决红队进行攻防演练时快速检索漏洞储备对应目标的资产
本工具是一个用于解决红队进行攻防演练时快速检索漏洞储备对应目标的资产. Contribute to iQingshan/VRST development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.
URL：https://github.com/Aining777/js-security-analyzer

标签：#漏洞利用
GitHub
GitHub - Aining777/js-security-analyzer: 本项目是一个基于 Python 的命令行工具，利用 Google Gemini API 对 JavaScript (JS) 代码进行自动化安全分析。它支持从本地文件、本地目录或远程网站…
本项目是一个基于 Python 的命令行工具，利用 Google Gemini API 对 JavaScript (JS) 代码进行自动化安全分析。它支持从本地文件、本地目录或远程网站 URL 中获取 JS 代码，并能够处理超长代码，将其分块发送给 AI 进行分析，最后生成结构清晰、内容详尽的 HTML 报告。该工具旨在帮助开发者和安全研究人员快速识别 JS 代码中潜在的安全漏洞、不当的编码...
漏洞利用
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Public Disclosure of CVE-2025-52097
URL：https://github.com/rwilsonecs/CVE-2025-52097

标签：#CVE-2025
GitHub
GitHub - rwilsonecs/CVE-2025-52097: Public Disclosure of CVE-2025-52097
GitHub - rwilsonecs/CVE-2025-52097: Public Disclosure of CVE-2025-52097
Public Disclosure of CVE-2025-52097. Contribute to rwilsonecs/CVE-2025-52097 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Documentation for CVE-2025-6514. MCP-Remote RCE.
URL：https://github.com/ChaseHCS/CVE-2025-6514

标签：#RCE
GitHub
GitHub - ChaseHCS/CVE-2025-6514: Documentation for CVE-2025-6514. MCP-Remote RCE.
GitHub - ChaseHCS/CVE-2025-6514: Documentation for CVE-2025-6514. MCP-Remote RCE.
Documentation for CVE-2025-6514. MCP-Remote RCE. Contribute to ChaseHCS/CVE-2025-6514 development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Rust PoC for CVE-2025-32463 (Sudo chroot Local PrivEsc)
URL：https://github.com/morgenm/sudo-chroot-CVE-2025-32463

标签：#CVE-2025
GitHub
GitHub - morgenm/sudo-chroot-CVE-2025-32463: Rust PoC for CVE-2025-32463 (sudo chroot
GitHub - morgenm/sudo-chroot-CVE-2025-32463: Rust PoC for CVE-2025-32463 (sudo chroot "chwoot" Local PrivEsc)
Rust PoC for CVE-2025-32463 (sudo chroot "chwoot" Local PrivEsc) - morgenm/sudo-chroot-CVE-2025-32463
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This PoC for CVE-2025-48799 demonstrates an elevation of privilege vulnerability in Windows Update service, affecting Windows 10 and 11. 🐱💻🔒
URL：https://github.com/KOVmechatronics/CVE-2025-48799

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：FortiWeb CVE-2025-25257 exploit
URL：https://github.com/0xbigshaq/CVE-2025-25257

标签：#CVE-2025
GitHub
GitHub - 0xbigshaq/CVE-2025-25257: FortiWeb CVE-2025-25257 exploit
GitHub - 0xbigshaq/CVE-2025-25257: FortiWeb CVE-2025-25257 exploit
FortiWeb CVE-2025-25257 exploit. Contribute to 0xbigshaq/CVE-2025-25257 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Delivering PHP RCE (CVE-2024-4577) to the Local Network Servers
URL：https://github.com/ZeroMemoryEx/PHP-CGI-INTERNAL-RCE

标签：#RCE
RCE
Before
After
Back to Top