​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
URL：https://github.com/absholi7ly/CVE-2025-27210_NodeJS_Path_Traversal_Exploit

标签：#CVE-2025
GitHub
GitHub - absholi7ly/CVE-2025-27210_NodeJS_Path_Traversal_Exploit: (PoC) CVE-2025-27210, a precise Path Traversal vulnerability…
GitHub - absholi7ly/CVE-2025-27210_NodeJS_Path_Traversal_Exploit: (PoC) CVE-2025-27210, a precise Path Traversal vulnerability…
(PoC) CVE-2025-27210, a precise Path Traversal vulnerability affecting Node.js applications running on Microsoft Windows. This vulnerability leverages the specific way Windows handles reserved devi...
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：ThinVNC 1.0b1 - Authentication Bypass to RCE
URL：https://github.com/krill-x7/CVE-2022-25226

标签：#RCE
GitHub
GitHub - krill-x7/CVE-2022-25226: ThinVNC 1.0b1 - Authentication Bypass to RCE
GitHub - krill-x7/CVE-2022-25226: ThinVNC 1.0b1 - Authentication Bypass to RCE
ThinVNC 1.0b1 - Authentication Bypass to RCE. Contribute to krill-x7/CVE-2022-25226 development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：免杀
描述：工具推荐-免杀-二开一个漏洞扫描、目录扫描、端口扫描的工具
URL：https://github.com/Zer08Bytes/GhostRecon

标签：#免杀
GitHub
GitHub - Zer08Bytes/GhostRecon: 工具推荐-免杀-二开一个漏洞扫描、目录扫描、端口扫描的工具
GitHub - Zer08Bytes/GhostRecon: 工具推荐-免杀-二开一个漏洞扫描、目录扫描、端口扫描的工具
工具推荐-免杀-二开一个漏洞扫描、目录扫描、端口扫描的工具. Contribute to Zer08Bytes/GhostRecon development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：Secure, open-source RCE platform with Docker isolation, JWT auth, rate limiting, and multi-language support.
URL：https://github.com/vikashkrdeveloper/SafeExec

标签：#RCE
GitHub
GitHub - vikashkrdeveloper/SafeExec: Secure, open-source RCE platform with Docker isolation, JWT auth, rate limiting, and multi…
Secure, open-source RCE platform with Docker isolation, JWT auth, rate limiting, and multi-language support. - vikashkrdeveloper/SafeExec
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2
URL：https://github.com/abhisek3122/CVE-2025-23167

标签：#CVE-2025
GitHub
GitHub - abhisek3122/CVE-2025-23167: Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions…
GitHub - abhisek3122/CVE-2025-23167: Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions…
Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2 - abhisek3122/CVE-2025-23167
CVE
GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：漏洞赏金工具是一款专为安全研究人员和白帽子黑客设计的图形化渗透测试工具集。它集成了多个常用的安全测试工具，提供了直观的用户界面，让漏洞挖掘变得更加简单和高效。
URL：https://github.com/hengweijieke/drearm_hw

标签：#漏洞挖掘
GitHub
GitHub - hengweijieke/drearm_hw: ### 🎓 **信息安全学生 | Web、工具极简主义者 | 运维萌新成长中** **📌 关于我** 网络安全专业在读，热爱 **漏洞挖掘 & 防御实战**，喜欢用**轻量级工…
GitHub - hengweijieke/drearm_hw: ### 🎓 **信息安全学生 | Web、工具极简主义者 | 运维萌新成长中** **📌 关于我** 网络安全专业在读，热爱 **漏洞挖掘 & 防御实战**，喜欢用**轻量级工…
### 🎓 **信息安全学生 | Web、工具极简主义者 | 运维萌新成长中** **📌 关于我** 网络安全专业在读，热爱 **漏洞挖掘 & 防御实战**，喜欢用**轻量级工具**折腾各种小项目，在Linux服务器里摸爬滚打，目标是成为一名**懂开发的安全工程师**。 ### **🛠️ 技术栈 & 兴趣** 🔐 **安全方向** ▸ ...
漏洞挖掘
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27591
URL：https://github.com/sanjay70023/AutoVAPT-AI-Based-Vulnerability-Scanner-Pentest-Tool

标签：#CVE-2025
GitHub
GitHub - sanjay70023/AutoVAPT-AI-Based-Vulnerability-Scanner-Pentest-Tool: AutoVAPT is an open-source GUI tool for automated Vulnerability…
GitHub - sanjay70023/AutoVAPT-AI-Based-Vulnerability-Scanner-Pentest-Tool: AutoVAPT is an open-source GUI tool for automated Vulnerability…
AutoVAPT is an open-source GUI tool for automated Vulnerability Assessment and Penetration Testing. It integrates OWASP ZAP, CVE/CVSS enrichment, AI-based analysis, and custom recon tools—built for...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-53833
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-53833

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：FortiWeb SQLi to RCE
URL：https://github.com/0xgh057r3c0n/CVE-2025-25257

标签：#CVE-2025
GitHub
GitHub - 0xgh057r3c0n/CVE-2025-25257: PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi…
GitHub - 0xgh057r3c0n/CVE-2025-25257: PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi…
PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No login required. Fully automated. - 0xgh...
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。
URL：https://github.com/hyhforevertop/Mazesec-writeups

标签：#渗透测试
GitHub
GitHub - hyhforevertop/Mazesec-writeups: Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。
GitHub - hyhforevertop/Mazesec-writeups: Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。
Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。 - hyhforevertop/Mazesec-writeups
渗透测试
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试报告自动化生成
URL：https://github.com/chxl1999/pentest_report_generator

标签：#渗透测试
GitHub
GitHub - chxl1999/pentest_report_generator: 渗透测试报告自动化生成
GitHub - chxl1999/pentest_report_generator: 渗透测试报告自动化生成
渗透测试报告自动化生成. Contribute to chxl1999/pentest_report_generator development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-32463 漏洞概念验证
URL：https://github.com/9Insomnie/CVE-2025-32463

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Stored XSS in Sirv WordPress Plugin v7.5.5 – CVE-2025-XXXX
URL：https://github.com/Bineshmadharapu29/CVE-2025-XXXX-Sirv-Stored-XSS

标签：#CVE-2025
GitHub
GitHub - Bineshmadharapu29/CVE-2025-XXXX-Sirv-Stored-XSS: Stored XSS in Sirv WordPress Plugin v7.5.5 – CVE-2025-XXXX
GitHub - Bineshmadharapu29/CVE-2025-XXXX-Sirv-Stored-XSS: Stored XSS in Sirv WordPress Plugin v7.5.5 – CVE-2025-XXXX
Stored XSS in Sirv WordPress Plugin v7.5.5 – CVE-2025-XXXX - Bineshmadharapu29/CVE-2025-XXXX-Sirv-Stored-XSS
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27591 is a known privilege escalation vulnerability in the Below service (version < v0.9.0)
URL：https://github.com/dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591

标签：#CVE-2025
GitHub
GitHub - dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591: CVE-2025-27591 is a known privilege escalation vulnerability…
CVE-2025-27591 is a known privilege escalation vulnerability in the Below service (version < v0.9.0) - dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-27591
URL：https://github.com/DarksBlackSk/CVE-2025-27591-Proof-Of-Concept

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway]
URL：https://github.com/SleepNotF0und/CVE-2025-5777

标签：#CVE-2025
GitHub
GitHub - SleepNotF0und/CVE-2025-5777: CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway]
GitHub - SleepNotF0und/CVE-2025-5777: CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway]
CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway] - SleepNotF0und/CVE-2025-5777
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Educational Docker lab to simulate privilege escalation via CVE-2025-32463
URL：https://github.com/dbarquero/cve-2025-32463-lab

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit
URL：https://github.com/mickhacking/Thank-u-Next

标签：#CVE-2025
GitHub
GitHub - mickhacking/Thank-u-Next: CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability…
GitHub - mickhacking/Thank-u-Next: CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability…
CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit - mickhacking/Thank-u-Next
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit
URL：https://github.com/mickhacking/thank-u-next

标签：#CVE-2025
GitHub
GitHub - mickhacking/Thank-u-Next: CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability…
GitHub - mickhacking/Thank-u-Next: CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability…
CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit - mickhacking/Thank-u-Next
CVE
GitHub监控消息提醒！！！

更新了：代码审计
描述：NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间
URL：https://github.com/steveopen1/NoAuth_V2

标签：#代码审计
GitHub
GitHub - steveopen1/NoAuth_V2: NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间
NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间 - steveopen1/NoAuth_V2
代码审计
Before
After
Back to Top