​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A method for CVE-2025-31710 and to connect to cmd_skt to obtain a root shell on unisoc unpatched models
URL：https://github.com/Infinit3i/CVE-2025-24893

标签：#CVE-2025
GitHub
GitHub - Infinit3i/CVE-2025-24893: PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by…
GitHub - Infinit3i/CVE-2025-24893: PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by…
PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution thro...
CVE
GitHub监控消息提醒！！！

更新了：攻防
描述：我只是餓了，怎麼變成 prompt injection 攻防戰？
URL：https://github.com/April-Aries/AIS3-2025-Project

标签：#攻防
GitHub
GitHub - April-Aries/AIS3-2025-Project: 我只是餓了，怎麼變成 prompt injection 攻防戰？
GitHub - April-Aries/AIS3-2025-Project: 我只是餓了，怎麼變成 prompt injection 攻防戰？
我只是餓了，怎麼變成 prompt injection 攻防戰？. Contribute to April-Aries/AIS3-2025-Project development by creating an account on GitHub.
攻防
GitHub监控消息提醒！！！

更新了：钓鱼
描述：星痕共鸣自动钓鱼
URL：https://github.com/xxfttkx/auto_fish

标签：#钓鱼
GitHub
GitHub - xxfttkx/auto_fish: 星痕共鸣自动钓鱼
星痕共鸣自动钓鱼. Contribute to xxfttkx/auto_fish development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Modified exploit for CVE-2025-24893
URL：https://github.com/hackersonsteroids/cve-2025-24893

标签：#CVE-2025
GitHub
GitHub - hackersonsteroids/cve-2025-24893: Modified exploit for CVE-2025-24893
GitHub - hackersonsteroids/cve-2025-24893: Modified exploit for CVE-2025-24893
Modified exploit for CVE-2025-24893. Contribute to hackersonsteroids/cve-2025-24893 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：スタックオーバーフロー RCE 脆弱性の学習用
URL：https://github.com/kouhei0/vulnerable-webapp

标签：#RCE
GitHub
GitHub - kouhei0/vulnerable-webapp: スタックオーバーフロー RCE 脆弱性の学習用
GitHub - kouhei0/vulnerable-webapp: スタックオーバーフロー RCE 脆弱性の学習用
スタックオーバーフロー RCE 脆弱性の学習用. Contribute to kouhei0/vulnerable-webapp development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：this is a poc for the CVE-2025-24893
URL：https://github.com/AliElKhatteb/CVE-2024-32019-POC

标签：#CVE-2025
GitHub
GitHub - AliElKhatteb/CVE-2024-32019-POC: this is a poc for the CVE-2025-24893
GitHub - AliElKhatteb/CVE-2024-32019-POC: this is a poc for the CVE-2025-24893
this is a poc for the CVE-2025-24893. Contribute to AliElKhatteb/CVE-2024-32019-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：this is a poc for the CVE-2025-24893
URL：https://github.com/AliElKhatteb/CVE-2023-22497-POC

标签：#CVE-2025
GitHub
GitHub - AliElKhatteb/CVE-2024-32019-POC: this is a poc for the CVE-2025-24893
GitHub - AliElKhatteb/CVE-2024-32019-POC: this is a poc for the CVE-2025-24893
this is a poc for the CVE-2025-24893. Contribute to AliElKhatteb/CVE-2024-32019-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：this is a poc for the CVE-2025-24893
URL：https://github.com/AliElKhatteb/-CVE-2025-24893-POC

标签：#CVE-2025
GitHub
GitHub - AliElKhatteb/CVE-2024-32019-POC: this is a poc for the CVE-2025-24893
GitHub - AliElKhatteb/CVE-2024-32019-POC: this is a poc for the CVE-2025-24893
this is a poc for the CVE-2025-24893. Contribute to AliElKhatteb/CVE-2024-32019-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：hvv
描述：微步在线2024年hvv结束动画
URL：https://github.com/fgfxf/2024hvv_ending

标签：#hvv
GitHub
GitHub - fgfxf/2024hvv_ending: 微步在线2024年hvv结束动画
GitHub - fgfxf/2024hvv_ending: 微步在线2024年hvv结束动画
微步在线2024年hvv结束动画. Contribute to fgfxf/2024hvv_ending development by creating an account on GitHub.
hvv
GitHub监控消息提醒！！！

更新了：渗透测试
描述：ZeroTermux Kali Linux专用版 - 专为渗透测试和网络安全而优化的Android终端模拟器，集成完整的Kali Linux环境和渗透测试工具
URL：https://github.com/ADA-XiaoYao/ZeroTermux-Kali-Edition

标签：#渗透测试
GitHub
GitHub - ADA-XiaoYao/ZeroTermux-Kali-Edition: ZeroTermux Kali Linux专用版 - 专为渗透测试和网络安全而优化的Android终端模拟器，集成完整的Kali Linux环境和渗透测试工具
GitHub - ADA-XiaoYao/ZeroTermux-Kali-Edition: ZeroTermux Kali Linux专用版 - 专为渗透测试和网络安全而优化的Android终端模拟器，集成完整的Kali Linux环境和渗透测试工具
ZeroTermux Kali Linux专用版 - 专为渗透测试和网络安全而优化的Android终端模拟器，集成完整的Kali Linux环境和渗透测试工具 - ADA-XiaoYao/ZeroTermux-Kali-Edition
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-48384-sub
URL：https://github.com/fluoworite/CVE-2025-48384-sub

标签：#CVE-2025
GitHub
GitHub - fluoworite/CVE-2025-48384-sub
GitHub - fluoworite/CVE-2025-48384-sub
Contribute to fluoworite/CVE-2025-48384-sub development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：反序列化
描述：序列化反序列化 application/x-www-form-urlencoded 格式
URL：https://github.com/eclipse-oniro-openharmony/third_party_rust_serde_urlencoded

标签：#反序列化
GitHub
eclipse-oniro-openharmony/third_party_rust_serde_urlencoded
序列化反序列化 application/x-www-form-urlencoded 格式. Contribute to eclipse-oniro-openharmony/third_party_rust_serde_urlencoded development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过运营商白名单限速，高速下载远程文件
URL：https://github.com/jklincn/gmf

标签：#绕过
GitHub
GitHub - jklincn/gmf: 绕开运营商白名单限速，高速安全下载远程主机文件
绕开运营商白名单限速，高速安全下载远程主机文件. Contribute to jklincn/gmf development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This is a small script for the rce vulnerability for CVE-2025-24893. It supports basic input/output
URL：https://github.com/Kai7788/CVE-2025-24893-RCE-PoC

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC for CVE-2025-48384
URL：https://github.com/fluoworite/CVE-2025-48384

标签：#CVE-2025
GitHub
GitHub - fluoworite/CVE-2025-48384: PoC for CVE-2025-48384
GitHub - fluoworite/CVE-2025-48384: PoC for CVE-2025-48384
PoC for CVE-2025-48384. Contribute to fluoworite/CVE-2025-48384 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
URL：https://github.com/platsecurity/CVE-2025-32433

标签：#CVE-2025
GitHub
Unauthenticated Remote Code Execution in Erlang/OTP SSH
Unauthenticated Remote Code Execution in Erlang/OTP SSH
### Summary

A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SS...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Explore the CVE-2025-32463 lab environment for testing the sudo vulnerability. Ideal for security researchers. 🐱💻🔍
URL：https://github.com/harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

标签：#CVE-2025
GitHub
GitHub - harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC: A critical vulnerability in Microsoft SharePoint Server…
GitHub - harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC: A critical vulnerability in Microsoft SharePoint Server…
A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE miti...
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
URL：https://github.com/cyberpoul/CVE-Alert-Bot

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：A project that tries to document every potential path from any web app to RCE
URL：https://github.com/AnvithLobo/WEB2RCE

标签：#RCE
GitHub
GitHub - AnvithLobo/WEB2RCE: A project that tries to document every potential path from any web app to RCE
GitHub - AnvithLobo/WEB2RCE: A project that tries to document every potential path from any web app to RCE
A project that tries to document every potential path from any web app to RCE - AnvithLobo/WEB2RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC for CVE-2025-41373 Authenticated SQL Injection in Gandia Integra Total v2.1.2217.3–4.4.2236.1
URL：https://github.com/byteReaper77/CVE-2025-41373

标签：#CVE-2025
GitHub
GitHub - byteReaper77/CVE-2025-41373: PoC for CVE-2025-41373 Authenticated SQL Injection in Gandia Integra Total v2.1.2217.3–4.4.2236.1
GitHub - byteReaper77/CVE-2025-41373: PoC for CVE-2025-41373 Authenticated SQL Injection in Gandia Integra Total v2.1.2217.3–4.4.2236.1
PoC for CVE-2025-41373 Authenticated SQL Injection in Gandia Integra Total v2.1.2217.3–4.4.2236.1 - byteReaper77/CVE-2025-41373
CVE
Before
After
Back to Top