​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-28432检测工具
URL：https://github.com/bingtangbanli/CVE-2023-28432

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-36874 PoC
URL：https://github.com/d0rb/CVE-2023-36874

标签：#CVE-2023
GitHub
GitHub - d0rb/CVE-2023-36874: This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation…
GitHub - d0rb/CVE-2023-36874: This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation…
This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error Reporting (WER) component. - d0rb/CVE-2023-36874
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-36874 PoC
URL：https://github.com/d0rb/CVE-2023-36874

标签：#CVE-2023
GitHub
GitHub - d0rb/CVE-2023-36874: This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation…
GitHub - d0rb/CVE-2023-36874: This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation…
This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error Reporting (WER) component. - d0rb/CVE-2023-36874
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：用于记录对各个靶机进行的渗透测试过程
URL：https://github.com/cws001/ws3c

标签：#渗透测试
渗透测试
GitHub监控消息提醒！！！

更新了：渗透测试
描述：用于记录对各个靶机进行的渗透测试过程
URL：https://github.com/cws001/ws3c

标签：#渗透测试
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Mass Exploit - CVE-2023-20073 - Cisco VPN Routers - [Unauthenticated Arbitrary File Upload and Stored XSS]
URL：https://github.com/codeb0ss/CVE-2023-20073-

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Mass Exploit - CVE-2023-20073 - Cisco VPN Routers - [Unauthenticated Arbitrary File Upload and Stored XSS]
URL：https://github.com/codeb0ss/CVE-2023-20073-

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Metabase Pre-auth RCE (CVE-2023-38646)
URL：https://github.com/kh4sh3i/CVE-2023-38646

标签：#CVE-2023
GitHub
GitHub - kh4sh3i/CVE-2023-38646: Metabase Pre-auth RCE (CVE-2023-38646)
GitHub - kh4sh3i/CVE-2023-38646: Metabase Pre-auth RCE (CVE-2023-38646)
Metabase Pre-auth RCE (CVE-2023-38646). Contribute to kh4sh3i/CVE-2023-38646 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Metabase Pre-auth RCE (CVE-2023-38646)
URL：https://github.com/kh4sh3i/CVE-2023-38646

标签：#CVE-2023
GitHub
GitHub - kh4sh3i/CVE-2023-38646: Metabase Pre-auth RCE (CVE-2023-38646)
GitHub - kh4sh3i/CVE-2023-38646: Metabase Pre-auth RCE (CVE-2023-38646)
Metabase Pre-auth RCE (CVE-2023-38646). Contribute to kh4sh3i/CVE-2023-38646 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：The notebook for my talk - ChatGPT: Your Red Teaming Ally
URL：https://github.com/NetsecExplained/chatgpt-your-red-team-ally

标签：#Red Team
GitHub
GitHub - NetsecExplained/chatgpt-your-red-team-ally: The notebook for my talk - ChatGPT: Your Red Teaming Ally
GitHub - NetsecExplained/chatgpt-your-red-team-ally: The notebook for my talk - ChatGPT: Your Red Teaming Ally
The notebook for my talk - ChatGPT: Your Red Teaming Ally - NetsecExplained/chatgpt-your-red-team-ally
Red
GitHub监控消息提醒！！！

更新了：反序列化
描述：Java反序列化漏洞
URL：https://github.com/leekosss/JavaSerialize

标签：#反序列化
GitHub
leekosss/JavaSerialize
leekosss/JavaSerialize
Java反序列化漏洞. Contribute to leekosss/JavaSerialize development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Python rewrite of the POC for CVE-2023-34634
URL：https://github.com/radman404/CVE-2023-34634

标签：#CVE-2023
GitHub
GitHub - radman404/CVE-2023-34634: Python rewrite of the POC for CVE-2023-34634
GitHub - radman404/CVE-2023-34634: Python rewrite of the POC for CVE-2023-34634
Python rewrite of the POC for CVE-2023-34634. Contribute to radman404/CVE-2023-34634 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：反序列化
描述：用来存放java反序列化漏洞的一些例子
URL：https://github.com/risuxx/java_deserialization

标签：#反序列化
GitHub
GitHub - risuxx/java_deserialization: 用来存放java反序列化漏洞的一些例子
GitHub - risuxx/java_deserialization: 用来存放java反序列化漏洞的一些例子
用来存放java反序列化漏洞的一些例子. Contribute to risuxx/java_deserialization development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：Red Team
描述：dddd（带带弟弟），是一款支持多种输入格式，基于Fofa语法的主/被动指纹探测，基于nuclei的可拓展的供应链漏洞探测工具。自动化/全方位/一键大保健/Bug Bounty/Red Teaming
URL：https://github.com/SleepingBag945/dddd

标签：#Red Team
GitHub
GitHub - SleepingBag945/dddd: dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标
GitHub - SleepingBag945/dddd: dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标
dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标 - SleepingBag945/dddd
Red
GitHub监控消息提醒！！！

更新了：漏洞验证
描述：网神 SecGate 3600 防火墙 obj_app_upfile接口存在任意文件上传漏洞验证脚本
URL：https://github.com/cyf-zzz/iSecSSL360-SetPass_POC

标签：#漏洞验证
GitHub
GitHub - cyf-zzz/iSecSSL360-SetPass_POC: 网神 SecGate 3600 防火墙 obj_app_upfile接口存在任意文件上传漏洞验证脚本
GitHub - cyf-zzz/iSecSSL360-SetPass_POC: 网神 SecGate 3600 防火墙 obj_app_upfile接口存在任意文件上传漏洞验证脚本
网神 SecGate 3600 防火墙 obj_app_upfile接口存在任意文件上传漏洞验证脚本 - cyf-zzz/iSecSSL360-SetPass_POC
漏洞验证
GitHub监控消息提醒！！！

更新了：代码审计
描述：WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】
URL：https://github.com/cirosantilli/china-dictatorhsip-7

标签：#代码审计
GitHub
GitHub - cirosantilli/china-dictatroship-7: 反中共政治宣传库。Anti Chinese government propaganda. https://github.com/cirosantilli/china…
GitHub - cirosantilli/china-dictatroship-7: 反中共政治宣传库。Anti Chinese government propaganda. https://github.com/cirosantilli/china…
反中共政治宣传库。Anti Chinese government propaganda. https://github.com/cirosantilli/china-dictatorship 的备份backup. 住在中国真名用户的网友请别给星星，不然你要被警察请喝茶。常见问答集，新闻集和饭店和音乐建议。卐习万岁卐。冠状病毒审查郝海东新疆改造中心六四事件法轮功 996.ICU709大抓捕巴拿...
代码审计
GitHub监控消息提醒！！！

更新了：bypass av
描述：a simple keylogger written in python but not obfuscated to bypass av detection. it is just for educational puposes only
URL：https://github.com/halkano781/keylogger

标签：#bypass av
GitHub
GitHub - halkano781/keylogger: a simple keylogger written in python but not obfuscated to bypass av detection. it is just for educational…
GitHub - halkano781/keylogger: a simple keylogger written in python but not obfuscated to bypass av detection. it is just for educational…
a simple keylogger written in python but not obfuscated to bypass av detection. it is just for educational puposes only - GitHub - halkano781/keylogger: a simple keylogger written in python but no...
bypass
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-39143 < PaperCut < Path Traversal (PT)
URL：https://github.com/codeb0ss/CVE-2023-39143

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-4174 - mooSocial 3.1.6 - Reflected Cross Site Scripting (XSS)
URL：https://github.com/codeb0ss/CVE-2023-4174

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-37979 - WordPress Authenticated XSS in Ninja-forms Plugin
URL：https://github.com/codeb0ss/CVE-2023-37979

标签：#CVE-2023
CVE
Before
After
Back to Top