​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Detection for CVE-2025-7775
URL：https://github.com/rxerium/CVE-2025-7775

标签：#CVE-2025
GitHub
GitHub - rxerium/CVE-2025-7775: Detection for CVE-2025-7775
GitHub - rxerium/CVE-2025-7775: Detection for CVE-2025-7775
Detection for CVE-2025-7775. Contribute to rxerium/CVE-2025-7775 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC de RCE en PostgreSQL — CVE-2025-8714
URL：https://github.com/orderby99/CVE-2025-8714-POC

标签：#CVE-2025
GitHub
GitHub - orderby99/CVE-2025-8714-POC: PoC de RCE en PostgreSQL — CVE-2025-8714
GitHub - orderby99/CVE-2025-8714-POC: PoC de RCE en PostgreSQL — CVE-2025-8714
PoC de RCE en PostgreSQL — CVE-2025-8714. Contribute to orderby99/CVE-2025-8714-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：repo for CVE-2025-55349
URL：https://github.com/GoldenTicketLabs/CVE-2025-55349

标签：#CVE-2025
GitHub
GitHub - GoldenTicketLabs/CVE-2025-55349: repo for CVE-2025-55349
GitHub - GoldenTicketLabs/CVE-2025-55349: repo for CVE-2025-55349
repo for CVE-2025-55349. Contribute to GoldenTicketLabs/CVE-2025-55349 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver
URL：https://github.com/mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

标签：#CVE-2025
GitHub
GitHub - mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack: It shook the world in 2017 and has evolved into…
GitHub - mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack: It shook the world in 2017 and has evolved into…
It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full re...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver
URL：https://github.com/U65535F/ThrottleStopPoC

标签：#CVE-2025
GitHub
GitHub - fxrstor/ThrottleStopPoC: CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver
GitHub - fxrstor/ThrottleStopPoC: CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver
CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver - fxrstor/ThrottleStopPoC
CVE
GitHub监控消息提醒！！！

更新了：代码审计
描述：基于Python 3.12 + PySide6 (Qt 6.6) 构建的多语言Windows代码审计工具
URL：https://github.com/ciligouai/ciligou

标签：#代码审计
GitHub
GitHub - ciligouai/ciligou: 磁力狗项目始于2020年，由一群热爱技术的开发者发起。我们注意到市场上缺乏一个真正开源、透明且用户友好的解决方案，因此决定创建一个公益开源项目来填补这个空白。 我们的使命 磁力狗的使命是为全球用…
GitHub - ciligouai/ciligou: 磁力狗项目始于2020年，由一群热爱技术的开发者发起。我们注意到市场上缺乏一个真正开源、透明且用户友好的解决方案，因此决定创建一个公益开源项目来填补这个空白。 我们的使命 磁力狗的使命是为全球用…
磁力狗项目始于2020年，由一群热爱技术的开发者发起。我们注意到市场上缺乏一个真正开源、透明且用户友好的解决方案，因此决定创建一个公益开源项目来填补这个空白。 我们的使命 磁力狗的使命是为全球用户提供安全、便捷、高效的服务体验。我们相信技术应该服务于人类，而不是相反。通过开源的方式，我们希望能够： 提供透明、可审计的代码 建立活跃的开发者社区 推动技术创新和知识共享 为用户提供免费且高质...
代码审计
GitHub监控消息提醒！！！

更新了：内网渗透
描述：FlyWheel is an intranet penetration aid developed based on Rust FlyWheel是一个基于Rust开发的内网渗透辅助工具
URL：https://github.com/BlkSword/Fly-Wheel

标签：#内网渗透
GitHub
GitHub - BlkSword/Fly-Wheel: FlyWheel is an intranet penetration aid developed based on Rust FlyWheel是一个基于Rust开发的内网渗透辅助工具
FlyWheel is an intranet penetration aid developed based on Rust FlyWheel是一个基于Rust开发的内网渗透辅助工具 - BlkSword/Fly-Wheel
内网渗透
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance.
URL：https://github.com/Kastowm/Anydesk-Exploit-CVE-2025-12654-RCE-Builder

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：A hacking challenge (CTF) - try to get RCE out of it!
URL：https://github.com/r3dpower/ImportTroubles

标签：#RCE
GitHub
GitHub - r3dpower/ImportTroubles: A hacking challenge (CTF) - try to get RCE out of it!
GitHub - r3dpower/ImportTroubles: A hacking challenge (CTF) - try to get RCE out of it!
A hacking challenge (CTF) - try to get RCE out of it! - r3dpower/ImportTroubles
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：FastAdmin_Upload RCE
URL：https://github.com/2696607060/FastAdmin_Upload-RCE

标签：#RCE
GitHub
GitHub - 2696607060/FastAdmin_Upload-RCE: FastAdmin_Upload RCE
GitHub - 2696607060/FastAdmin_Upload-RCE: FastAdmin_Upload RCE
FastAdmin_Upload RCE. Contribute to 2696607060/FastAdmin_Upload-RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Pet Grooming Management RCE
URL：https://github.com/drew-byte/Pet-Grooming-Management-RCE

标签：#RCE
GitHub
GitHub - drew-byte/Pet-Grooming-Management-RCE: Pet Grooming Management RCE
Pet Grooming Management RCE. Contribute to drew-byte/Pet-Grooming-Management-RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization
URL：https://github.com/LeakForge/CVE-2025-49113

标签：#CVE-2025
GitHub
GitHub - LeakForge/CVE-2025-49113: Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization
GitHub - LeakForge/CVE-2025-49113: Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization
Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization - LeakForge/CVE-2025-49113
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：RCE POC
URL：https://github.com/lex0c/gungnir

标签：#RCE
GitHub
GitHub - lex0c/gungnir: Remote access tool
GitHub - lex0c/gungnir: Remote access tool
Remote access tool. Contribute to lex0c/gungnir development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Custom IPC Client and Proof of Concept exploit for CVE-2025-0309 (Netskope Windows Client LPE)
URL：https://github.com/AC8999/CVE-2025-49113

标签：#CVE-2025
GitHub
GitHub - AC8999/CVE-2025-49113: Python Script for CVE-2025-49113. Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows…
GitHub - AC8999/CVE-2025-49113: Python Script for CVE-2025-49113. Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows…
Python Script for CVE-2025-49113. Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated i...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819
URL：https://github.com/Sucuri-Labs/CVE-2025-57819-ioc-check

标签：#CVE-2025
GitHub
GitHub - Sucuri-Labs/CVE-2025-57819-ioc-check: This is repository contains a script to check for current IOCs listed in the freepbx…
GitHub - Sucuri-Labs/CVE-2025-57819-ioc-check: This is repository contains a script to check for current IOCs listed in the freepbx…
This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819 - Sucuri-Labs/CVE-2025-57819-ioc-check
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Heap overflow PoC for CivetWeb CVE-2025-55763
URL：https://github.com/krispybyte/CVE-2025-55763

标签：#CVE-2025
GitHub
GitHub - krispybyte/CVE-2025-55763: Heap overflow PoC for CivetWeb CVE-2025-55763
GitHub - krispybyte/CVE-2025-55763: Heap overflow PoC for CivetWeb CVE-2025-55763
Heap overflow PoC for CivetWeb CVE-2025-55763. Contribute to krispybyte/CVE-2025-55763 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：致远OA存在文件上传导致RCE（CVE-2025-34040）
URL：https://github.com/jisi-001/CVE-2025-34040Exp

标签：#CVE-2025
GitHub
GitHub - jisi-001/CVE-2025-34040Exp: 致远OA存在文件上传导致RCE（CVE-2025-34040）
GitHub - jisi-001/CVE-2025-34040Exp: 致远OA存在文件上传导致RCE（CVE-2025-34040）
致远OA存在文件上传导致RCE（CVE-2025-34040）. Contribute to jisi-001/CVE-2025-34040Exp development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：KALI_MCP_SERVER —— 一个基于配置的容器化安全自动化平台，通过 JSON-RPC 统一编排和调用渗透测试工具。
URL：https://github.com/taopeng-life/KALI_MCP_SERVER

标签：#渗透测试
GitHub
GitHub - taopeng-life/KALI_MCP_SERVER: KALI_MCP_SERVER —— 一个基于配置的容器化安全自动化平台，通过 JSON-RPC 统一编排和调用渗透测试工具。
GitHub - taopeng-life/KALI_MCP_SERVER: KALI_MCP_SERVER —— 一个基于配置的容器化安全自动化平台，通过 JSON-RPC 统一编排和调用渗透测试工具。
KALI_MCP_SERVER —— 一个基于配置的容器化安全自动化平台，通过 JSON-RPC 统一编排和调用渗透测试工具。 - taopeng-life/KALI_MCP_SERVER
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC for CVE-2025-48384
URL：https://github.com/jacobholtz/CVE-2025-48384-poc

标签：#CVE-2025
GitHub
GitHub - jacobholtz/CVE-2025-48384-poc: PoC for CVE-2025-48384
GitHub - jacobholtz/CVE-2025-48384-poc: PoC for CVE-2025-48384
PoC for CVE-2025-48384. Contribute to jacobholtz/CVE-2025-48384-poc development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🔍 Analyze CVE-2025-5419 to understand its impact and mitigate risks effectively in your systems.
URL：https://github.com/pavan3478/CVE-2025-5419

标签：#CVE-2025
CVE
Before
After
Back to Top