​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🚨 Exploit WinRAR CVE-2025-8088 with this PoC RAR archive, demonstrating the vulnerability and its impact when executed on the affected software.
URL：https://github.com/pablo388/WinRAR-CVE-2025-8088-PoC-RAR

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This repository contains a Proof of Concept (PoC) for CVE-2025-32463, a vulnerability in sudo allowing a chroot escape to achieve local privilege escalation.
URL：https://github.com/nelissandro/CVE-2025-32463-Sudo-Chroot-Escape

标签：#CVE-2025
GitHub
GitHub - D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape: This repository contains a Proof of Concept (PoC) for CVE-2025-32463…
GitHub - D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape: This repository contains a Proof of Concept (PoC) for CVE-2025-32463…
This repository contains a Proof of Concept (PoC) for CVE-2025-32463, a vulnerability in sudo allowing a chroot escape to achieve local privilege escalation. - D3ltaFormation/CVE-2025-32463-Sudo-Ch...
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：Lightx 是一款轻量级、高效率的网络安全扫描工具，专为安全研究人员和渗透测试工程师设计。它集成了端口扫描、服务识别、Web指纹识别、漏洞扫描和弱口令检测等功能，提供全面的安全评估能力。
URL：https://github.com/onewinner/Lightx

标签：#渗透测试
GitHub
GitHub - onewinner/Lightx: Lightx 是一款轻量级、高效率的网络安全扫描工具，专为安全研究人员和渗透测试工程师设计。它集成了端口扫描、服务识别、Web指纹识别、漏洞扫描和弱口令检测等功能，提供全面的安全评估能力。并覆盖多数两高一弱场景。
GitHub - onewinner/Lightx: Lightx 是一款轻量级、高效率的网络安全扫描工具，专为安全研究人员和渗透测试工程师设计。它集成了端口扫描、服务识别、Web指纹识别、漏洞扫描和弱口令检测等功能，提供全面的安全评估能力。并覆盖多数两高一弱场景。
Lightx 是一款轻量级、高效率的网络安全扫描工具，专为安全研究人员和渗透测试工程师设计。它集成了端口扫描、服务识别、Web指纹识别、漏洞扫描和弱口令检测等功能，提供全面的安全评估能力。并覆盖多数两高一弱场景。 - onewinner/Lightx
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：⚠️ Demonstrate CVE-2025-55188 with this proof-of-concept exploit for 7-Zip, revealing vulnerabilities in file extraction handling and potential impacts.
URL：https://github.com/Sh3ruman/CVE-2025-55188-7z-exploit

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-34100 test
URL：https://github.com/hyeonyeonglee/CVE-2025-34100

标签：#CVE-2025
GitHub
GitHub - hyeonyeonglee/CVE-2025-34100: CVE-2025-34100 test
GitHub - hyeonyeonglee/CVE-2025-34100: CVE-2025-34100 test
CVE-2025-34100 test. Contribute to hyeonyeonglee/CVE-2025-34100 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-0133 Exploit
URL：https://github.com/adhamelhansye/CVE-2025-0133

标签：#CVE-2025
GitHub
GitHub - adhamelhansye/CVE-2025-0133: CVE-2025-0133 Exploit
GitHub - adhamelhansye/CVE-2025-0133: CVE-2025-0133 Exploit
CVE-2025-0133 Exploit. Contribute to adhamelhansye/CVE-2025-0133 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：🚨 Demonstrate CVE-2025-54253, a critical OGNL injection vulnerability in Adobe AEM Forms, for educational and research purposes.
URL：https://github.com/akujedanjedon/CVE-2025-54253-Exploit-Demo

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：RCE hook
URL：https://github.com/butyraldehyde/CVE-2025-48384-PoC-Part2

标签：#CVE-2025
GitHub
GitHub - butyraldehyde/CVE-2025-48384-PoC-Part2: RCE hook
GitHub - butyraldehyde/CVE-2025-48384-PoC-Part2: RCE hook
RCE hook. Contribute to butyraldehyde/CVE-2025-48384-PoC-Part2 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🔍 Exploit the CVE-2025-54424 RCE vulnerability in 1Panel, enabling unauthorized command execution through a certification bypass tool for scanning and exploitation.
URL：https://github.com/bejbitoilet5125521/CVE-2025-54424

标签：#CVE-2025
GitHub
GitHub - bejbitoilet5125521/CVE-2025-54424: 🔍 Exploit the CVE-2025-54424 RCE vulnerability in 1Panel, enabling unauthorized command…
🔍 Exploit the CVE-2025-54424 RCE vulnerability in 1Panel, enabling unauthorized command execution through a certification bypass tool for scanning and exploitation. - bejbitoilet5125521/CVE-2025-54424
CVE
GitHub监控消息提醒！！！

更新了：应急响应
描述：渗透测试，应急响应综合练习平台
URL：https://github.com/MchalTesla/emergency-toolkit

标签：#应急响应
GitHub
GitHub - fightnvrgp/emergency-toolkit: 应急工具箱是由 fightnvrgp 开发并维护的开源项目，旨在为 Linux 系统的安全应急响应提供高效、便捷的工具支持。项目立足于实际安全事件处置需求，融合了多种信息收集…
GitHub - fightnvrgp/emergency-toolkit: 应急工具箱是由 fightnvrgp 开发并维护的开源项目，旨在为 Linux 系统的安全应急响应提供高效、便捷的工具支持。项目立足于实际安全事件处置需求，融合了多种信息收集…
应急工具箱是由 fightnvrgp 开发并维护的开源项目，旨在为 Linux 系统的安全应急响应提供高效、便捷的工具支持。项目立足于实际安全事件处置需求，融合了多种信息收集、系统检测和异常分析手段，帮助安全人员和运维工程师在面对突发安全事件时，能够快速定位问题、分析原因并采取有效措施。 本工具箱强调易用性和扩展性，无需复杂部署，即可一键执行核心应急流程。 - fightnvrgp/eme...
应急响应
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：💻 Demonstrate a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET, enabling remote code execution with a Proof-of-Concept script.
URL：https://github.com/jaydenb546/CVE-2025-30406

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🐳 Reproduce and test the CVE-2025-32463 vulnerability in a Docker-based lab environment for security research and practical analysis.
URL：https://github.com/DaadaAyoze/CVE-2025-32463-lab

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
URL：https://github.com/amalpvatayam67/day10-nextjs-middleware-lab

标签：#CVE-2025
GitHub
GitHub - amalpvatayam67/day10-nextjs-middleware-lab: Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
GitHub - amalpvatayam67/day10-nextjs-middleware-lab: Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
Next.js middleware auth-bypass lab (CVE-2025-29927 simulation) - amalpvatayam67/day10-nextjs-middleware-lab
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🔍 Scan for potential exposure to the critical SharePoint vulnerability CVE-2025-53770 with this simple and effective tool for authorized testing.
URL：https://github.com/ziisenpai/CVE-2025-53770-Scanner

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：电子钓鱼小游戏
URL：https://github.com/xxlemon-io/astrbot_plugin_fishing

标签：#钓鱼
GitHub
GitHub - 0xNMLSS/astrbot_plugin_fishing: 电子钓鱼小游戏
GitHub - 0xNMLSS/astrbot_plugin_fishing: 电子钓鱼小游戏
电子钓鱼小游戏. Contribute to 0xNMLSS/astrbot_plugin_fishing development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：红队
描述：红队自动化攻击平台
URL：https://github.com/kk12-30/-

标签：#红队
GitHub
GitHub - kk12-30/-: 红队自动化攻击平台
GitHub - kk12-30/-: 红队自动化攻击平台
红队自动化攻击平台. Contribute to kk12-30/- development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：内网渗透
描述：内网渗透——metasploit
URL：https://github.com/yshalive/-

标签：#内网渗透
GitHub
GitHub - yshalive/-: 内网渗透——metasploit
内网渗透——metasploit. Contribute to yshalive/- development by creating an account on GitHub.
内网渗透
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：AI修复生成的CVE-2025-32432的poc
URL：https://github.com/bambooqj/CVE-2025-32432

标签：#CVE-2025
GitHub
GitHub - bambooqj/CVE-2025-32432: AI修复生成的CVE-2025-32432的poc
GitHub - bambooqj/CVE-2025-32432: AI修复生成的CVE-2025-32432的poc
AI修复生成的CVE-2025-32432的poc. Contribute to bambooqj/CVE-2025-32432 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927
URL：https://github.com/sermikr0/nextjs-middleware-auth-bypass

标签：#CVE-2025
GitHub
GitHub - sermikr0/nextjs-middleware-auth-bypass: CVE-2025-29927
GitHub - sermikr0/nextjs-middleware-auth-bypass: CVE-2025-29927
CVE-2025-29927. Contribute to sermikr0/nextjs-middleware-auth-bypass development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：🛠️ Explore the CVE-2025-5777 memory leak vulnerability in Citrix NetScaler, illustrating the risks of uninitialized memory in parsing malformed POST data.
URL：https://github.com/Lakiya673/CVE-2025-5777

标签：#RCE
GitHub
GitHub - Lakiya673/CVE-2025-5777: 🛠️ Explore the CVE-2025-5777 memory leak vulnerability in Citrix NetScaler, illustrating the…
GitHub - Lakiya673/CVE-2025-5777: 🛠️ Explore the CVE-2025-5777 memory leak vulnerability in Citrix NetScaler, illustrating the…
🛠️ Explore the CVE-2025-5777 memory leak vulnerability in Citrix NetScaler, illustrating the risks of uninitialized memory in parsing malformed POST data. - Lakiya673/CVE-2025-5777
RCE
Before
After
Back to Top