​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Exploit for CVE-2025-61882 (do not use without any written permission).
URL：https://github.com/Sachinart/CVE-2025-61882

标签：#CVE-2025
GitHub
GitHub - Sachinart/CVE-2025-61882: Exploit for CVE-2025-61882 (do not use without any written permission).
GitHub - Sachinart/CVE-2025-61882: Exploit for CVE-2025-61882 (do not use without any written permission).
Exploit for CVE-2025-61882 (do not use without any written permission). - Sachinart/CVE-2025-61882
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：An Obsidian plugin that quickly generates HTB penetration testing note templates,一款能够快速生成HTB渗透测试笔记模版的Obsidian 插件，有助于对您的知识库进行管理查询
URL：https://github.com/Ryanu9/Obsidian-Machine-Tracker

标签：#渗透测试
GitHub
Ryanu9/Obsidian-Machine-Tracker
An Obsidian plugin that quickly generates HTB penetration testing note templates,一款能够快速生成HTB渗透测试笔记模版的Obsidian 插件，有助于对您的知识库进行管理查询 - Ryanu9/Obsidian-Machine-Tracker
渗透测试
GitHub监控消息提醒！！！

更新了：钓鱼
描述：Russian Fishing 4 Auto Script 俄罗斯钓鱼4自动化脚本
URL：https://github.com/fyodorrss/RussianFishing4-Script

标签：#钓鱼
钓鱼
GitHub监控消息提醒！！！

更新了：Red Team
描述：A C++ command-line tool for pentesters and Red Teamers to quickly scaffold and manage directory structures for engagements, labs, and tools.
URL：https://github.com/dcollaoa/rt_manager

标签：#Red Team
Red
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.
URL：https://github.com/OilSeller2001/PoC-for-CVE-2025-9074

标签：#CVE-2025
GitHub
GitHub - OilSeller2001/PoC-for-CVE-2025-9074: Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure…
Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access. - OilSeller2001/PoC-for-CVE-2025-9074
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：钓鱼网站：url模型和dnn模型
URL：https://github.com/mengguiyouziyi/phish

标签：#钓鱼
GitHub
GitHub - mengguiyouziyi/phish: 钓鱼网站：url模型和dnn模型
钓鱼网站：url模型和dnn模型. Contribute to mengguiyouziyi/phish development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Proof Of Concept For CVE-2025-59489. Affects unity games running on Android.
URL：https://github.com/GithubKillsMyOpsec/CVE-2025-59489-POC

标签：#CVE-2025
GitHub
GitHub - GithubKillsMyOpsec/CVE-2025-59489-POC: Proof Of Concept For CVE-2025-59489. Affects unity games running on Android.
GitHub - GithubKillsMyOpsec/CVE-2025-59489-POC: Proof Of Concept For CVE-2025-59489. Affects unity games running on Android.
Proof Of Concept For CVE-2025-59489. Affects unity games running on Android. - GithubKillsMyOpsec/CVE-2025-59489-POC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Detection for CVE-2025-61882
URL：https://github.com/rxerium/CVE-2025-61882

标签：#CVE-2025
GitHub
GitHub - rxerium/CVE-2025-61882-CVE-2025-61884: Detection for CVE-2025-61882 & CVE-2025-61884
GitHub - rxerium/CVE-2025-61882-CVE-2025-61884: Detection for CVE-2025-61882 & CVE-2025-61884
Detection for CVE-2025-61882 & CVE-2025-61884. Contribute to rxerium/CVE-2025-61882-CVE-2025-61884 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast
URL：https://github.com/drcrypterdotru/Apache-GOExploiter

标签：#CVE-2025
GitHub
GitHub - drcrypterdotru/Apache-GOExploiter: Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast
GitHub - drcrypterdotru/Apache-GOExploiter: Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast
Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast - drcrypterdotru/Apache-GOExploiter
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：本库用于渗透测试入门学习记录
URL：https://github.com/ssh79-l/-

标签：#渗透测试
GitHub
GitHub - ssh79-l/-: 本库用于渗透测试入门学习记录
本库用于渗透测试入门学习记录. Contribute to ssh79-l/- development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation
URL：https://github.com/Jenderal92/WP-CVE-2025-6934

标签：#CVE-2025
GitHub
GitHub - Jenderal92/WP-CVE-2025-6934: WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation
GitHub - Jenderal92/WP-CVE-2025-6934: WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation
WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation - Jenderal92/WP-CVE-2025-6934
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。
URL：https://github.com/xminj/monitor-agent

标签：#信息收集
GitHub
GitHub - xminj/monitor-agent: 基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。
GitHub - xminj/monitor-agent: 基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。
基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。 - xminj/monitor-agent
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2025
描述： This repository contains a proof-of-concept exploit script for CVE-2025-1338
URL：https://github.com/jxcaxtc/CVE-2025-1338

标签：#CVE-2025
GitHub
GitHub - jxcaxtc/CVE-2025-1338: This repository contains a proof-of-concept exploit script for CVE-2025-1338
GitHub - jxcaxtc/CVE-2025-1338: This repository contains a proof-of-concept exploit script for CVE-2025-1338
This repository contains a proof-of-concept exploit script for CVE-2025-1338 - jxcaxtc/CVE-2025-1338
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.
URL：https://github.com/Creksz/web-vuln-scanner

标签：#RCE
GitHub
GitHub - Creksz/web-vuln-scanner: A lightweight and extensible web vulnerability scanner for reconnaissance and web application…
GitHub - Creksz/web-vuln-scanner: A lightweight and extensible web vulnerability scanner for reconnaissance and web application…
A lightweight and extensible web vulnerability scanner for reconnaissance and web application security testing. Detects and reports common vulnerability classes (e.g., SQLi, XSS, CSRF, RCE, misconf...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.
URL：https://github.com/farazsth98/exploit-CVE-2025-39946

标签：#CVE-2025
GitHub
GitHub - farazsth98/exploit-CVE-2025-39946: Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.
GitHub - farazsth98/exploit-CVE-2025-39946: Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.
Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem. - farazsth98/exploit-CVE-2025-39946
CVE
GitHub监控消息提醒！！！

更新了：bypass av
描述：免杀木马样本
URL：https://github.com/batuhan-arda/Direct-Syscall-APC-Injection-PoC-Malware

标签：#bypass av
GitHub
GitHub - batuhan-arda/Direct-Syscall-APC-Injection-PoC-Malware: Injects shellcode into cmd.exe to execute arbitrary code. Creates…
GitHub - batuhan-arda/Direct-Syscall-APC-Injection-PoC-Malware: Injects shellcode into cmd.exe to execute arbitrary code. Creates…
Injects shellcode into cmd.exe to execute arbitrary code. Creates a suspended process, allocates memory using direct syscalls, writes disguised payload, changes permissions to executable, then trig...
bypass
GitHub监控消息提醒！！！

更新了：RCE
描述：🛠️ Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.
URL：https://github.com/ivy2320/CTF-event

标签：#RCE
GitHub
GitHub - ivy2320/CTF-event: # MyCTF-Event This repo contains CTF challenges. Structure: - ctf/rce/ -> RCE challenge folders…
# MyCTF-Event This repo contains CTF challenges. Structure: - ctf/rce/ -> RCE challenge folders (no flags) - ctf/osint/ -> OSINT challenge folders - OSINT challenge folders(...
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Classic Web shell upload techniques & Web RCE techniques
URL：https://github.com/JFR-C/Webshell-Upload-and-Web-RCE-Techniques

标签：#RCE
GitHub
GitHub - JFR-C/Webshell-Upload-and-Web-RCE-Techniques: Classic Web shell upload techniques & Web RCE techniques
GitHub - JFR-C/Webshell-Upload-and-Web-RCE-Techniques: Classic Web shell upload techniques & Web RCE techniques
Classic Web shell upload techniques & Web RCE techniques - JFR-C/Webshell-Upload-and-Web-RCE-Techniques
RCE
GitHub监控消息提醒！！！

更新了：红队
描述：全网首发！！！红队详细教程！上万次攻防演练经验
URL：https://github.com/duckpigdog/RedTeam

标签：#红队
GitHub
GitHub - duckpigdog/RedTeam: 全网首发！！！红队详细教程！上万次攻防演练经验
GitHub - duckpigdog/RedTeam: 全网首发！！！红队详细教程！上万次攻防演练经验
全网首发！！！红队详细教程！上万次攻防演练经验. Contribute to duckpigdog/RedTeam development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)
URL：https://github.com/diogolourencodev/middleforce

标签：#CVE-2025
GitHub
GitHub - diogolourencodev/middleforce: Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js…
GitHub - diogolourencodev/middleforce: Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js…
Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware) - diogolourencodev/middleforce
CVE
Before
After
Back to Top