​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing
URL：https://github.com/netw0rk7/CVE-2015-3306-Home-Lab

标签：#RCE
GitHub
GitHub - netw0rk7/CVE-2015-3306-Home-Lab: CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or…
GitHub - netw0rk7/CVE-2015-3306-Home-Lab: CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or…
CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing - netw0rk7/CVE-2015-3306-Home-Lab
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A scanner for the FortiNet vulnerability CVE-2025-64446
URL：https://github.com/sensepost/CVE-2025-64446

标签：#CVE-2025
GitHub
GitHub - sensepost/CVE-2025-64446: A scanner for the FortiNet vulnerability CVE-2025-64446
GitHub - sensepost/CVE-2025-64446: A scanner for the FortiNet vulnerability CVE-2025-64446
A scanner for the FortiNet vulnerability CVE-2025-64446 - sensepost/CVE-2025-64446
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-12762
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-12762

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE, RCE, XSS, Path Traversal, NTLM Leak, LFI, and other vulnerabilities in all common file formats
URL：https://github.com/niranc/UploadRenderAllTheThings

标签：#RCE
GitHub
GitHub - niranc/UploadRenderAllTheThings: merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE,…
merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE, RCE, XSS, Path Traversal, NTLM Leak, LFI, and other vulnerabilities in all common file formats - niranc/UploadRe...
RCE
GitHub监控消息提醒！！！

更新了：红队
描述：适用于红队攻防演练获得目标账户批量登录，报告编写
URL：https://github.com/ChinaRan0/Attack_login

标签：#红队
GitHub
GitHub - ChinaRan0/Attack_login: 适用于红队攻防演练获得目标账户批量登录，报告编写
适用于红队攻防演练获得目标账户批量登录，报告编写. Contribute to ChinaRan0/Attack_login development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：webshell
描述：webshell-env
URL：https://github.com/songlaa/webshell-env

标签：#webshell
GitHub
GitHub - songlaa/webshell-env: webshell-env
webshell-env. Contribute to songlaa/webshell-env development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-36250
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-36250

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：ModifyNeo-reGeorg 是一款基于 Neo-reGeorg 深度重构的高性能正向代理工具，采用 HTTP 隧道实现流量封装，天然具备强伪装与免杀优势，一键生成php、jsp、asp等8种模板文件。目前测试可过火绒、360、defender、天擎、绿盟EDR。
URL：https://github.com/6yx1n0930-art/ModifyNeo-reGeorg-V1.0

标签：#免杀
GitHub
GitHub - 6yx1n0930-art/ModifyNeo-reGeorg-V1.0: ModifyNeo-reGeorg 是一款基于 Neo-reGeorg 深度重构的高性能正向代理工具，采用 HTTP 隧道实现流量封装，天然具备强伪装与免杀优…
ModifyNeo-reGeorg 是一款基于 Neo-reGeorg 深度重构的高性能正向代理工具，采用 HTTP 隧道实现流量封装，天然具备强伪装与免杀优势，一键生成php、jsp、asp等8种模板文件。目前测试可过火绒、360、defender、天擎、绿盟EDR。 - 6yx1n0930-art/ModifyNeo-reGeorg-V1.0
免杀
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read /secret.txt.
URL：https://github.com/demining/Scalar-Venom-Attack

标签：#CVE-2025
GitHub
GitHub - demining/Scalar-Venom-Attack: Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables…
GitHub - demining/Scalar-Venom-Attack: Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables…
Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables private Bitcoin wallet key recovery through buffer overflow exploitation and shell metacharacters in the F5...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read /secret.txt.
URL：https://github.com/ankitpandey383/roundcube-cve-2025-49113-lab

标签：#CVE-2025
GitHub
GitHub - ankitpandey383/roundcube-cve-2025-49113-lab: Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated…
GitHub - ankitpandey383/roundcube-cve-2025-49113-lab: Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated…
Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read /secret.txt. - ankitpandey383/roundcube-cve-2025-49113-lab
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.
URL：https://github.com/sarabpal-dev/cheese-cake

标签：#CVE-2025
GitHub
GitHub - sarabpal-dev/cheese-cake: A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.
A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique. - sarabpal-dev/cheese-cake
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-10720 PoC
URL：https://github.com/lorenzocamilli/CVE-2025-62950-PoC

标签：#CVE-2025
GitHub
GitHub - lorenzocamilli/CVE-2025-62950-PoC: CVE-2025-10720 PoC
GitHub - lorenzocamilli/CVE-2025-62950-PoC: CVE-2025-10720 PoC
CVE-2025-10720 PoC . Contribute to lorenzocamilli/CVE-2025-62950-PoC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-64484
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-64484

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：placeholder for CitrixBleed 2.0 CVE-2025-5777
URL：https://github.com/mr-r3b00t/CVE-2025-5777

标签：#CVE-2025
GitHub
GitHub - mr-r3b00t/CVE-2025-5777: placeholder for CitrixBleed 2.0 CVE-2025-5777
GitHub - mr-r3b00t/CVE-2025-5777: placeholder for CitrixBleed 2.0 CVE-2025-5777
placeholder for CitrixBleed 2.0 CVE-2025-5777. Contribute to mr-r3b00t/CVE-2025-5777 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317
URL：https://github.com/M507/CVE-2025-59287-PoC

标签：#CVE-2025
GitHub
GitHub - M507/CVE-2025-59287-PoC: Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 &…
GitHub - M507/CVE-2025-59287-PoC: Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 &…
Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317 - M507/CVE-2025-59287-PoC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：maybe a poc for CVE-2025-40019
URL：https://github.com/guard-wait/CVE-2025-40019_POC

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Public exploit for CVE-2025-13188
URL：https://github.com/degeneration1973/CVE-2025-13188-Exploit

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Backported the upstream fix for CVE-2025-48060 (heap buffer overflow in jv_string_empty) to jq 1.6.
URL：https://github.com/leorivass/jq-els-backport-cve-2025-48060

标签：#CVE-2025
GitHub
GitHub - leorivass/jq-els-backport-cve-2025-48060: Backported the upstream fix for CVE-2025-48060 (heap buffer overflow in jv_string_empty)…
GitHub - leorivass/jq-els-backport-cve-2025-48060: Backported the upstream fix for CVE-2025-48060 (heap buffer overflow in jv_string_empty)…
Backported the upstream fix for CVE-2025-48060 (heap buffer overflow in jv_string_empty) to jq 1.6. - leorivass/jq-els-backport-cve-2025-48060
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Production-ready WAF using ModSecurity + OWASP CRS. Blocks SQL injection, XSS, RCE, and 10+ attack types. Docker-native with interactive demo.
URL：https://github.com/hkroxalot/generic-waf

标签：#RCE
GitHub
GitHub - hkroxalot/generic-waf: Production-ready WAF using ModSecurity + OWASP CRS. Blocks SQL injection, XSS, RCE, and 10+ attack…
Production-ready WAF using ModSecurity + OWASP CRS. Blocks SQL injection, XSS, RCE, and 10+ attack types. Docker-native with interactive demo. - hkroxalot/generic-waf
RCE
Before
After
Back to Top