​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：免杀
描述：nim免杀过某数字、某绒
URL：https://github.com/yutianqaq/x2Ldr

标签：#免杀
GitHub
GitHub - yutianqaq/x2Ldr: nim免杀过某数字、某绒
GitHub - yutianqaq/x2Ldr: nim免杀过某数字、某绒
nim免杀过某数字、某绒. Contribute to yutianqaq/x2Ldr development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：信息收集
描述：上市公司财务信息收集与分析系统（后端+爬虫）
URL：https://github.com/hexkang/Financial-collection-and-analysis-system

标签：#信息收集
信息收集
GitHub监控消息提醒！！！

更新了：信息收集
描述：上市公司财务信息收集与分析系统
URL：https://github.com/hexkang/Financial-collection-analysis-system

标签：#信息收集
信息收集
GitHub监控消息提醒！！！

更新了：RCE
描述：亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用
URL：https://github.com/0xf4n9x/CDGXStreamDeserRCE

标签：#RCE
GitHub
GitHub - 0xf4n9x/CDGXStreamDeserRCE: 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用
GitHub - 0xf4n9x/CDGXStreamDeserRCE: 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用
亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用. Contribute to 0xf4n9x/CDGXStreamDeserRCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：内存马
描述：支持注入内存马和Bypass WAF
URL：https://github.com/wafinfo/MeterSphere-plugin-Backdoor

标签：#内存马
GitHub
GitHub - wafinfo/MeterSphere-plugin-Backdoor: 支持注入内存马和Bypass WAF
GitHub - wafinfo/MeterSphere-plugin-Backdoor: 支持注入内存马和Bypass WAF
支持注入内存马和Bypass WAF. Contribute to wafinfo/MeterSphere-plugin-Backdoor development by creating an account on GitHub.
内存马
GitHub监控消息提醒！！！

更新了：Red Team
描述：Collection of notes that I have gathered during my studies for the Certified Red Team Professional (CRTP) exam.
URL：https://github.com/dudisamarel/CRTP-Notes

标签：#Red Team
GitHub
GitHub - dudisamarel/CRTP-Notes: Collection of notes that I have gathered during my studies for the Certified Red Team Professional…
GitHub - dudisamarel/CRTP-Notes: Collection of notes that I have gathered during my studies for the Certified Red Team Professional…
Collection of notes that I have gathered during my studies for the Certified Red Team Professional (CRTP) exam. - dudisamarel/CRTP-Notes
Red
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Unauthenticated RCE in ZoneMinder Snapshots
URL：https://github.com/rvizx/CVE-2023-26035

标签：#CVE-2023
GitHub
GitHub - rvzsec/CVE-2023-26035: Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit
GitHub - rvzsec/CVE-2023-26035: Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit
Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit - rvzsec/CVE-2023-26035
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike BOFS
URL：https://github.com/Workingdaturah/BOF-Learning

标签：#Cobalt Strike
GitHub
GitHub - Workingdaturah/BOF-Learning: Cobalt Strike BOFS
GitHub - Workingdaturah/BOF-Learning: Cobalt Strike BOFS
Cobalt Strike BOFS. Contribute to Workingdaturah/BOF-Learning development by creating an account on GitHub.
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Cisco CVE-2023-20198
URL：https://github.com/Vulnmachines/Cisco_CVE-2023-20198

标签：#CVE-2023
GitHub
GitHub - Vulnmachines/Cisco_CVE-2023-20198: Cisco CVE-2023-20198
GitHub - Vulnmachines/Cisco_CVE-2023-20198: Cisco CVE-2023-20198
Cisco CVE-2023-20198. Contribute to Vulnmachines/Cisco_CVE-2023-20198 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：一键免杀冰蝎、哥斯拉等webshel​​l的php、jsp木马文件
URL：https://github.com/xiaogang000/XG_NTAI

标签：#免杀
GitHub
GitHub - xiaogang000/XG_NTAI: 用于Webshell木马免杀、流量加密传输，多多支持star
用于Webshell木马免杀、流量加密传输，多多支持star. Contribute to xiaogang000/XG_NTAI development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：Metabase postgres (org.h2.Driver) RCE without INIT
URL：https://github.com/0utl4nder/Another-Metabase-RCE-CVE-2023-38646

标签：#RCE
GitHub
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
Metabase postgres (org.h2.Driver) RCE without INIT - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Metabase postgres (org.h2.Driver) RCE without INIT
URL：https://github.com/0utl4nder/Another-Metabase-RCE-CVE-2023-38646-

标签：#RCE
GitHub
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
Metabase postgres (org.h2.Driver) RCE without INIT - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：PoC of CVE-2023-4911
URL：https://github.com/snurkeburk/Looney-Tunables

标签：#CVE-2023
GitHub
GitHub - snurkeburk/Looney-Tunables: PoC of CVE-2023-4911
GitHub - snurkeburk/Looney-Tunables: PoC of CVE-2023-4911
PoC of CVE-2023-4911. Contribute to snurkeburk/Looney-Tunables development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Ansible Playbook for CVE-2023-4966
URL：https://github.com/ditekshen/ansible-cve-2023-4966

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。
URL：https://github.com/xu-xiang/awesome-security-vul-llm

标签：#信息收集
GitHub
GitHub - xu-xiang/awesome-security-vul-llm: 本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇…
本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。 - xu-xiang/awesome-security-vul-llm
信息收集
GitHub监控消息提醒！！！

更新了：RCE
描述：The frontend app for my toy RCE project
URL：https://github.com/KhachikAstoyan/toy-tce-client

标签：#RCE
GitHub
GitHub - KhachikAstoyan/toy-tce-client: The frontend app for my toy RCE project
GitHub - KhachikAstoyan/toy-tce-client: The frontend app for my toy RCE project
The frontend app for my toy RCE project. Contribute to KhachikAstoyan/toy-tce-client development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：护网
描述：Java-JWT 安全加密 JSON 数据，安全传输，守护网络安全
URL：https://github.com/AstralQuanta/CustomJWT

标签：#护网
GitHub
GitHub - AstralQuanta/CustomJWT: Java-JWT Securely Encrypts JSON Data for Secure Transmission and Network Security
GitHub - AstralQuanta/CustomJWT: Java-JWT Securely Encrypts JSON Data for Secure Transmission and Network Security
Java-JWT Securely Encrypts JSON Data for Secure Transmission and Network Security - AstralQuanta/CustomJWT
护网
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Exploit for CVE-2023-46604
URL：https://github.com/mrpentst/CVE-2023-46604

标签：#CVE-2023
GitHub
GitHub - mrpentst/CVE-2023-46604: Exploit for CVE-2023-46604
GitHub - mrpentst/CVE-2023-46604: Exploit for CVE-2023-46604
Exploit for CVE-2023-46604. Contribute to mrpentst/CVE-2023-46604 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：钓鱼,Telegram:@abc362,渔具,水库,水产,鱼类,观赏鱼,淡水鱼 #鱼百科 #金鱼 #鲤科 Fishing, fishing gear, reservoirs, aquatic products, fish, ornamental fish, freshwater fish, fish encyclopedia, goldfish, carps
URL：https://github.com/mayeobey/feder

标签：#钓鱼
GitHub
GitHub - mayeobey/feder: 钓鱼,Telegram:@abc362,渔具,水库,水产,鱼类,观赏鱼,淡水鱼 #鱼百科 #金鱼 #鲤科 Fishing, fishing gear, reservoirs, aquatic products…
钓鱼,Telegram:@abc362,渔具,水库,水产,鱼类,观赏鱼,淡水鱼 #鱼百科 #金鱼 #鲤科 Fishing, fishing gear, reservoirs, aquatic products, fish, ornamental fish, freshwater fish, fish encyclopedia, goldfish, carps - GitHub - mayeo...
鱼百科 金鱼 鲤科 钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
URL：https://github.com/mbadanoiu/CVE-2023-49964

标签：#CVE-2023
GitHub
GitHub - mbadanoiu/CVE-2023-49964: CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
GitHub - mbadanoiu/CVE-2023-49964: CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco - mbadanoiu/CVE-2023-49964
CVE
Before
After
Back to Top