​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Exploit/PoC code for CVE-2025-1913
URL：https://github.com/S0haib518-KSA/CVE-2025-1913-PoC

标签：#CVE-2025
GitHub
GitHub - S0haib518-KSA/CVE-2025-1913-PoC: A PoC demonstrating CVE-2025-1913, showing how the plugin’s unsafe unserialize handling…
GitHub - S0haib518-KSA/CVE-2025-1913-PoC: A PoC demonstrating CVE-2025-1913, showing how the plugin’s unsafe unserialize handling…
A PoC demonstrating CVE-2025-1913, showing how the plugin’s unsafe unserialize handling can lead to high-impact behavior in controlled environments. Contains a harmful payload for authorized testin...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security
URL：https://github.com/Golden-Secure/CVE-2025-55182

标签：#CVE-2025
GitHub
GitHub - Golden-Secure/CVE-2025-55182: Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security
GitHub - Golden-Secure/CVE-2025-55182: Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security
Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security - Golden-Secure/CVE-2025-55182
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：React Server Components 远程代码执行漏洞(CVE-2025-55182)
URL：https://github.com/GelukCrab/React-Server-Components-RCE

标签：#RCE
GitHub
GitHub - GelukCrab/React-Server-Components-RCE: React Server Components 远程代码执行漏洞(CVE-2025-55182)
GitHub - GelukCrab/React-Server-Components-RCE: React Server Components 远程代码执行漏洞(CVE-2025-55182)
React Server Components 远程代码执行漏洞(CVE-2025-55182). Contribute to GelukCrab/React-Server-Components-RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：浅谈React Server Components RCE 漏洞分析
URL：https://github.com/Airis101/CVE-2025-55182-analysis

标签：#CVE-2025
GitHub
GitHub - Airis101/CVE-2025-55182-analysis: 浅谈React Server Components RCE 漏洞分析
GitHub - Airis101/CVE-2025-55182-analysis: 浅谈React Server Components RCE 漏洞分析
浅谈React Server Components RCE 漏洞分析. Contribute to Airis101/CVE-2025-55182-analysis development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Docker lab for CVE-2025-55182 detection and exploitation
URL：https://github.com/l4rm4nd/CVE-2025-55182

标签：#CVE-2025
GitHub
GitHub - l4rm4nd/CVE-2025-55182: Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation
GitHub - l4rm4nd/CVE-2025-55182: Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation
Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation - l4rm4nd/CVE-2025-55182
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools, technical information, etc
URL：https://github.com/freeqaz/react2shell

标签：#CVE-2025
GitHub
GitHub - freeqaz/react2shell: An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools…
GitHub - freeqaz/react2shell: An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools…
An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools, technical information, etc - freeqaz/react2shell
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2021-3007 Vulnerable Test Environment - Laminas/Zend Framework Deserialization RCE
URL：https://github.com/KrE80r/cve-2021-3007-vulnerable

标签：#RCE
GitHub
GitHub - KrE80r/cve-2021-3007-vulnerable: CVE-2021-3007 Vulnerable Test Environment - Laminas/Zend Framework Deserialization RCE
GitHub - KrE80r/cve-2021-3007-vulnerable: CVE-2021-3007 Vulnerable Test Environment - Laminas/Zend Framework Deserialization RCE
CVE-2021-3007 Vulnerable Test Environment - Laminas/Zend Framework Deserialization RCE - KrE80r/cve-2021-3007-vulnerable
RCE
GitHub监控消息提醒！！！

更新了：burp
描述：sql-injection, burp suite, bypass validation, sql map
URL：https://github.com/PoeenCy/web-ctf-challenge

标签：#burp
GitHub
GitHub - PoeenCy/web-ctf-challenge: sql-injection, burp suite, bypass validation, sql map
sql-injection, burp suite, bypass validation, sql map - GitHub - PoeenCy/web-ctf-challenge: sql-injection, burp suite, bypass validation, sql map
burp
GitHub监控消息提醒！！！

更新了：攻防
描述：攻防中用到的BOF
URL：https://github.com/24-2021/BOF24

标签：#攻防
GitHub
GitHub - 24-2021/BOF24: 攻防中用到的BOF
攻防中用到的BOF. Contribute to 24-2021/BOF24 development by creating an account on GitHub.
攻防
GitHub监控消息提醒！！！

更新了：Red Team
描述：🔒 Automate cybersecurity tasks with n8n workflows for Red Team, Blue Team, and Application Security, enhancing efficiency and response times.
URL：https://github.com/aingram702/Recon-Superpowers

标签：#Red Team
GitHub
GitHub - aingram702/Recon-Superpowers: The swiss-army knife of recon tools! Recon-Superpowers is just like the name suggests, it…
The swiss-army knife of recon tools! Recon-Superpowers is just like the name suggests, it is a superpower for any security analyst or red-teamer to perform quick recon in single interface! If you p...
Red
GitHub监控消息提醒！！！

更新了：免杀
描述：SharkBlind是一款专为安全测试设计的免杀型计划任务植入器，它能通过独特的混淆和隐蔽调用技术，将指定载荷可靠且隐蔽地添加进Windows计划任务，从而有效规避常见杀毒软件和终端防护的检测，实现持久的后台驻留。
URL：https://github.com/6yx1n/sharkBlind

标签：#免杀
GitHub
GitHub - 6yx1n/sharkBlind: SharkBlind是一款专为安全测试设计的免杀型计划任务植入器，它能通过独特的混淆和隐蔽调用技术，将指定载荷可靠且隐蔽地添加进Windows计划任务，从而有效规避常见杀毒软件和终端防护的检测，实现持久的后台驻留。
SharkBlind是一款专为安全测试设计的免杀型计划任务植入器，它能通过独特的混淆和隐蔽调用技术，将指定载荷可靠且隐蔽地添加进Windows计划任务，从而有效规避常见杀毒软件和终端防护的检测，实现持久的后台驻留。 - 6yx1n/sharkBlind
免杀
GitHub监控消息提醒！！！

更新了：bypass AntiVirus
描述：A Cobalt Strike shellcode loader that bypasses mainstream domestic antivirus software.
URL：https://github.com/Elitamz/Cobalt-Strike-csload-plugin

标签：#bypass AntiVirus
bypass
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：lab_demo CVE-2025-55182
URL：https://github.com/Sotatek-KhaiNguyen3/CVE-2025-55182

标签：#CVE-2025
GitHub
GitHub - Sotatek-KhaiNguyen3/CVE-2025-55182
GitHub - Sotatek-KhaiNguyen3/CVE-2025-55182
Contribute to Sotatek-KhaiNguyen3/CVE-2025-55182 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：基于 CVE-2025-55182 burpsuite 被动扫描插件
URL：https://github.com/Pizz33/CVE-2025-55182-burpscanner

标签：#CVE-2025
GitHub
GitHub - Pizz33/CVE-2025-55182-burpscanner: 基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件
GitHub - Pizz33/CVE-2025-55182-burpscanner: 基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件
基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件. Contribute to Pizz33/CVE-2025-55182-burpscanner development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-55182
URL：https://github.com/Ashwesker/Blackash-CVE-2025-55182

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：AI / LLM Red Team Field Manual & Consultant’s Handbook
URL：https://github.com/7zzmqx4g9b-eng/LLM-Red-Teaming-Adversarial-Evaluation-Suite

标签：#Red Team
GitHub
GitHub - 7zzmqx4g9b-eng/LLM-Red-Teaming-Adversarial-Evaluation-Suite: This repository contains a comprehensive corpus of Large…
GitHub - 7zzmqx4g9b-eng/LLM-Red-Teaming-Adversarial-Evaluation-Suite: This repository contains a comprehensive corpus of Large…
This repository contains a comprehensive corpus of Large Language Model (LLM) attack vectors and a Python test harness to evaluate model robustness. It covers techniques ranging from basic prompt i...
Red
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications
URL：https://github.com/Saturate/CVE-2025-55182-Scanner

标签：#CVE-2025
GitHub
GitHub - Saturate/CVE-2025-55182-Scanner: A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications
GitHub - Saturate/CVE-2025-55182-Scanner: A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications
A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications - Saturate/CVE-2025-55182-Scanner
CVE
GitHub监控消息提醒！！！

更新了：红队
描述：redc 红队基础设施多云自动化部署工具
URL：https://github.com/wgpsec/redc

标签：#红队
GitHub
GitHub - wgpsec/redc: Next-generation IaC tools | 下一代基础设施管理工具
GitHub - wgpsec/redc: Next-generation IaC tools | 下一代基础设施管理工具
Next-generation IaC tools | 下一代基础设施管理工具. Contribute to wgpsec/redc development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：绕过
描述：LSPosed模块 - 关闭OKHttp3 SSL证书校验，用于绕过证书固定
URL：https://github.com/banchengkemeng/LSPosed_OKHttp3_SSLBypass

标签：#绕过
GitHub
GitHub - banchengkemeng/LSPosed_OKHttp3_SSLBypass: LSPosed模块 - 关闭OKHttp3 SSL证书校验，用于绕过证书固定
LSPosed模块 - 关闭OKHttp3 SSL证书校验，用于绕过证书固定. Contribute to banchengkemeng/LSPosed_OKHttp3_SSLBypass development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool
URL：https://github.com/Spritualkb/CVE-2025-55182-exp

标签：#CVE-2025
GitHub
GitHub - Spritualkb/CVE-2025-55182-exp: CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool
GitHub - Spritualkb/CVE-2025-55182-exp: CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool
CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool - Spritualkb/CVE-2025-55182-exp
CVE
Before
After
Back to Top