GitHub 红队武器库🚨 - 📦 GitHub 全球红队渗透资源中转站。旨在收录那些“好用却难找”的安全项目。🔗 定时推送：GitHub Trending (Security)🛠 必备清单：后渗透、远控、免杀、提权工具集📅 更新频率：每日精选，绝不灌水。⚠️ 本频道仅供安全研究与授权测试使用。

📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。

01:20 · Dec 18, 2023 · Mon

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques
URL：https://github.com/Chocapikk/CVE-2023-50917

标签：#CVE-2023

GitHub - Chocapikk/CVE-2023-50917: MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques

GitHub - Chocapikk/CVE-2023-50917: MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques

MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques - Chocapikk/CVE-2023-50917

23:13 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：RCE
描述：Pre-auth RCE in Apache Ofbiz!!
URL：https://github.com/0xrobiul/CVE-2023-49070

标签：#RCE

GitHub - 0xrobiul/CVE-2023-49070: Exploit Of Pre-auth RCE in Apache Ofbiz!!

GitHub - 0xrobiul/CVE-2023-49070: Exploit Of Pre-auth RCE in Apache Ofbiz!!

Exploit Of Pre-auth RCE in Apache Ofbiz!! Contribute to 0xrobiul/CVE-2023-49070 development by creating an account on GitHub.

15:52 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Proof of Concept for Path Traversal in Apache Struts (\"CVE-2023-50164\")
URL：https://github.com/dwisiswant0/cve-2023-50164-poc

标签：#CVE-2023

GitHub - dwisiswant0/cve-2023-50164-poc: Proof of Concept for Path Traversal in Apache Struts (

GitHub - dwisiswant0/cve-2023-50164-poc: Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164") - dwisiswant0/cve-2023-50164-poc

14:58 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：红队
描述：基于 FOFA 的 java 客户端/红队工具：FOFA client based on java swing, fully implement all fofa api interfaces, you can select the display column, export table.
URL：https://github.com/10cks/fofaEX

标签：#红队

GitHub - 10cks/fofaEX: FOFA EX 是一款基于fofa api（也可导入鹰图、夸克文件）实现的红队综合利用工具，可基于模板把工具作为插件进行集成，自动化进行资产探测，目前提供的插件功能如下：探活、 nuclei 模板扫描、IP反查域名、域名反查…

GitHub - 10cks/fofaEX: FOFA EX 是一款基于fofa api（也可导入鹰图、夸克文件）实现的红队综合利用工具，可基于模板把工具作为插件进行集成，自动化进行资产探测，目前提供的插件功能如下：探活、 nuclei 模板扫描、IP反查域名、域名反查…

FOFA EX 是一款基于fofa api（也可导入鹰图、夸克文件）实现的红队综合利用工具，可基于模板把工具作为插件进行集成，自动化进行资产探测，目前提供的插件功能如下：探活、 nuclei 模板扫描、IP反查域名、域名反查 ICP 备案、dismap 指纹扫描 - 10cks/fofaEX

11:58 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：攻防
描述：安全手册，企业安全实践、攻防与安全研究知识库
URL：https://github.com/hongmaple/octopus

标签：#攻防

GitHub - hongmaple/octopus: octopus高校教学综合平台，主要用于对教师，学生，管理的信息管理，课程管理，专业信息管理，班级管理，可以添加题库，可以上传下载教学资料，可以设置考试试卷，可以进行在线考试和自动评分。本系统基于…

GitHub - hongmaple/octopus: octopus高校教学综合平台，主要用于对教师，学生，管理的信息管理，课程管理，专业信息管理，班级管理，可以添加题库，可以上传下载教学资料，可以设置考试试卷，可以进行在线考试和自动评分。本系统基于…

octopus高校教学综合平台，主要用于对教师，学生，管理的信息管理，课程管理，专业信息管理，班级管理，可以添加题库，可以上传下载教学资料，可以设置考试试卷，可以进行在线考试和自动评分。本系统基于若依框架，感谢若依的开源，RuoYi 是一个 Java EE 企业级快速开发平台，基于经典技术组合（Spring Boot、Apache Shiro、MyBatis、Thymeleaf、Bootst...

11:07 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：RCE
描述：A hard SQLi-RCE web challenge that I wrote for Securinets ISI Mini CTF
URL：https://github.com/wassila11/Baby_CQLi

标签：#RCE

GitHub - wassila11/Baby_CQLi: A hard SQLi-RCE web challenge that I wrote for Securinets ISI Mini CTF

GitHub - wassila11/Baby_CQLi: A hard SQLi-RCE web challenge that I wrote for Securinets ISI Mini CTF

A hard SQLi-RCE web challenge that I wrote for Securinets ISI Mini CTF - wassila11/Baby_CQLi

07:31 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：免杀
描述：LoaderGo-快速生成免杀木马GUI版本，bypass主流杀软
URL：https://github.com/di0xide-U/LoaderGo

标签：#免杀

GitHub - di0xide-U/LoaderGo: LoaderGo-快速生成免杀木马GUI版本，bypass主流杀软

LoaderGo-快速生成免杀木马GUI版本，bypass主流杀软. Contribute to di0xide-U/LoaderGo development by creating an account on GitHub.

04:00 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：Red Team
描述：RT-MASK: Red Team Mask for IPv4 to IPv6 Obfuscation
URL：https://github.com/msimon96/RT-MASK

标签：#Red Team

GitHub - msimon96/RT-MASK: RT-MASK: Red Team Mask for IPv4 to IPv6 Obfuscation

GitHub - msimon96/RT-MASK: RT-MASK: Red Team Mask for IPv4 to IPv6 Obfuscation

RT-MASK: Red Team Mask for IPv4 to IPv6 Obfuscation - msimon96/RT-MASK

01:40 · Dec 17, 2023 · Sun

GitHub监控消息提醒！！！

更新了：Red Team
描述：A Slack bot phishing framework for Red Teaming exercises
URL：https://github.com/Drew-Sec/EvilSlackbot

标签：#Red Team

GitHub - Drew-Sec/EvilSlackbot: A Slack bot phishing framework for Red Teaming exercises

GitHub - Drew-Sec/EvilSlackbot: A Slack bot phishing framework for Red Teaming exercises

A Slack bot phishing framework for Red Teaming exercises - Drew-Sec/EvilSlackbot

22:22 · Dec 16, 2023 · Sat

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Simulates CVE-2023-4966 Citrix Bleed overread bug
URL：https://github.com/morganwdavis/overread

标签：#CVE-2023

GitHub - morganwdavis/overread: Simulates CVE-2023-4966 Citrix Bleed overread bug

GitHub - morganwdavis/overread: Simulates CVE-2023-4966 Citrix Bleed overread bug

Simulates CVE-2023-4966 Citrix Bleed overread bug. Contribute to morganwdavis/overread development by creating an account on GitHub.

22:08 · Dec 16, 2023 · Sat

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Simulates CVE-2023-4966 Citrix Bleed overread bug
URL：https://github.com/geraldoalcantara/CVE-2023-50070

标签：#CVE-2023

GitHub - geraldoalcantara/CVE-2023-50070: Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket…

Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via department...

12:06 · Dec 16, 2023 · Sat

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Research on CVE-2021-44228 and CVE-2023-46604
URL：https://github.com/dcm2406/CVELab

标签：#CVE-2023

GitHub - dcm2406/CVE-Lab: Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604 - GitHub - dcm2406/CVE-Lab: Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

09:49 · Dec 16, 2023 · Sat

GitHub监控消息提醒！！！

更新了：Red Team
描述：Tool to run Atomic Red Team tests on an isolated macOS VM.
URL：https://github.com/jonod8698/macos-sandbox-vm

标签：#Red Team

GitHub - jonod8698/macos-sandbox-vm: Tool to run Atomic Red Team tests on an isolated macOS VM.

GitHub - jonod8698/macos-sandbox-vm: Tool to run Atomic Red Team tests on an isolated macOS VM.

Tool to run Atomic Red Team tests on an isolated macOS VM. - jonod8698/macos-sandbox-vm

07:38 · Dec 16, 2023 · Sat

GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
URL：https://github.com/RobotOperator/TimeStomp_bof

标签：#Cobalt Strike

GitHub - RobotOperator/TimeStomp_bof: This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks…

GitHub - RobotOperator/TimeStomp_bof: This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks…

This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools. Timestomps a target file to have the time attributes match ...

01:26 · Dec 16, 2023 · Sat

GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
URL：https://github.com/Ap3x/COFF-Loader

标签：#Cobalt Strike

GitHub - Ap3x/COFF-Loader: A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader

GitHub - Ap3x/COFF-Loader: A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader

A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader - Ap3x/COFF-Loader

21:30 · Dec 15, 2023 · Fri

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：A scanning utility and PoC for CVE-2023-50164
URL：https://github.com/bcdannyboy/CVE-2023-50164

标签：#CVE-2023

GitHub - bcdannyboy/CVE-2023-50164: A scanning utility and PoC for CVE-2023-50164

GitHub - bcdannyboy/CVE-2023-50164: A scanning utility and PoC for CVE-2023-50164

A scanning utility and PoC for CVE-2023-50164. Contribute to bcdannyboy/CVE-2023-50164 development by creating an account on GitHub.

20:59 · Dec 15, 2023 · Fri

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-50643
URL：https://github.com/V3x0r/CVE-2023-50643

标签：#CVE-2023

GitHub - giovannipajeu1/CVE-2023-50643: CVE-2023-50643

GitHub - giovannipajeu1/CVE-2023-50643: CVE-2023-50643

CVE-2023-50643. Contribute to giovannipajeu1/CVE-2023-50643 development by creating an account on GitHub.

18:03 · Dec 15, 2023 · Fri

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-25690 - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 to 2.4.55 leads to HTTP Request Smuggling.
URL：https://github.com/sergiovks/CVE-2023-25690-exploit

标签：#CVE-2023

17:41 · Dec 15, 2023 · Fri

GitHub监控消息提醒！！！

更新了：CVE-2023
描述：A PoC exploit for CVE-2023-23752 - Openfire Authentication Bypass
URL：https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT

标签：#CVE-2023

GitHub - K3ysTr0K3R/CVE-2023-32315-EXPLOIT: A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass

GitHub - K3ysTr0K3R/CVE-2023-32315-EXPLOIT: A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass

A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass - K3ysTr0K3R/CVE-2023-32315-EXPLOIT

15:49 · Dec 15, 2023 · Fri

GitHub监控消息提醒！！！

更新了：Red Team
描述：Public Go Red Team site and blog
URL：https://github.com/GoRedTeam/goredteam.net

标签：#Red Team

GitHub - GoRedTeam/goredteam.net: Public Go Red Team site and blog

GitHub - GoRedTeam/goredteam.net: Public Go Red Team site and blog

Public Go Red Team site and blog. Contribute to GoRedTeam/goredteam.net development by creating an account on GitHub.

Powered by BroadcastChannel & Sepia