​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：渗透测试
描述：日常项目渗透测试用，目前很简单。
URL：https://github.com/youan-dev/JX-CSRF

标签：#渗透测试
GitHub
GitHub - youan-dev/JX-CSRF: 日常项目渗透测试用，目前很简单。
GitHub - youan-dev/JX-CSRF: 日常项目渗透测试用，目前很简单。
日常项目渗透测试用，目前很简单。. Contribute to youan-dev/JX-CSRF development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike HTTPS beaconing over Microsoft Graph API
URL：https://github.com/RedSiege/GraphStrike

标签：#Cobalt Strike
GitHub
GitHub - RedSiege/GraphStrike: Cobalt Strike HTTPS beaconing over Microsoft Graph API
GitHub - RedSiege/GraphStrike: Cobalt Strike HTTPS beaconing over Microsoft Graph API
Cobalt Strike HTTPS beaconing over Microsoft Graph API - RedSiege/GraphStrike
Cobalt
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：OfficeWeb365漏洞利用工具
URL：https://github.com/btwlon/OfficeWeb365

标签：#漏洞利用
GitHub
GitHub - btwlon/OfficeWeb365: OfficeWeb365漏洞利用工具
GitHub - btwlon/OfficeWeb365: OfficeWeb365漏洞利用工具
OfficeWeb365漏洞利用工具. Contribute to btwlon/OfficeWeb365 development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：RCE
描述：Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
URL：https://github.com/angelopioamirante/CVE-2023-24317

标签：#RCE
GitHub
GitHub - angelopioamirante/CVE-2023-24317: Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
GitHub - angelopioamirante/CVE-2023-24317: Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated) - angelopioamirante/CVE-2023-24317
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-20656
URL：https://github.com/xiaoqiao147/CVE-2024-33333

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-20656
URL：https://github.com/xiaoqiao147/CVE-2024-22222

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：反序列化
描述：WebGoat 反序列化解题
URL：https://github.com/111ddea/WebGoatDeserial

标签：#反序列化
GitHub
111ddea/WebGoatDeserial
111ddea/WebGoatDeserial
WebGoat 反序列化解题. Contribute to 111ddea/WebGoatDeserial development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：免杀
描述：通过远程加载AES + XOR异或加密shellcode的免杀加载器，无过多技术细节。
URL：https://github.com/Mangofang/BypassLoad

标签：#免杀
GitHub
GitHub - Mangofang/BypassLoad: shellcode免杀加载器，过主流杀软
shellcode免杀加载器，过主流杀软. Contribute to Mangofang/BypassLoad development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-20656
URL：https://github.com/xiaoqiao147/CVE-2024-20654

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：projectworlds' Online Admission System RCE vulnerability PoC
URL：https://github.com/keru6k/Online-Admission-System-RCE-PoC

标签：#RCE
GitHub
GitHub - pwnpwnpur1n/Online-Admission-System-RCE-PoC: projectworlds' Online Admission System RCE vulnerability PoC, Categorized…
GitHub - pwnpwnpur1n/Online-Admission-System-RCE-PoC: projectworlds' Online Admission System RCE vulnerability PoC, Categorized…
projectworlds' Online Admission System RCE vulnerability PoC, Categorized as CVE-2024-0783 - pwnpwnpur1n/Online-Admission-System-RCE-PoC
RCE
GitHub监控消息提醒！！！

更新了：代码审计
描述：代码审计记录
URL：https://github.com/jackliu-hao/-

标签：#代码审计
GitHub
GitHub - jackliu-hao/codeStudy: 代码审计记录
GitHub - jackliu-hao/codeStudy: 代码审计记录
代码审计记录. Contribute to jackliu-hao/codeStudy development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：RCE
描述：Um Script python para uma falha de Blind RCE
URL：https://github.com/Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE

标签：#RCE
GitHub
GitHub - Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE: Um Script python para uma falha de Blind RCE
GitHub - Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE: Um Script python para uma falha de Blind RCE
Um Script python para uma falha de Blind RCE. Contribute to Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Um Script python para uma falha de Blind RCE
URL：https://github.com/Rotramo/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
URL：https://github.com/Valentin-Metz/writeup_split

标签：#CVE-2024
GitHub
GitHub - Valentin-Metz/writeup_split: Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
GitHub - Valentin-Metz/writeup_split: Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 - Valentin-Metz/writeup_split
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀
URL：https://github.com/icewolf-sec/PerlinPuzzle-Webshell-PHP

标签：#免杀
GitHub
GitHub - misaka19008/PerlinPuzzle-Webshell-PHP: 使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀
GitHub - misaka19008/PerlinPuzzle-Webshell-PHP: 使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀
使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀. Contribute to misaka19008/PerlinPuzzle-Webshell-PHP development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：应急响应
描述：一款自动化分析网络安全应急响应工具
URL：https://github.com/FindAllTeam/FindAll

标签：#应急响应
GitHub
GitHub - FindAllTeam/FindAll: Automated analysis of network security emergency response tools.（自动化分析网络安全应急响应工具）
GitHub - FindAllTeam/FindAll: Automated analysis of network security emergency response tools.（自动化分析网络安全应急响应工具）
Automated analysis of network security emergency response tools.（自动化分析网络安全应急响应工具） - FindAllTeam/FindAll
应急响应
GitHub监控消息提醒！！！

更新了：RCE
描述：Dompdf RCE PoC Exploit - CVE-2022-28368
URL：https://github.com/rvizx/CVE-2022-28368

标签：#RCE
GitHub
GitHub - rvizx/CVE-2022-28368: Dompdf RCE PoC Exploit - CVE-2022-28368
GitHub - rvizx/CVE-2022-28368: Dompdf RCE PoC Exploit - CVE-2022-28368
Dompdf RCE PoC Exploit - CVE-2022-28368. Contribute to rvizx/CVE-2022-28368 development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Ivanti Connect Around attack chain mitigation validation tool. CVE-2023-46805 and CVE-2024-21887.
URL：https://github.com/seajaysec/Ivanti-Connect-Around-Scan

标签：#CVE-2024
GitHub
GitHub - seajaysec/Ivanti-Connect-Around-Scan: Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple…
GitHub - seajaysec/Ivanti-Connect-Around-Scan: Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple…
Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887. - seajaysec/Ivanti-Connect-Around-Scan
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike Profiles for EDR Evasion
URL：https://github.com/EvilGreys/Cobalt-Strike-Profiles-for-EDR-Evasion

标签：#Cobalt Strike
Cobalt
GitHub监控消息提醒！！！

更新了：webshell
描述：My personal php webshell
URL：https://github.com/20520545/simple_php_lfi

标签：#webshell
GitHub
GitHub - 20520545/simple_php_lfi: My personal php webshell
My personal php webshell. Contribute to 20520545/simple_php_lfi development by creating an account on GitHub.
webshell
Before
After
Back to Top