​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：RCE
描述：Data analysis of Axiell thesauri RCE (B&AC and KC)
URL：https://github.com/cultureelerfgoed/Axiell-thesauri

标签：#RCE
GitHub
GitHub - cultureelerfgoed/Axiell-thesauri: Data analysis of Axiell thesauri RCE (B&AC and KC)
GitHub - cultureelerfgoed/Axiell-thesauri: Data analysis of Axiell thesauri RCE (B&AC and KC)
Data analysis of Axiell thesauri RCE (B&AC and KC) - cultureelerfgoed/Axiell-thesauri
RCE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Modified versions of the Cobalt Strike Process Injection Kit
URL：https://github.com/REDMED-X/InjectKit

标签：#Cobalt Strike
GitHub
GitHub - REDMED-X/InjectKit: Modified versions of the Cobalt Strike Process Injection Kit
GitHub - REDMED-X/InjectKit: Modified versions of the Cobalt Strike Process Injection Kit
Modified versions of the Cobalt Strike Process Injection Kit - REDMED-X/InjectKit
Cobalt
GitHub监控消息提醒！！！

更新了：绕过
描述：将chatgpt前端进行逆向，实现绕过cloudflare 对官方api进行代理 实现前端接口转标准api(通过access_token实现标准api传入访问)
URL：https://github.com/oliverkirk-sudo/WarpGPT

标签：#绕过
GitHub
GitHub - oliverkirk-sudo/WarpGPT: 将chatgpt前端进行逆向，实现绕过cloudflare 对官方api进行代理 实现前端接口转标准api(通过access_token实现标准api传入访问)
GitHub - oliverkirk-sudo/WarpGPT: 将chatgpt前端进行逆向，实现绕过cloudflare 对官方api进行代理 实现前端接口转标准api(通过access_token实现标准api传入访问)
将chatgpt前端进行逆向，实现绕过cloudflare 对官方api进行代理 实现前端接口转标准api(通过access_token实现标准api传入访问) - oliverkirk-sudo/WarpGPT
绕过
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike Aggressor Script to make reconnaisance easly
URL：https://github.com/YoruYagami/Argos

标签：#Cobalt Strike
GitHub
GitHub - YoruYagami/Argos: Cobalt Strike Aggressor Script to make reconnaisance easly
Cobalt Strike Aggressor Script to make reconnaisance easly - GitHub - YoruYagami/Argos: Cobalt Strike Aggressor Script to make reconnaisance easly
Cobalt
GitHub监控消息提醒！！！

更新了：Red Team
描述：Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.
URL：https://github.com/spellshift/realm

标签：#Red Team
GitHub
GitHub - spellshift/realm: Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.
GitHub - spellshift/realm: Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.
Realm is a cross platform Red Team engagement platform with a focus on automation and reliability. - spellshift/realm
Red
GitHub监控消息提醒！！！

更新了：RCE
描述：A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center.
URL：https://github.com/Manh130902/CVE-2023-22527-POC

标签：#RCE
GitHub
GitHub - Manh130902/CVE-2023-22527-POC: A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered…
GitHub - Manh130902/CVE-2023-22527-POC: A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered…
A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center. - Manh130902/CVE-2023-22527-POC
RCE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：日常项目渗透测试用，目前很简单。
URL：https://github.com/youan-dev/JX-CSRF

标签：#渗透测试
GitHub
GitHub - youan-dev/JX-CSRF: 日常项目渗透测试用，目前很简单。
GitHub - youan-dev/JX-CSRF: 日常项目渗透测试用，目前很简单。
日常项目渗透测试用，目前很简单。. Contribute to youan-dev/JX-CSRF development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike HTTPS beaconing over Microsoft Graph API
URL：https://github.com/RedSiege/GraphStrike

标签：#Cobalt Strike
GitHub
GitHub - RedSiege/GraphStrike: Cobalt Strike HTTPS beaconing over Microsoft Graph API
GitHub - RedSiege/GraphStrike: Cobalt Strike HTTPS beaconing over Microsoft Graph API
Cobalt Strike HTTPS beaconing over Microsoft Graph API - RedSiege/GraphStrike
Cobalt
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：OfficeWeb365漏洞利用工具
URL：https://github.com/btwlon/OfficeWeb365

标签：#漏洞利用
GitHub
GitHub - btwlon/OfficeWeb365: OfficeWeb365漏洞利用工具
GitHub - btwlon/OfficeWeb365: OfficeWeb365漏洞利用工具
OfficeWeb365漏洞利用工具. Contribute to btwlon/OfficeWeb365 development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：RCE
描述：Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
URL：https://github.com/angelopioamirante/CVE-2023-24317

标签：#RCE
GitHub
GitHub - angelopioamirante/CVE-2023-24317: Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
GitHub - angelopioamirante/CVE-2023-24317: Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated) - angelopioamirante/CVE-2023-24317
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-20656
URL：https://github.com/xiaoqiao147/CVE-2024-33333

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-20656
URL：https://github.com/xiaoqiao147/CVE-2024-22222

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：反序列化
描述：WebGoat 反序列化解题
URL：https://github.com/111ddea/WebGoatDeserial

标签：#反序列化
GitHub
111ddea/WebGoatDeserial
111ddea/WebGoatDeserial
WebGoat 反序列化解题. Contribute to 111ddea/WebGoatDeserial development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：免杀
描述：通过远程加载AES + XOR异或加密shellcode的免杀加载器，无过多技术细节。
URL：https://github.com/Mangofang/BypassLoad

标签：#免杀
GitHub
GitHub - Mangofang/BypassLoad: shellcode免杀加载器，过主流杀软
shellcode免杀加载器，过主流杀软. Contribute to Mangofang/BypassLoad development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-20656
URL：https://github.com/xiaoqiao147/CVE-2024-20654

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：projectworlds' Online Admission System RCE vulnerability PoC
URL：https://github.com/keru6k/Online-Admission-System-RCE-PoC

标签：#RCE
GitHub
GitHub - pwnpwnpur1n/Online-Admission-System-RCE-PoC: projectworlds' Online Admission System RCE vulnerability PoC, Categorized…
GitHub - pwnpwnpur1n/Online-Admission-System-RCE-PoC: projectworlds' Online Admission System RCE vulnerability PoC, Categorized…
projectworlds' Online Admission System RCE vulnerability PoC, Categorized as CVE-2024-0783 - pwnpwnpur1n/Online-Admission-System-RCE-PoC
RCE
GitHub监控消息提醒！！！

更新了：代码审计
描述：代码审计记录
URL：https://github.com/jackliu-hao/-

标签：#代码审计
GitHub
GitHub - jackliu-hao/codeStudy: 代码审计记录
GitHub - jackliu-hao/codeStudy: 代码审计记录
代码审计记录. Contribute to jackliu-hao/codeStudy development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：RCE
描述：Um Script python para uma falha de Blind RCE
URL：https://github.com/Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE

标签：#RCE
GitHub
GitHub - Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE: Um Script python para uma falha de Blind RCE
GitHub - Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE: Um Script python para uma falha de Blind RCE
Um Script python para uma falha de Blind RCE. Contribute to Lucashbsobrinho/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Um Script python para uma falha de Blind RCE
URL：https://github.com/Rotramo/IPFire-2.19-x86_64---Core-Update-109-Blind-RCE

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
URL：https://github.com/Valentin-Metz/writeup_split

标签：#CVE-2024
GitHub
GitHub - Valentin-Metz/writeup_split: Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
GitHub - Valentin-Metz/writeup_split: Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 - Valentin-Metz/writeup_split
CVE
Before
After
Back to Top