​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：一款Jenkins的综合漏洞利用工具
URL：https://github.com/TheBeastofwar/JenkinsExploit-GUI

标签：#漏洞利用
GitHub
GitHub - TheBeastofwar/JenkinsExploit-GUI: 一款Jenkins的综合漏洞利用工具
一款Jenkins的综合漏洞利用工具. Contribute to TheBeastofwar/JenkinsExploit-GUI development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：内网渗透
描述：一款linux 内网渗透辅助工具
URL：https://github.com/TheBeastofwar/linuxhacker

标签：#内网渗透
GitHub
GitHub - TheBeastofwar/linuxhacker: 一款linux 内网渗透辅助工具
GitHub - TheBeastofwar/linuxhacker: 一款linux 内网渗透辅助工具
一款linux 内网渗透辅助工具. Contribute to TheBeastofwar/linuxhacker development by creating an account on GitHub.
内网渗透
GitHub监控消息提醒！！！

更新了：RCE
描述：Out Of Band Server for blind RCE vulnerability
URL：https://github.com/NinjaGPT/oob_server

标签：#RCE
GitHub
GitHub - NinjaGPT/oob_server: Out Of Band Server for blind RCE vulnerability
GitHub - NinjaGPT/oob_server: Out Of Band Server for blind RCE vulnerability
Out Of Band Server for blind RCE vulnerability. Contribute to NinjaGPT/oob_server development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic Shell Uploader Used phpunit() Remote Code Executions (RCE)
URL：https://github.com/imhunterand/phpunitRCE

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：代码审计
描述：shiro_boot代码审计
URL：https://github.com/jackliu-hao/shiro_boot----

标签：#代码审计
GitHub
GitHub - jackliu-hao/shiro_boot----: shiro_boot代码审计
GitHub - jackliu-hao/shiro_boot----: shiro_boot代码审计
shiro_boot代码审计. Contribute to jackliu-hao/shiro_boot---- development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：权限提升
描述：Elevate process privileges to the System or Trustedinstaller,将进程权限提升到 System 或 Trustedinstaller
URL：https://github.com/coldpon/elevationTool

标签：#权限提升
GitHub
GitHub - coldpon/elevationTool: Elevate process privileges to the System or Trustedinstaller,将进程权限提升到 System 或 Trustedinstaller
GitHub - coldpon/elevationTool: Elevate process privileges to the System or Trustedinstaller,将进程权限提升到 System 或 Trustedinstaller
Elevate process privileges to the System or Trustedinstaller,将进程权限提升到 System 或 Trustedinstaller - coldpon/elevationTool
权限提升
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：Struts2全版本漏洞检测工具 by:ABC_123
URL：https://github.com/abc123info/Struts2VulsScanTools

标签：#漏洞检测
GitHub
GitHub - abc123info/Struts2VulsScanTools: 1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2…
GitHub - abc123info/Struts2VulsScanTools: 1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2…
1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2-037、DevMode、S2-045/046、S2-052、S2-048、S2-053、S2-057、S2-061、S2相关log4j2十余种漏洞。 2、“批量验证”，（为防止批量geshell，此功能已经删除，并不再...
漏洞检测
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Arbitrary file read vulnerability through the CLI can lead to RCE
URL：https://github.com/viszsec/CVE-2024-23897

标签：#CVE-2024
GitHub
GitHub - viszsec/CVE-2024-23897: Jenkins POC of Arbitrary file read vulnerability through the CLI can lead to RCE
GitHub - viszsec/CVE-2024-23897: Jenkins POC of Arbitrary file read vulnerability through the CLI can lead to RCE
Jenkins POC of Arbitrary file read vulnerability through the CLI can lead to RCE - viszsec/CVE-2024-23897
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：WEB API MARCELINUS
URL：https://github.com/marcelinusss/m4rcell

标签：#RCE
GitHub
GitHub - marcelinusss/m4rcell: WEB API MARCELINUS
GitHub - marcelinusss/m4rcell: WEB API MARCELINUS
WEB API MARCELINUS. Contribute to marcelinusss/m4rcell development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Work from 2018 on Remote Code Execution in Pokemon Crystal. The RCE itself works, but the project built around it was never completed.
URL：https://github.com/MrCheeze/pokecrystal-ace

标签：#RCE
GitHub
GitHub - MrCheeze/pokecrystal-ace: Work from 2018 on Remote Code Execution in Pokemon Crystal. The RCE itself works, but the project…
Work from 2018 on Remote Code Execution in Pokemon Crystal. The RCE itself works, but the project built around it was never completed. - GitHub - MrCheeze/pokecrystal-ace: Work from 2018 on Remote ...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-23897
URL：https://github.com/raheel0x01/CVE-2024-23897

标签：#CVE-2024
GitHub
GitHub - r0xdeadbeef/CVE-2024-23897: Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command…
GitHub - r0xdeadbeef/CVE-2024-23897: Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command…
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with th...
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：该工具是一个集成了非常多渗透测试工具，类似软件商城的工具可以进行工具下载，工具的更新，工具编写了自动化的安装脚本，不用担心工具跑不起来。
URL：https://github.com/CuriousLearnerDev/Online_tools

标签：#渗透测试
GitHub
GitHub - CuriousLearnerDev/Online_tools: 该工具专为运维和安全检查和学习研究设计，类似于软件商城，可以实现工具下载、更新，并提供自动化安装脚本。内置了HexStrike-Ai可以通过AI调用里面工具实现自动化扫描…
GitHub - CuriousLearnerDev/Online_tools: 该工具专为运维和安全检查和学习研究设计，类似于软件商城，可以实现工具下载、更新，并提供自动化安装脚本。内置了HexStrike-Ai可以通过AI调用里面工具实现自动化扫描…
该工具专为运维和安全检查和学习研究设计，类似于软件商城，可以实现工具下载、更新，并提供自动化安装脚本。内置了HexStrike-Ai可以通过AI调用里面工具实现自动化扫描。不用担心工具无法正常运行配置，提升效率。 - CuriousLearnerDev/Online_tools
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：This repository presents a proof-of-concept of CVE-2024-23897
URL：https://github.com/Vozec/CVE-2024-23897

标签：#CVE-2024
GitHub
GitHub - Vozec/CVE-2024-23897: This repository presents a proof-of-concept of CVE-2024-23897
GitHub - Vozec/CVE-2024-23897: This repository presents a proof-of-concept of CVE-2024-23897
This repository presents a proof-of-concept of CVE-2024-23897 - Vozec/CVE-2024-23897
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-23897 - Jenkins 任意文件读取 利用工具
URL：https://github.com/wjlin0/CVE-2024-23897

标签：#CVE-2024
GitHub
GitHub - wjlin0/CVE-2024-23897: CVE-2024-23897 - Jenkins 任意文件读取 利用工具
GitHub - wjlin0/CVE-2024-23897: CVE-2024-23897 - Jenkins 任意文件读取 利用工具
CVE-2024-23897 - Jenkins 任意文件读取 利用工具. Contribute to wjlin0/CVE-2024-23897 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-23897 - Jenkins 任意文件读取 利用工具
URL：https://github.com/wjlin0/fictional-engine

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated)
URL：https://github.com/Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution

标签：#CVE-2024
GitHub
GitHub - Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution: CVE-2024-22515 arbitrary file upload and CVE-2024-22514…
GitHub - Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution: CVE-2024-22515 arbitrary file upload and CVE-2024-22514…
CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated) - Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：on this git you can find all information on the CVE-2024-23897
URL：https://github.com/iota4/PoC-jenkins-rce_CVE-2024-23897

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：on this git you can find all information on the CVE-2024-23897.
URL：https://github.com/iota4/PoC-jenkins-rce_CVE-2024-23897.

标签：#RCE
GitHub
GitHub - 10T4/PoC-Fix-jenkins-rce_CVE-2024-23897: on this git you can find all information on the CVE-2024-23897
GitHub - 10T4/PoC-Fix-jenkins-rce_CVE-2024-23897: on this git you can find all information on the CVE-2024-23897
on this git you can find all information on the CVE-2024-23897 - 10T4/PoC-Fix-jenkins-rce_CVE-2024-23897
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-23897 jenkins-cli
URL：https://github.com/CKevens/CVE-2024-23897

标签：#CVE-2024
GitHub
GitHub - CKevens/CVE-2024-23897: CVE-2024-23897 jenkins-cli
GitHub - CKevens/CVE-2024-23897: CVE-2024-23897 jenkins-cli
CVE-2024-23897 jenkins-cli. Contribute to CKevens/CVE-2024-23897 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Repo for SSRF & Path traversal & RCE exploit dreamhack wargame.
URL：https://github.com/Grantzile/exploit

标签：#RCE
GitHub
GitHub - Grantzile/exploit: Repo for SSRF & Path traversal & RCE exploit dreamhack wargame.
GitHub - Grantzile/exploit: Repo for SSRF & Path traversal & RCE exploit dreamhack wargame.
Repo for SSRF & Path traversal & RCE exploit dreamhack wargame. - Grantzile/exploit
RCE
Before
After
Back to Top