​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：渗透测试
描述：乾坤圈 (QianKunQuan) 是一款功能强大的网络安全扫描工具，专为渗透测试人员、安全研究人员和系统管理员设计。它结合了高效端口扫描、服务识别、版本检测和CVE漏洞关联等核心功能，帮助您快速评估目标系统的安全状况。
URL：https://github.com/ctkqiang/QianKunQuan

标签：#渗透测试
GitHub
GitHub - ctkqiang/QianKunQuan: 乾坤圈 (QianKunQuan) 是一款功能强大的网络安全扫描工具，专为渗透测试人员、安全研究人员和系统管理员设计。它结合了高效端口扫描、服务识别、版本检测和CVE漏洞关联等核心功能，帮助您快速评估目标系统的安全状况。
乾坤圈 (QianKunQuan) 是一款功能强大的网络安全扫描工具，专为渗透测试人员、安全研究人员和系统管理员设计。它结合了高效端口扫描、服务识别、版本检测和CVE漏洞关联等核心功能，帮助您快速评估目标系统的安全状况。 - ctkqiang/QianKunQuan
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：CVE-2026-22812 Full-featured exploitation toolkit for CVE-2026-22812 - OpenCode Unauthenticated RCE
URL：https://github.com/mad12wader/CVE-2026-22812

标签：#CVE-2026
GitHub
GitHub - mad12wader/CVE-2026-22812: CVE-2026-22812 - OpenCode Unauthenticated RCE-Nuclei template for scan
GitHub - mad12wader/CVE-2026-22812: CVE-2026-22812 - OpenCode Unauthenticated RCE-Nuclei template for scan
CVE-2026-22812 - OpenCode Unauthenticated RCE-Nuclei template for scan - mad12wader/CVE-2026-22812
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Command-line post-exploitation toolkit for Microsoft SQL Server — enabling RCE, privilege escalation, persistence, and defense evasion via T-SQL.
URL：https://github.com/sastraadiwiguna-purpleeliteteaming/Purple-Elite-Teaming-RCE-Unrestricted-DeepDive-Holistic-Framework

标签：#RCE
GitHub
GitHub - sastraadiwiguna-purpleeliteteaming/Purple-Elite-Teaming-RCE-Unrestricted-DeepDive-Holistic-Framework: [UNRESTRICTED] 100%…
GitHub - sastraadiwiguna-purpleeliteteaming/Purple-Elite-Teaming-RCE-Unrestricted-DeepDive-Holistic-Framework: [UNRESTRICTED] 100%…
[UNRESTRICTED] 100% Deterministic Technical Analysis of Remote Code Execution (RCE). Root Cause Breakdown, Gadget Chains, Memory-Level Evasion (Hell's Gate), and Absolute Mitigation Bluepri...
RCE
GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：污点追踪者，专项挖掘反序列化漏洞
URL：https://github.com/rockmelodies/TaintTracker

标签：#漏洞挖掘
GitHub
GitHub - rockmelodies/TaintTracker: 污点追踪者，专项挖掘反序列化漏洞
GitHub - rockmelodies/TaintTracker: 污点追踪者，专项挖掘反序列化漏洞
污点追踪者，专项挖掘反序列化漏洞. Contribute to rockmelodies/TaintTracker development by creating an account on GitHub.
漏洞挖掘
GitHub监控消息提醒！！！

更新了：信息收集
描述：信息收集
URL：https://github.com/waterhuangfu-art/TrendRadar

标签：#信息收集
GitHub
GitHub - waterhuangfu-art/TrendRadar: 信息收集
GitHub - waterhuangfu-art/TrendRadar: 信息收集
信息收集. Contribute to waterhuangfu-art/TrendRadar development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：CVE-2026-0227 Advanced Scanner
URL：https://github.com/Iniivan13/CVE-2026-1107

标签：#CVE-2026
GitHub
GitHub - Iniivan13/CVE-2026-1107: A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo…
GitHub - Iniivan13/CVE-2026-1107: A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo…
A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the ar...
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：交互式渗透测试系统
URL：https://github.com/xxiu1/Co-sploit

标签：#渗透测试
GitHub
GitHub - xxiu1/Co-sploit: 交互式渗透测试系统
GitHub - xxiu1/Co-sploit: 交互式渗透测试系统
交互式渗透测试系统. Contribute to xxiu1/Co-sploit development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：bypass AntiVirus
描述：A Cobalt Strike shellcode loader that bypasses mainstream domestic antivirus software.
URL：https://github.com/NYjacks/PolyCrypt-Crypter-Polymorphic-Runtime-Crypter-Fud-Defender

标签：#bypass AntiVirus
bypass
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：CVE-2026-0227 Advanced Scanner
URL：https://github.com/CkAbhijit/CVE-2026-0227-Advanced-Scanner

标签：#CVE-2026
GitHub
GitHub - CkAbhijit/CVE-2026-0227-Advanced-Scanner: CVE-2026-0227 Advanced Scanner
GitHub - CkAbhijit/CVE-2026-0227-Advanced-Scanner: CVE-2026-0227 Advanced Scanner
CVE-2026-0227 Advanced Scanner. Contribute to CkAbhijit/CVE-2026-0227-Advanced-Scanner development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：RCE engine for VBase code editor
URL：https://github.com/SillyCatto/vbase-rce

标签：#RCE
GitHub
GitHub - SillyCatto/vbase-rce: RCE engine for VBase code editor
RCE engine for VBase code editor. Contribute to SillyCatto/vbase-rce development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**
URL：https://github.com/TheTorjanCaptain/CVE-2026-23550-PoC

标签：#CVE-2026
GitHub
GitHub - TheTorjanCaptain/CVE-2026-23550-PoC: CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**
GitHub - TheTorjanCaptain/CVE-2026-23550-PoC: CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access**
CVE-2026-23550 - Modular DS WordPress Plugin **Unauthenticated Admin Access** - TheTorjanCaptain/CVE-2026-23550-PoC
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Command-line post-exploitation toolkit for Microsoft SQL Server — enabling RCE, privilege escalation, persistence, and defense evasion via T-SQL.
URL：https://github.com/BGx-11/VectorFuzz

标签：#RCE
GitHub
GitHub - BGx-11/VectorFuzz: VectorFuzz is a modern, GUI-based web vulnerability scanner and fuzzer built with Python. It features…
GitHub - BGx-11/VectorFuzz: VectorFuzz is a modern, GUI-based web vulnerability scanner and fuzzer built with Python. It features…
VectorFuzz is a modern, GUI-based web vulnerability scanner and fuzzer built with Python. It features multi-vector detection (SQLi, XSS, LFI, RCE), WAF evasion, multi-threaded crawling, and automat...
RCE
GitHub监控消息提醒！！！

更新了：护网
描述：CdnScan - 红队渗透专用工具：批量高速识别网站背后CDN类型，智能探测并突破真实源站IP。支持Cloudflare、Akamai、阿里云、腾讯云、Fastly等多种防护绕过，适用于红蓝对抗、资产侦察与攻防演练。
URL：https://github.com/Sirius0079/CdnScan

标签：#护网
GitHub
GitHub - Sirius0079/CdnScan: CdnScan - 红队渗透专用工具：批量高速识别网站背后CDN类型，智能探测并突破真实源站IP。支持Cloudflare、Akamai、阿里云、腾讯云、Fastly等多种防护绕过，适用于红蓝对抗、资产侦察与攻防演练。
GitHub - Sirius0079/CdnScan: CdnScan - 红队渗透专用工具：批量高速识别网站背后CDN类型，智能探测并突破真实源站IP。支持Cloudflare、Akamai、阿里云、腾讯云、Fastly等多种防护绕过，适用于红蓝对抗、资产侦察与攻防演练。
CdnScan - 红队渗透专用工具：批量高速识别网站背后CDN类型，智能探测并突破真实源站IP。支持Cloudflare、Akamai、阿里云、腾讯云、Fastly等多种防护绕过，适用于红蓝对抗、资产侦察与攻防演练。 - Sirius0079/CdnScan
护网
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：CVE-2026-22812
URL：https://github.com/Ashwesker/Ashwesker-CVE-2026-22812

标签：#CVE-2026
CVE
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：一些漏洞复现和利用方法分享
URL：https://github.com/LuZiteng01/-GraphCodeBERT-C-

标签：#漏洞利用
GitHub
LuZiteng01/-GraphCodeBERT-C-
LuZiteng01/-GraphCodeBERT-C-
软件漏洞检测是软件安全领域的一个严峻挑战。漏洞会导致系统不稳定，敏感信息泄露等问题。当前软件漏洞检测的研究主要是改进自动化技术，基于预训练模型GraphCodeBERT，利用代码的语法结构和数据流关系来增强模型的代码表示能力。本课题主要任务是在GraphCodeBERT的基础上，通过其提取的核心特征，进一步实现C语言源代码漏洞检测，并实现其可视化。具体内容如下： 1.数据准备和特征提取： 从...
漏洞利用
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).
URL：https://github.com/Jvr2022/CVE-2026-23745

标签：#CVE-2026
GitHub
GitHub - Jvr2022/CVE-2026-23745: Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions…
GitHub - Jvr2022/CVE-2026-23745: Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions…
Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3). - Jvr2022/CVE-2026-23745
CVE
GitHub监控消息提醒！！！

更新了：CVE-2026
描述：SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit
URL：https://github.com/sastraadiwiguna-purpleeliteteaming/SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

标签：#CVE-2026
GitHub
GitHub - sastraadiwiguna-purpleeliteteaming/SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit: SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic…
GitHub - sastraadiwiguna-purpleeliteteaming/SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit: SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic…
SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit. Contribute to sastraadiwiguna-purpleeliteteaming/SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Rynkowa Cena Energii (RCE) for HAos - API v2 ranking setup
URL：https://github.com/Tommyleesue/RCE-PSE-tommyleesue

标签：#RCE
GitHub
GitHub - Tommyleesue/RCE-PSE-tommyleesue: Rynkowa Cena Energii (RCE) for HAos - API v2 ranking setup
Rynkowa Cena Energii (RCE) for HAos - API v2 ranking setup - Tommyleesue/RCE-PSE-tommyleesue
RCE
GitHub监控消息提醒！！！

更新了：内网渗透
描述：FlyWheel is an intranet penetration aid developed based on Rust FlyWheel是一个基于Rust开发的内网渗透辅助工具
URL：https://github.com/BlkSword/IntraSweep

标签：#内网渗透
GitHub
GitHub - BlkSword/IntraSweep: A compact Rust toolkit for internal-network pentesting — scanning, recon, credential cracking, encrypted…
GitHub - BlkSword/IntraSweep: A compact Rust toolkit for internal-network pentesting — scanning, recon, credential cracking, encrypted…
A compact Rust toolkit for internal-network pentesting — scanning, recon, credential cracking, encrypted tunneling, and ticket attacks. - BlkSword/IntraSweep
内网渗透
GitHub监控消息提醒！！！

更新了：RCE
描述：Tool for inserting make4ht-generated HTML into the CanvasRCE using a local server + bookmarklet.
URL：https://github.com/brichwin/canvas-rce-html-uploader

标签：#RCE
GitHub
GitHub - brichwin/canvas-rce-html-uploader: Tool for inserting make4ht-generated HTML into the CanvasRCE using a local server +…
Tool for inserting make4ht-generated HTML into the CanvasRCE using a local server + bookmarklet. - brichwin/canvas-rce-html-uploader
RCE
Before
After
Back to Top