​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：RCE
描述：Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo.
URL：https://github.com/X5K0/Ficha

标签：#RCE
GitHub
GitHub - X5K0/Ficha: Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo.
GitHub - X5K0/Ficha: Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo.
Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo. - X5K0/Ficha
RCE
GitHub监控消息提醒！！！

更新了：sql注入
描述：计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护
URL：https://github.com/pot-not-fish/sql-injection

标签：#sql注入
GitHub
GitHub - pot-not-fish/sql-injection: 计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护
GitHub - pot-not-fish/sql-injection: 计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护
计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护. Contribute to pot-not-fish/sql-injection development by creating an account on GitHub.
sql注入
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
URL：https://github.com/fuzzlove/soplanning-1.52-exploits

标签：#CVE-2024
GitHub
GitHub - fuzzlove/soplanning-1.52-exploits: SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
GitHub - fuzzlove/soplanning-1.52-exploits: SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724) - fuzzlove/soplanning-1.52-exploits
CVE
GitHub监控消息提醒！！！

更新了：绕过
描述：CMCC验证绕过POC
URL：https://github.com/wireless-sec/cmcc-bypass-poc

标签：#绕过
GitHub
GitHub - wireless-sec/cmcc-bypass-poc: CMCC认证绕过POC
GitHub - wireless-sec/cmcc-bypass-poc: CMCC认证绕过POC
CMCC认证绕过POC. Contribute to wireless-sec/cmcc-bypass-poc development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：RCE
描述：PPPwn - PlayStation 4 PPPoE RCE - Made into a Docker container for learning purposes.
URL：https://github.com/olokos/PPPwn-docker-olokos

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：bypass av
描述：免杀
URL：https://github.com/tadahana/BypassAV

标签：#bypass av
GitHub
GitHub - tadahana/BypassAV: 免杀
免杀. Contribute to tadahana/BypassAV development by creating an account on GitHub.
bypass
GitHub监控消息提醒！！！

更新了：burp
描述：Alternative to burp's intruder built on top of httpx
URL：https://github.com/Giardi77/IntruderX

标签：#burp
GitHub
GitHub - Giardi77/IntruderX: Alternative to burp's intruder built on top of httpx
GitHub - Giardi77/IntruderX: Alternative to burp's intruder built on top of httpx
Alternative to burp's intruder built on top of httpx - Giardi77/IntruderX
burp
GitHub监控消息提醒！！！

更新了：RCE
描述：PPPwn - PlayStation 4 PPPoE RCE
URL：https://github.com/Ruulian/wconsole_extractor

标签：#RCE
GitHub
GitHub - Ruulian/wconsole_extractor: WConsole Extractor is a python library which automatically exploits a Werkzeug development…
GitHub - Ruulian/wconsole_extractor: WConsole Extractor is a python library which automatically exploits a Werkzeug development…
WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your...
RCE
GitHub监控消息提醒！！！

更新了：反序列化
描述：仿Wireshark纯抓包工具，加了个模糊匹配字节询问GPT是否为恶意数据。入侵监测反序列化系统
URL：https://github.com/godownio/Deserialize-Fyne-detect-GPTanwser

标签：#反序列化
反序列化
GitHub监控消息提醒！！！

更新了：webshell
描述：php webshell bypass D盾、safedog、360、火绒等
URL：https://github.com/Inull-Studio/php_webshell

标签：#webshell
GitHub
GitHub - Inull-Studio/php_jsp_asp_webshell: php webshell bypass D盾、safedog、360、火绒等，仅支持php7
GitHub - Inull-Studio/php_jsp_asp_webshell: php webshell bypass D盾、safedog、360、火绒等，仅支持php7
php webshell bypass D盾、safedog、360、火绒等，仅支持php7. Contribute to Inull-Studio/php_jsp_asp_webshell development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.5.1.
URL：https://github.com/d0rb/CVE-2024-4439

标签：#CVE-2024
GitHub
GitHub - d0rb/CVE-2024-4439: The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439)…
GitHub - d0rb/CVE-2024-4439: The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439)…
The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.5.1. - d0rb/CVE-2024-4439
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-4439 PoC
URL：https://github.com/MielPopsssssss/CVE-2024-4439

标签：#CVE-2024
GitHub
GitHub - MielPopsssssss/CVE-2024-4439: CVE-2024-4439 PoC
CVE-2024-4439 PoC. Contribute to MielPopsssssss/CVE-2024-4439 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：内存马
描述：proof-of-concept for generating Java deserialization payload | Proxy MemShell 反序列化概念验证工具 | 动态代理实现内存马
URL：https://github.com/Whoopsunix/PPPYSO

标签：#内存马
GitHub
GitHub - Whoopsunix/PPPYSO: proof-of-concept for generating Java deserialization payload | Proxy MemShell
GitHub - Whoopsunix/PPPYSO: proof-of-concept for generating Java deserialization payload | Proxy MemShell
proof-of-concept for generating Java deserialization payload | Proxy MemShell - Whoopsunix/PPPYSO
内存马
GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/dragonked2/Egyscan

标签：#RCE
GitHub
GitHub - dragonked2/Egyscan: Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify…
GitHub - dragonked2/Egyscan: Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify…
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks a...
RCE
GitHub监控消息提醒！！！

更新了：免杀
描述：PHP404页面伪装可以配合免杀马配合使用
URL：https://github.com/madin876/PHP404-

标签：#免杀
GitHub
madin876/PHP404-
madin876/PHP404-
PHP404页面伪装可以配合免杀马配合使用. Contribute to madin876/PHP404- development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-31851
URL：https://github.com/GKalmus/referaat

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Critical RCE Vulnerabilities in HPE Aruba Devices (may 2024)
URL：https://github.com/Roud-Roud-Agency/CVE-2024-26304-RCE-exploits

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-27956 WORDPRESS RCE PLUGIN
URL：https://github.com/gotr00t0day/CVE-2024-4040

标签：#CVE-2024
GitHub
GitHub - gotr00t0day/CVE-2024-4040: A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and…
GitHub - gotr00t0day/CVE-2024-4040: A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and…
A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outsid...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-27956 WORDPRESS RCE PLUGIN
URL：https://github.com/X-Projetion/CVE-2024-27956-WORDPRESS-RCE-PLUGIN

标签：#CVE-2024
GitHub
GitHub - X-Projetion/CVE-2024-27956-WORDPRESS-RCE-PLUGIN: CVE-2024-27956 WORDPRESS RCE PLUGIN
GitHub - X-Projetion/CVE-2024-27956-WORDPRESS-RCE-PLUGIN: CVE-2024-27956 WORDPRESS RCE PLUGIN
CVE-2024-27956 WORDPRESS RCE PLUGIN. Contribute to X-Projetion/CVE-2024-27956-WORDPRESS-RCE-PLUGIN development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-21413 Microsoft Outlook RCE Exploit
URL：https://github.com/X-Projetion/CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

标签：#CVE-2024
GitHub
GitHub - X-Projetion/CVE-2024-21413-Microsoft-Outlook-RCE-Exploit: CVE-2024-21413 Microsoft Outlook RCE Exploit
GitHub - X-Projetion/CVE-2024-21413-Microsoft-Outlook-RCE-Exploit: CVE-2024-21413 Microsoft Outlook RCE Exploit
CVE-2024-21413 Microsoft Outlook RCE Exploit. Contribute to X-Projetion/CVE-2024-21413-Microsoft-Outlook-RCE-Exploit development by creating an account on GitHub.
CVE
Before
After
Back to Top