📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！
更新了：burp
描述：Sample Burp Suite extension written in Kotlin that accompanies the article at https://danaepp.com/writing-burp-extensions-in-kotlin
URL：https://github.com/DanaEpp/SensitiveDataDetector
标签：#burp
更新了：burp
描述：Sample Burp Suite extension written in Kotlin that accompanies the article at https://danaepp.com/writing-burp-extensions-in-kotlin
URL：https://github.com/DanaEpp/SensitiveDataDetector
标签：#burp
Dana Epp's Blog
Writing Burp extensions in Kotlin
Learn how to write Burp Suite extensions using the new Montoya API with Kotlin and Visual Studio Code (VS Code).
GitHub监控消息提醒！！！
更新了：绕过
描述：快乐小手绕过quic
URL：https://github.com/hz1130/KsXposed
标签：#绕过
更新了：绕过
描述：快乐小手绕过quic
URL：https://github.com/hz1130/KsXposed
标签：#绕过
GitHub
GitHub - hz1130/KsXposed: 快乐小手绕过quic
快乐小手绕过quic. Contribute to hz1130/KsXposed development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：CVE-2018-6574-go-get-RCE
URL：https://github.com/Dannners/CVE-2018-6574-go-get-RCE
标签：#RCE
更新了：RCE
描述：CVE-2018-6574-go-get-RCE
URL：https://github.com/Dannners/CVE-2018-6574-go-get-RCE
标签：#RCE
GitHub
GitHub - Dannners/CVE-2018-6574-go-get-RCE: CVE-2018-6574-go-get-RCE
CVE-2018-6574-go-get-RCE. Contribute to Dannners/CVE-2018-6574-go-get-RCE development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：A submodule for exploiting CVE-2024-32002 vulnerability
URL：https://github.com/markuta/hooky
标签：#CVE-2024
更新了：CVE-2024
描述：A submodule for exploiting CVE-2024-32002 vulnerability
URL：https://github.com/markuta/hooky
标签：#CVE-2024
GitHub
GitHub - markuta/hooky: A submodule for exploiting CVE-2024-32002 vulnerability.
A submodule for exploiting CVE-2024-32002 vulnerability. - markuta/hooky
GitHub监控消息提醒！！！
更新了：webshell
描述：php webshell scaner 网站后门扫描器
URL：https://github.com/Greatfar/anti-webshell
标签：#webshell
更新了：webshell
描述：php webshell scaner 网站后门扫描器
URL：https://github.com/Greatfar/anti-webshell
标签：#webshell
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：PoC for CVE-2024-27130
URL：https://github.com/watchtowrlabs/CVE-2024-27130
标签：#CVE-2024
更新了：CVE-2024
描述：PoC for CVE-2024-27130
URL：https://github.com/watchtowrlabs/CVE-2024-27130
标签：#CVE-2024
GitHub
GitHub - watchtowrlabs/CVE-2024-27130: PoC for CVE-2024-27130
PoC for CVE-2024-27130. Contribute to watchtowrlabs/CVE-2024-27130 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：弱口令
描述：用于企业资产梳理，资产自查的通用工作脚本，实现端口核查，弱口令扫描，资产服务识别，web资产识别
URL：https://github.com/Ashro-one/Ashro_assets
标签：#弱口令
更新了：弱口令
描述：用于企业资产梳理，资产自查的通用工作脚本，实现端口核查，弱口令扫描，资产服务识别，web资产识别
URL：https://github.com/Ashro-one/Ashro_assets
标签：#弱口令
GitHub
GitHub - Ashro-one/Ashro_assets: 用于企业资产梳理，资产自查的通用工作脚本，实现端口核查，弱口令扫描，资产服务识别，web资产识别
用于企业资产梳理，资产自查的通用工作脚本，实现端口核查，弱口令扫描，资产服务识别，web资产识别. Contribute to Ashro-one/Ashro_assets development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CVE-2024-31974
URL：https://github.com/absholi7ly/WordPress-XStore-theme-SQL-Injection
标签：#CVE-2024
更新了：CVE-2024
描述：CVE-2024-31974
URL：https://github.com/absholi7ly/WordPress-XStore-theme-SQL-Injection
标签：#CVE-2024
GitHub
GitHub - absholi7ly/WordPress-XStore-theme-SQL-Injection: (CVE-2024-33559) The XStore theme for WordPress is vulnerable to SQL…
(CVE-2024-33559) The XStore theme for WordPress is vulnerable to SQL Injection due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL qu...
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CVE-2024-31974
URL：https://github.com/actuator/com.solarized.firedown
标签：#CVE-2024
更新了：CVE-2024
描述：CVE-2024-31974
URL：https://github.com/actuator/com.solarized.firedown
标签：#CVE-2024
GitHub
GitHub - actuator/com.solarized.firedown: CVE-2024-31974
CVE-2024-31974. Contribute to actuator/com.solarized.firedown development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：GetSimple CMS RCE for version 3.3.15
URL：https://github.com/cybersecaware/GetSimpleCMS-RCE
标签：#RCE
更新了：RCE
描述：GetSimple CMS RCE for version 3.3.15
URL：https://github.com/cybersecaware/GetSimpleCMS-RCE
标签：#RCE
GitHub
GitHub - cybersecaware/GetSimpleCMS-RCE: GetSimple CMS RCE for version 3.3.15
GetSimple CMS RCE for version 3.3.15. Contribute to cybersecaware/GetSimpleCMS-RCE development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：Red Team
描述：Setting up an Active Directory (home lab) that includes Splunk, Kali Linux & Atomic Red Team.
URL：https://github.com/Oureyelet/Active-Directory-Home-Lab-Project
标签：#Red Team
更新了：Red Team
描述：Setting up an Active Directory (home lab) that includes Splunk, Kali Linux & Atomic Red Team.
URL：https://github.com/Oureyelet/Active-Directory-Home-Lab-Project
标签：#Red Team
GitHub
GitHub - Oureyelet/Active-Directory-Home-Lab-Project: Setting up an Active Directory (home lab) that includes Splunk, Kali Linux…
Setting up an Active Directory (home lab) that includes Splunk, Kali Linux & Atomic Red Team. - Oureyelet/Active-Directory-Home-Lab-Project
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CVE-2024-4352 Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection
URL：https://github.com/truonghuuphuc/CVE-2024-4352-Poc
标签：#CVE-2024
更新了：CVE-2024
描述：CVE-2024-4352 Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection
URL：https://github.com/truonghuuphuc/CVE-2024-4352-Poc
标签：#CVE-2024
GitHub
GitHub - truonghuuphuc/CVE-2024-4352-Poc: CVE-2024-4352 Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection
CVE-2024-4352 Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection - truonghuuphuc/CVE-2024-4352-Poc
GitHub监控消息提醒！！！
更新了：应急响应
描述：应急响应脚本
URL：https://github.com/Sexisnull/DFIR
标签：#应急响应
更新了：应急响应
描述：应急响应脚本
URL：https://github.com/Sexisnull/DFIR
标签：#应急响应
GitHub
GitHub - Sexisnull/DFIR: 应急响应脚本
应急响应脚本. Contribute to Sexisnull/DFIR development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：Poc para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 y anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema sin estar autenticados
URL：https://github.com/Maalfer/CVE-2024-23897
标签：#CVE-2024
更新了：CVE-2024
描述：Poc para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 y anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema sin estar autenticados
URL：https://github.com/Maalfer/CVE-2024-23897
标签：#CVE-2024
GitHub
GitHub - Maalfer/CVE-2024-23897: Poc para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 y anteriores de Jenkins…
Poc para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 y anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema sin estar autenticados - Maalfer/CVE-2024...
GitHub监控消息提醒！！！
更新了：漏洞利用
描述：JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
URL：https://github.com/tarihub/blackjump
标签：#漏洞利用
更新了：漏洞利用
描述：JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
URL：https://github.com/tarihub/blackjump
标签：#漏洞利用
GitHub
GitHub - tarihub/blackjump: JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021 - tarihub/blackjump
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：Cacti CVE-2024-29895 POC
URL：https://github.com/secunnix/CVE-2024-29895
标签：#CVE-2024
更新了：CVE-2024
描述：Cacti CVE-2024-29895 POC
URL：https://github.com/secunnix/CVE-2024-29895
标签：#CVE-2024
GitHub
GitHub - secunnix/CVE-2024-29895: Cacti CVE-2024-29895 POC
Cacti CVE-2024-29895 POC. Contribute to secunnix/CVE-2024-29895 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：CVE-2024-32640 | Automated SQLi PoC
URL：https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS
标签：#RCE
更新了：RCE
描述：CVE-2024-32640 | Automated SQLi PoC
URL：https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS
标签：#RCE
GitHub
GitHub - Stuub/CVE-2024-32640-SQLI-MuraCMS: CVE-2024-32640 | Automated SQLi Exploitation PoC
CVE-2024-32640 | Automated SQLi Exploitation PoC. Contribute to Stuub/CVE-2024-32640-SQLI-MuraCMS development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds
URL：https://github.com/Stuub/CVE-2024-29895-CactiRCE-PoC
标签：#RCE
更新了：RCE
描述：CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds
URL：https://github.com/Stuub/CVE-2024-29895-CactiRCE-PoC
标签：#RCE
GitHub
GitHub - Stuub/CVE-2024-29895-CactiRCE-PoC: CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the…
CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds - Stuub/CVE-2024-29895-CactiRCE-PoC
GitHub监控消息提醒！！！
更新了：漏洞利用
描述：ARL-Core官方仓库备份项目：集漏洞验证和漏洞利用的一个框架
URL：https://github.com/Aabyss-Team/ARL-NPoC
标签：#漏洞利用
更新了：漏洞利用
描述：ARL-Core官方仓库备份项目：集漏洞验证和漏洞利用的一个框架
URL：https://github.com/Aabyss-Team/ARL-NPoC
标签：#漏洞利用
GitHub
GitHub - Aabyss-Team/ARL-NPoC: ARL-Core官方仓库备份项目：集漏洞验证和漏洞利用的一个框架
ARL-Core官方仓库备份项目：集漏洞验证和漏洞利用的一个框架. Contribute to Aabyss-Team/ARL-NPoC development by creating an account on GitHub.
