📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 and CVE-2008-4109.
URL：https://github.com/bigb0x/CVE-2024-6387
标签：#CVE-2024
更新了：CVE-2024
描述：Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 and CVE-2008-4109.
URL：https://github.com/bigb0x/CVE-2024-6387
标签：#CVE-2024
GitHub
GitHub - bigb0x/CVE-2024-6387: Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others.
Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others. - bigb0x/CVE-2024-6387
GitHub监控消息提醒！！！
更新了：免杀
描述：助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan
URL：https://github.com/Pizz33/JoJoLoader
标签：#免杀
更新了：免杀
描述：助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan
URL：https://github.com/Pizz33/JoJoLoader
标签：#免杀
GitHub
GitHub - Pizz33/JoJoLoader: 助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan
助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan - Pizz33/JoJoLoader
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CVE-2024-6387 for SSH RCE in Python [Update]
URL：https://github.com/TrustResearcher/CVE-2024-6387-Updated-SSH-RCE
标签：#CVE-2024
更新了：CVE-2024
描述：CVE-2024-6387 for SSH RCE in Python [Update]
URL：https://github.com/TrustResearcher/CVE-2024-6387-Updated-SSH-RCE
标签：#CVE-2024
GitHub监控消息提醒！！！
更新了：免杀
描述：一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader
URL：https://github.com/1242509682/Goodnight
标签：#免杀
更新了：免杀
描述：一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader
URL：https://github.com/1242509682/Goodnight
标签：#免杀
GitHub
GitHub - 1242509682/Goodnight: 这是一个Tshock服务器插件：本插件整合了白名单、宵禁、禁止召唤怪物等插件功能，在宵禁时间内根据在线人数来判断，是否允许召唤未击败或已击败的怪物，在满足在线人数和宵禁时间外的情况下：通过N…
这是一个Tshock服务器插件：本插件整合了白名单、宵禁、禁止召唤怪物等插件功能，在宵禁时间内根据在线人数来判断，是否允许召唤未击败或已击败的怪物，在满足在线人数和宵禁时间外的情况下：通过NPC死亡事件对比在【禁止怪物表】里的怪物ID，通过击杀计数，自动赋值到【允许召唤表】，方便宵禁时间允许玩家召唤哪些怪物，避免单人推服务器进度的情况；在线人数不满足【关闭禁怪所需人数】情况下：可通过【开启召...
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CVE-2024-28955 Exploitation PoC
URL：https://github.com/Stuub/CVE-2024-28995
标签：#CVE-2024
更新了：CVE-2024
描述：CVE-2024-28955 Exploitation PoC
URL：https://github.com/Stuub/CVE-2024-28995
标签：#CVE-2024
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento (CVE-2024-34102)
URL：https://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento
标签：#CVE-2024
更新了：CVE-2024
描述：CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento (CVE-2024-34102)
URL：https://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento
标签：#CVE-2024
GitHub
GitHub - jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento: CosmicSting: critical unauthenticated XXE vulnerability…
CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento (CVE-2024-34102) - jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：POC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http connection on ur webhook
URL：https://github.com/11whoami99/CVE-2024-34102
标签：#CVE-2024
更新了：CVE-2024
描述：POC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http connection on ur webhook
URL：https://github.com/11whoami99/CVE-2024-34102
标签：#CVE-2024
GitHub
GitHub - 11whoami99/CVE-2024-34102: POC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http…
POC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http connection on ur webhook - 11whoami99/CVE-2024-34102
GitHub监控消息提醒！！！
更新了：burp
描述：Answer and practice with burp suite
URL：https://github.com/chanhhrieu/Burp-Suite-Labs
标签：#burp
更新了：burp
描述：Answer and practice with burp suite
URL：https://github.com/chanhhrieu/Burp-Suite-Labs
标签：#burp
GitHub
GitHub - chanhhrieu/Burp-Suite-Labs: Answer and practice with burp suite
Answer and practice with burp suite. Contribute to chanhhrieu/Burp-Suite-Labs development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：Magento XXE (CVE-2024-34102)
URL：https://github.com/0x0d3ad/CVE-2024-34102
标签：#CVE-2024
更新了：CVE-2024
描述：Magento XXE (CVE-2024-34102)
URL：https://github.com/0x0d3ad/CVE-2024-34102
标签：#CVE-2024
GitHub
GitHub - 0x0d3ad/CVE-2024-34102: CVE-2024-34102 (Magento XXE)
CVE-2024-34102 (Magento XXE). Contribute to 0x0d3ad/CVE-2024-34102 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：一款SSH批量改密，并持续监控的程序，可以实现改密时RCE，密码权限维持
URL：https://github.com/s1kSec/SSHsuoha
标签：#RCE
更新了：RCE
描述：一款SSH批量改密，并持续监控的程序，可以实现改密时RCE，密码权限维持
URL：https://github.com/s1kSec/SSHsuoha
标签：#RCE
GitHub监控消息提醒！！！
更新了：漏洞EXP
描述：白鹭是无迹安全团队（英文名：TracelessSec）维护的漏洞库，包含各类漏洞POC和EXP
URL：https://github.com/A-little-dragon/Egret
标签：#漏洞EXP
更新了：漏洞EXP
描述：白鹭是无迹安全团队（英文名：TracelessSec）维护的漏洞库，包含各类漏洞POC和EXP
URL：https://github.com/A-little-dragon/Egret
标签：#漏洞EXP
GitHub监控消息提醒！！！
更新了：信息收集
描述：红队信息收集对url、ip、域名格式化分离操作的工具
URL：https://github.com/Comekeybord/urlFormater
标签：#信息收集
更新了：信息收集
描述：红队信息收集对url、ip、域名格式化分离操作的工具
URL：https://github.com/Comekeybord/urlFormater
标签：#信息收集
GitHub
GitHub - KPF888/urlFormater: 红队信息收集对url、ip、域名格式化分离操作的工具
红队信息收集对url、ip、域名格式化分离操作的工具. Contribute to KPF888/urlFormater development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：漏洞检测
描述：geoserver后台漏洞检测一键化工具
URL：https://github.com/Master-lay/geoserver-llll
标签：#漏洞检测
更新了：漏洞检测
描述：geoserver后台漏洞检测一键化工具
URL：https://github.com/Master-lay/geoserver-llll
标签：#漏洞检测
GitHub
GitHub - Master-lay/geoserver-llll: geoserver后台漏洞检测一键化工具
geoserver后台漏洞检测一键化工具. Contribute to Master-lay/geoserver-llll development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：ROP chain to get RCE 0day of Tenda Modem Ac8v4
URL：https://github.com/NextGenPentesters/0day-RCE-for-Tenda-Modem-
标签：#RCE
更新了：RCE
描述：ROP chain to get RCE 0day of Tenda Modem Ac8v4
URL：https://github.com/NextGenPentesters/0day-RCE-for-Tenda-Modem-
标签：#RCE
GitHub
GitHub - NextGenPentesters/0day-RCE-for-Tenda-Modem-: ROP chain to get RCE 0day of Tenda Modem Ac8v4
ROP chain to get RCE 0day of Tenda Modem Ac8v4. Contribute to NextGenPentesters/0day-RCE-for-Tenda-Modem- development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：TEST CVE-2024-34102 Magento XXE
URL：https://github.com/cmsec423/CVE-2024-34102
标签：#CVE-2024
更新了：CVE-2024
描述：TEST CVE-2024-34102 Magento XXE
URL：https://github.com/cmsec423/CVE-2024-34102
标签：#CVE-2024
GitHub
cmsec423/CVE-2024-34102
Magento XXE. Contribute to cmsec423/CVE-2024-34102 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2024
描述：CosmicSting (CVE-2024-34102)
URL：https://github.com/Chocapikk/CVE-2024-34102
标签：#CVE-2024
更新了：CVE-2024
描述：CosmicSting (CVE-2024-34102)
URL：https://github.com/Chocapikk/CVE-2024-34102
标签：#CVE-2024
GitHub
GitHub - Chocapikk/CVE-2024-34102: CosmicSting (CVE-2024-34102)
CosmicSting (CVE-2024-34102). Contribute to Chocapikk/CVE-2024-34102 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：Modified RCE with a remote shell and logging
URL：https://github.com/glen-pearson/MoveIT-CVE-2023-34362-RCE
标签：#RCE
更新了：RCE
描述：Modified RCE with a remote shell and logging
URL：https://github.com/glen-pearson/MoveIT-CVE-2023-34362-RCE
标签：#RCE
GitHub
GitHub - glen-pearson/MoveIT-CVE-2023-34362-RCE: Modified RCE with a remote shell and logging
Modified RCE with a remote shell and logging. Contribute to glen-pearson/MoveIT-CVE-2023-34362-RCE development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：RCE
描述：Modified RCE with a remote shell and logging
URL：https://github.com/omershaik0/Gila-CMS-1.10.9-RCE-Authenticated
标签：#RCE
更新了：RCE
描述：Modified RCE with a remote shell and logging
URL：https://github.com/omershaik0/Gila-CMS-1.10.9-RCE-Authenticated
标签：#RCE
GitHub
GitHub - omershaik0/Gila-CMS-1.10.9-RCE-Authenticated: This Python script exploits the Gila CMS 1.10.9 vulnerability to achieve…
This Python script exploits the Gila CMS 1.10.9 vulnerability to achieve authenticated remote code execution (RCE). It uploads a shell, allowing arbitrary command execution on the target system. Th...
GitHub监控消息提醒！！！
更新了：RCE
描述：Modified RCE with a remote shell and logging
URL：https://github.com/glen-pearson/CVE-2023-34362-RCE
标签：#RCE
更新了：RCE
描述：Modified RCE with a remote shell and logging
URL：https://github.com/glen-pearson/CVE-2023-34362-RCE
标签：#RCE
GitHub
GitHub - glen-pearson/MoveIT-CVE-2023-34362-RCE: Modified RCE with a remote shell and logging
Modified RCE with a remote shell and logging. Contribute to glen-pearson/MoveIT-CVE-2023-34362-RCE development by creating an account on GitHub.
