​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：webshell
描述：webshell
URL：https://github.com/bellpwn/opet

标签：#webshell
webshell
GitHub监控消息提醒！！！

更新了：RCE
描述：Sangoma VideoMCU Session Hijack + Post-Auth RCE Chain.
URL：https://github.com/fullspectrumdev/sangoma-videomcu-hijack-rce

标签：#RCE
GitHub
GitHub - fullspectrumdev/sangoma-videomcu-hijack-rce: Sangoma VideoMCU Session Hijack + Post-Auth RCE Chain.
GitHub - fullspectrumdev/sangoma-videomcu-hijack-rce: Sangoma VideoMCU Session Hijack + Post-Auth RCE Chain.
Sangoma VideoMCU Session Hijack + Post-Auth RCE Chain. - fullspectrumdev/sangoma-videomcu-hijack-rce
RCE
GitHub监控消息提醒！！！

更新了：burp
描述：burp acad labs
URL：https://github.com/nicchongwb/burp-acad

标签：#burp
GitHub
GitHub - nicchongwb/burp-acad: burp acad solutions
GitHub - nicchongwb/burp-acad: burp acad solutions
burp acad solutions. Contribute to nicchongwb/burp-acad development by creating an account on GitHub.
burp
GitHub监控消息提醒！！！

更新了：漏洞复现
描述：gsm中间人攻击完整代码以及漏洞复现#gsm#gsm中间人攻击#gsm-mitm#osmocom-bb#OpenBTS#gsm security#
URL：https://github.com/Qmeimei10086/gsm-mitm

标签：#漏洞复现
漏洞复现
GitHub监控消息提醒！！！

更新了：RCE
描述：Sangoma NTG Session Hijack + Post-Auth RCE Chain.
URL：https://github.com/fullspectrumdev/sangoma-ntg-hijack-rce

标签：#RCE
GitHub
GitHub - fullspectrumdev/sangoma-ntg-hijack-rce: Sangoma NTG Session Hijack + Post-Auth RCE Chain.
GitHub - fullspectrumdev/sangoma-ntg-hijack-rce: Sangoma NTG Session Hijack + Post-Auth RCE Chain.
Sangoma NTG Session Hijack + Post-Auth RCE Chain. Contribute to fullspectrumdev/sangoma-ntg-hijack-rce development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike - External C2 Client
URL：https://github.com/frknaykc/Database-Dragon

标签：#Cobalt Strike
GitHub
GitHub - frknaykc/Dragon-ThreatResearchHQ: A comprehensive repository for malware analysis and threat intelligence, including Cobalt…
GitHub - frknaykc/Dragon-ThreatResearchHQ: A comprehensive repository for malware analysis and threat intelligence, including Cobalt…
A comprehensive repository for malware analysis and threat intelligence, including Cobalt Strike Beacon configurations, YARA rules, IOCs, Suricata rules, and malware samples to support cybersecurit...
Cobalt
GitHub监控消息提醒！！！

更新了：反序列化
描述：Apache Shiro 反序列化漏洞检测与利用工具
URL：https://github.com/fffffw1/shiro_exploit

标签：#反序列化
GitHub
GitHub - fffffw1/shiro_exploit
GitHub - fffffw1/shiro_exploit
Contribute to fffffw1/shiro_exploit development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：RCE
描述：RCEngine is a small engine for EasyX to construct a fake 3D game based on ray casting
URL：https://github.com/FSMargoo/RCEngine

标签：#RCE
GitHub
GitHub - FSMargoo/RCEngine: RCEngine 是一个基于 EasyX 的伪 3D 游戏引擎，旨在为用户提供一个简单、易于学习的游戏开发环境。使用 RCEngine，你可以快速创建一个你的伪 3D 游戏。
RCEngine 是一个基于 EasyX 的伪 3D 游戏引擎，旨在为用户提供一个简单、易于学习的游戏开发环境。使用 RCEngine，你可以快速创建一个你的伪 3D 游戏。 - FSMargoo/RCEngine
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：MIRROR of the original 32-bit PoC for CVE-2024-6387 \"regreSSHion\" by 7etsuo/cve-2024-6387-poc
URL：https://github.com/lflare/cve-2024-6387-poc

标签：#RCE
GitHub
GitHub - lflare/cve-2024-6387-poc: MIRROR of the original 32-bit PoC for CVE-2024-6387
GitHub - lflare/cve-2024-6387-poc: MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc
MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc - lflare/cve-2024-6387-poc
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Mass Exploit < [CVE-2024-40348 - Bazarr] - Arbitrary File Read
URL：https://github.com/codeb0ss/CVE-2024-40348-PoC

标签：#CVE-2024
GitHub
GitHub - codeb0ss/CVE-2024-40348-PoC: Mass Exploit < [CVE-2024-40348 - Bazarr] - Arbitrary File Read
Mass Exploit < [CVE-2024-40348 - Bazarr] - Arbitrary File Read - codeb0ss/CVE-2024-40348-PoC
CVE
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：geoserver CVE-2024-36401漏洞利用工具
URL：https://github.com/ahisec/geoserver-

标签：#漏洞利用
GitHub
GitHub - ahisec/geoserver-: geoserver CVE-2024-36401漏洞利用工具
geoserver CVE-2024-36401漏洞利用工具. Contribute to ahisec/geoserver- development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198
URL：https://github.com/xiw1ll/CVE-2024-22198_Checker

标签：#CVE-2024
GitHub
GitHub - xiw1ll/CVE-2024-22198_Checker: Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198
GitHub - xiw1ll/CVE-2024-22198_Checker: Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198
Identify Nginx-ui version and check if it's vulnerable to CVE-2024-22198 - xiw1ll/CVE-2024-22198_Checker
CVE
GitHub监控消息提醒！！！

更新了：反序列化
描述：帆软bi反序列化漏洞利用工具
URL：https://github.com/7wkajk/Frchannel

标签：#反序列化
GitHub
GitHub - 7wkajk/Frchannel: 帆软bi反序列化漏洞利用工具
帆软bi反序列化漏洞利用工具. Contribute to 7wkajk/Frchannel development by creating an account on GitHub.
反序列化
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Exploit for CVE-2024-31989.
URL：https://github.com/vt0x78/CVE-2024-31989

标签：#CVE-2024
GitHub
GitHub - vt0x78/CVE-2024-31989: Exploit for CVE-2024-31989.
GitHub - vt0x78/CVE-2024-31989: Exploit for CVE-2024-31989.
Exploit for CVE-2024-31989. Contribute to vt0x78/CVE-2024-31989 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：根据星露谷物语图片素材，粗制滥造的钓鱼游戏
URL：https://github.com/FrostN0v0/kirami-plugin-fishing

标签：#钓鱼
GitHub
GitHub - FrostN0v0/kirami-plugin-fishing: 根据星露谷物语图片素材，粗制滥造的钓鱼游戏
GitHub - FrostN0v0/kirami-plugin-fishing: 根据星露谷物语图片素材，粗制滥造的钓鱼游戏
根据星露谷物语图片素材，粗制滥造的钓鱼游戏. Contribute to FrostN0v0/kirami-plugin-fishing development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：RCE
描述：Sangoma VideoMCU Post-Auth RCE.
URL：https://github.com/fullspectrumdev/sangoma-videomcu-rce

标签：#RCE
GitHub
GitHub - fullspectrumdev/sangoma-videomcu-rce: Sangoma VideoMCU Post-Auth RCE.
GitHub - fullspectrumdev/sangoma-videomcu-rce: Sangoma VideoMCU Post-Auth RCE.
Sangoma VideoMCU Post-Auth RCE. Contribute to fullspectrumdev/sangoma-videomcu-rce development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：横向移动
描述：一款横向移动攻击监测与预测系统
URL：https://github.com/666ghj/LateralMovement_DetectionSystem

标签：#横向移动
横向移动
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Markdown XSS leads to RCE in VNote version <=3.18.1
URL：https://github.com/sh3bu/CVE-2024-41662

标签：#CVE-2024
GitHub
GitHub - sh3bu/CVE-2024-41662: Markdown XSS leads to RCE in VNote version <=3.18.1
GitHub - sh3bu/CVE-2024-41662: Markdown XSS leads to RCE in VNote version <=3.18.1
Markdown XSS leads to RCE in VNote version <=3.18.1 - sh3bu/CVE-2024-41662
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：This repository contains an PoC for the critical vulnerability identified as CVE-2024-41107 in Apache CloudStack
URL：https://github.com/d0rb/CVE-2024-41107

标签：#CVE-2024
GitHub
GitHub - d0rb/CVE-2024-41107: This repository contains an PoC for the critical vulnerability identified as CVE-2024-41107 in Apache…
GitHub - d0rb/CVE-2024-41107: This repository contains an PoC for the critical vulnerability identified as CVE-2024-41107 in Apache…
This repository contains an PoC for the critical vulnerability identified as CVE-2024-41107 in Apache CloudStack - d0rb/CVE-2024-41107
CVE
GitHub监控消息提醒！！！

更新了：应急响应
描述：Courier 信使，自用应急响应信息收集脚本，便于快速进行信息收集、定位攻击信息。
URL：https://github.com/Funsiooo/Courier

标签：#应急响应
GitHub
GitHub - Funsiooo/Courier: Courier 信使，自用应急响应信息收集脚本，便于快速进行信息收集、定位攻击信息。
GitHub - Funsiooo/Courier: Courier 信使，自用应急响应信息收集脚本，便于快速进行信息收集、定位攻击信息。
Courier 信使，自用应急响应信息收集脚本，便于快速进行信息收集、定位攻击信息。. Contribute to Funsiooo/Courier development by creating an account on GitHub.
应急响应
Before
After
Back to Top