📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: web-vuln-scanner
👤 项目作者: manojdevsec
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 13:57:15

📝 项目描述:
A modular web vulnerability scanner built with Python. By Manoj Aluri, A B. Tech Computer Science and Engineering Student with strong Foundation in Cyber Security

🔗 点击访问项目地址 GitHub - manojdevsec/web-vuln-scanner: A modular web vulnerability scanner built with Python. By Manoj Aluri, A B. Tech Computer…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: prefect-cve-2026-5366
👤 项目作者: renat0z3r0
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 13:44:05

📝 项目描述:
PoC for CVE-2026-5366: git argument injection in Prefect's GitRepository leading to RCE on the worker.

🔗 点击访问项目地址 GitHub - renat0z3r0/prefect-cve-2026-5366: PoC for CVE-2026-5366: git argument injection in Prefect's GitRepository leading to…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-40176-poc
👤 项目作者: Saku0512
🛠 开发语言: PHP
Star数量: 2 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 13:53:30

📝 项目描述:
无描述

🔗 点击访问项目地址 GitHub - Saku0512/CVE-2026-40176-poc
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN
👤 项目作者: ctnBobong32
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 12:50:24

📝 项目描述:
CVE-2026-0073-Android-ADBD-bypass-POC汉化版

🔗 点击访问项目地址 GitHub - ctnBobong32/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN: CVE-2026-0073-Android-ADBD-bypass-POC汉化版
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Burp #Extension

📦 项目名称: PassiveAutoTester
👤 项目作者: lulusec
🛠 开发语言: Java
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 10:28:25

📝 项目描述:
PassiveAutoTester is a Burp Suite extension designed to simplify a penetration tester's workflow by automating passive security testing tasks. It helps identify common vulnerabilities and misconfigurations without requiring manual intervention, allowing testers to focus on more complex security assessments.

🔗 点击访问项目地址 GitHub - lulusec/PassiveAutoTester: PassiveAutoTester is a Burp Suite extension designed to simplify a penetration tester's workflow…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Jenkins #POC

📦 项目名称: jenkins-2026-gitops-config
👤 项目作者: nubenetes
🛠 开发语言: Go Template
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 11:03:22

📝 项目描述:
GitOps target-state for the GKE Golden Path IDP, synced by ArgoCD: Helm chart for the JHipster microservices, HA CloudNative-PG (3 replicas + PgBouncer), zero-trust NetworkPolicies, OTel auto-instrumentation, and the ArgoCD Application/AppSet manifests. Image tags written by the CI pipeline.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: By-Poloss..-..CVE-2026-12432-PoC
👤 项目作者: Polosss
🛠 开发语言: Unknown
Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 09:43:35

📝 项目描述:
WP Full Stripe Free <= 8.4.3 - Missing Authorization

🔗 点击访问项目地址 GitHub - Polosss/By-Poloss..-..CVE-2026-12432-PoC: WP Full Stripe Free <= 8.4.3 - Missing Authorization
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #RCE

📦 项目名称: CVE-2026-48907
👤 项目作者: grayxploit
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 09:56:58

📝 项目描述:
CVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions ≤ 2.9.99.4. The Grayxploit team breaks down the 3-weakness chain — missing auth, no extension validation, and an unsafe upload flag — that lets attackers pop a shell in 3 HTTP requests.

🔗 点击访问项目地址 GitHub - grayxploit/CVE-2026-48907: CVE-2026-48907 is a CVSS 10.0 pre-auth RCE in Joomla Content Editor affecting all versions…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Burp #Extension

📦 项目名称: BLHChecker
👤 项目作者: khiz3r
🛠 开发语言: Java
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 08:44:56

📝 项目描述:
A passive Burp Suite extension that automatically detects broken external links across all proxy traffic and evaluates each one for hijackability.

🔗 点击访问项目地址 GitHub - khiz3r/BLHChecker: A passive Burp Suite extension that automatically detects broken external links across all proxy traffic…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #C2 #Beacon

📦 项目名称: MercySTEM-SentinelArc
👤 项目作者: C-K-Labs
🛠 开发语言: HTML
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 09:00:49

📝 项目描述:
Windows LAN DDoS detection, defense, and incident-reporting platform — a research prototype. Live packet scoring (MDAFS), OS-firewall auto-blocking, an always-on ScrubGate proxy, multi-node C2 coordination, and a single-page operator dashboard. Defensive-only public build.

🔗 点击访问项目地址 GitHub - C-K-Labs/MercySTEM-SentinelArc: Windows LAN DDoS detection, defense, and incident-reporting platform — a research prototype.…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #漏洞 #扫描

📦 项目名称: rhhndHbxOJ
👤 项目作者: cauwen
🛠 开发语言: Unknown
Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 07:10:53

📝 项目描述:
【Python计算机毕业设计分享】基于Python的web渗透漏洞扫描工具研究与应用,MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】

🔗 点击访问项目地址 GitHub - cauwen/rhhndHbxOJ: 【Python计算机毕业设计分享】基于Python的web渗透漏洞扫描工具研究与应用,MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】
🚨 GitHub 监控消息提醒

🚨 发现关键词: #GitLab #CVE

📦 项目名称: darklab-shell
👤 项目作者: darklab-sh
🛠 开发语言: JavaScript
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 08:01:55

📝 项目描述:
This project is maintained in GitLab and mirrored here for visibility. For cloning or contributing, please use the GitLab repo as the primary source. https://gitlab.com/darklab.sh/darklab-shell

🔗 点击访问项目地址 GitHub - darklab-sh/darklab-shell: This project is maintained in GitLab and mirrored here for visibility. For cloning or contributing…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: Vulnerability-Scanner
👤 项目作者: nalifamercina
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 06:41:16

📝 项目描述:
A Python-based vulnerability scanner that identifies open TCP ports using socket programming and basic network scanning techniques.

🔗 点击访问项目地址 GitHub - nalifamercina/Vulnerability-Scanner: A Python-based vulnerability scanner that identifies open TCP ports using socket…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: CommitCourier
👤 项目作者: Y1-Effy
🛠 开发语言: TypeScript
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 06:35:20

📝 项目描述:
Transactional outbound webhooks for Node.js/TypeScript — enqueue inside your DB transaction and deliver reliably (signing, retries, DLQ, SSRF) on the PostgreSQL you already run.

🔗 点击访问项目地址 GitHub - Y1-Effy/CommitCourier: Transactional outbound webhooks for Node.js/TypeScript — enqueue inside your DB transaction and…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #C2 #Command and Control

📦 项目名称: edr-c2-detection-lab
👤 项目作者: milescyx
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 06:02:51

📝 项目描述:
Simulated endpoint compromise involving a command and control (C2) attack scenario where a malicious payload is executed on a victim machine. Detection and investigation are performed using LimaCharlie to analyze process behavior, identify suspicious activity, and demonstrate blue team response techniques in a controlled lab environment.

🔗 点击访问项目地址 GitHub - milescyx/edr-c2-detection-lab: Simulated endpoint compromise involving a command and control (C2) attack scenario where…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules

📦 项目名称: YARA-RULES
👤 项目作者: TheRavenFile
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 05:56:54

📝 项目描述:
YARA Rules created for observed Malwares/Ransomwares

🔗 点击访问项目地址 GitHub - TheRavenFile/YARA-RULES: YARA Rules created for observed Malwares/Ransomwares
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: web-vuln-scanner
👤 项目作者: riskimuhamad3829-blip
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 05:54:23

📝 项目描述:
A modular and advanced web vulnerability scanner built with Python for security auditing and educational purposes.

🔗 点击访问项目地址 GitHub - riskimuhamad3829-blip/web-vuln-scanner: A modular and advanced web vulnerability scanner built with Python for security…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-43499
👤 项目作者: MobiusM
🛠 开发语言: C
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 05:05:38

📝 项目描述:
CVE-2026-43499 PoC

🔗 点击访问项目地址 GitHub - MobiusM/CVE-2026-43499: CVE-2026-43499 PoC
🚨 GitHub 监控消息提醒

🚨 发现关键词: #POC #CVE

📦 项目名称: testimonial-widgets-sqli-cve
👤 项目作者: Kimdir01
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 04:03:24

📝 项目描述:
PoC: SQL Injection in Testimonial Widgets WP Plugin (CWE-89, 10,000+ installs)

🔗 点击访问项目地址 GitHub - Kimdir01/testimonial-widgets-sqli-cve: PoC: SQL Injection in Testimonial Widgets WP Plugin (CWE-89, 10,000+ installs)
🚨 GitHub 监控消息提醒

🚨 发现关键词: #弱口令 #爆破 #口令

📦 项目名称: bee-py
👤 项目作者: hjzhou1
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-06-27 02:41:45

📝 项目描述:
蜜蜂出击,全栈测绘。bee-py 是一套插件化渗透测试工具链,扫描目标全栈资产后自动匹配攻击工具——弱口令爆破、后台登录、配置泄露、XSS/SQL注入、CVE版本比对等 11 种武器即调即用。优先对接 sqlmap/XSStrike 等开源利器,无则自研降级,双管齐下不卡壳。Python 编写,pip install 即用,交互式调度台小白也能上手。

🔗 点击访问项目地址 GitHub - hjzhou1/bee-py: 蜜蜂出击,全栈测绘。bee-py 是一套插件化渗透测试工具链,扫描目标全栈资产后自动匹配攻击工具——弱口令爆破、后台登录、配置泄露、XSS/SQL注入、CVE版本比对等 11 种武器即调即用。优先对接 sqlmap/XSStrike…
Back to Top