​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： depwatch
👤 项目作者： dcz6360
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-30 02:48:37

📝 项目描述：
Lightweight dependency vulnerability scanner with OSV.dev integration and CVSS v3.1 base score calculator

🔗 点击访问项目地址
GitHub
GitHub - dcz6360/depwatch: Lightweight dependency vulnerability scanner with OSV.dev integration and CVSS v3.1 base score calculator
GitHub - dcz6360/depwatch: Lightweight dependency vulnerability scanner with OSV.dev integration and CVSS v3.1 base score calculator
Lightweight dependency vulnerability scanner with OSV.dev integration and CVSS v3.1 base score calculator - dcz6360/depwatch
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-44789-n8n-PrototypePollution-RCE
👤 项目作者： BiiTts
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-30 02:12:08

📝 项目描述：
CVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution to RCE (NODE_OPTIONS runner-spawn gadget). Lab + automated PoC, verified e2e.

🔗 点击访问项目地址
GitHub
GitHub - BiiTts/CVE-2026-44789-n8n-PrototypePollution-RCE: CVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution…
GitHub - BiiTts/CVE-2026-44789-n8n-PrototypePollution-RCE: CVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution…
CVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution to RCE (NODE_OPTIONS runner-spawn gadget). Lab + automated PoC, verified e2e. - BiiTts/CVE-2026-44789-n8n-Prototype...
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #RCE

📦 项目名称： GreyIQ
👤 项目作者： GreyNOC
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-30 01:53:18

📝 项目描述：
Exploit Lead Gen

🔗 点击访问项目地址
GitHub
GitHub - GreyNOC/GreyIQ: Exploit Lead Gen
GitHub - GreyNOC/GreyIQ: Exploit Lead Gen
Exploit Lead Gen. Contribute to GreyNOC/GreyIQ development by creating an account on GitHub.
Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Stored

📦 项目名称： Stored-XSS-leading-to-Remote-Code-Execution-Vulnerability-in-gpu-jupyter-
👤 项目作者： jiy2020
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-30 01:44:39

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - jiy2020/Stored-XSS-leading-to-Remote-Code-Execution-Vulnerability-in-gpu-jupyter-
GitHub - jiy2020/Stored-XSS-leading-to-Remote-Code-Execution-Vulnerability-in-gpu-jupyter-
Contribute to jiy2020/Stored-XSS-leading-to-Remote-Code-Execution-Vulnerability-in-gpu-jupyter- development by creating an account on GitHub.
XSS Stored
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE #POC

📦 项目名称： CVE-2023-43364-Searchor-RCE-Exploit
👤 项目作者： Herick-Costa
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-30 00:39:40

📝 项目描述：
POC exploit via unsafe `eval()` usage in Searchor (< 2.4.2)

🔗 点击访问项目地址
GitHub
GitHub - Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit: POC exploit via unsafe `eval()` usage in Searchor (≤ 2.4.2)
GitHub - Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit: POC exploit via unsafe `eval()` usage in Searchor (≤ 2.4.2)
POC exploit via unsafe `eval()` usage in Searchor (≤ 2.4.2) - Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit
RCE CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Inject

📦 项目名称： SeDebugAbuse
👤 项目作者： jaytiwari05
🛠 开发语言： C++
⭐ Star数量： 3 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-30 00:01:31

📝 项目描述：
A proof-of-concept tool that abuses SeDebugPrivilege to inject shellcode into SYSTEM processes on Windows. Supports RC4-encrypted payloads and cross-compilation from Linux via MinGW.

🔗 点击访问项目地址
GitHub
GitHub - jaytiwari05/SeDebugAbuse: A proof-of-concept tool that abuses SeDebugPrivilege to inject shellcode into SYSTEM processes…
GitHub - jaytiwari05/SeDebugAbuse: A proof-of-concept tool that abuses SeDebugPrivilege to inject shellcode into SYSTEM processes…
A proof-of-concept tool that abuses SeDebugPrivilege to inject shellcode into SYSTEM processes on Windows. Supports RC4-encrypted payloads and cross-compilation from Linux via MinGW. - jaytiwari05/...
Shellcode Inject
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Stored

📦 项目名称： VulnBank-Exploit-Stored-XSS-Weak-JWT-Signature-Validation-Admin-Access-
👤 项目作者： cybergabby
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 23:19:38

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - cybergabby/VulnBank-Exploit-Stored-XSS-Weak-JWT-Signature-Validation-Admin-Access-
GitHub - cybergabby/VulnBank-Exploit-Stored-XSS-Weak-JWT-Signature-Validation-Admin-Access-
Contribute to cybergabby/VulnBank-Exploit-Stored-XSS-Weak-JWT-Signature-Validation-Admin-Access- development by creating an account on GitHub.
XSS Stored
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-56782-Gorse-Auth-Bypass
👤 项目作者： BiiTts
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 22:10:15

📝 项目描述：
CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.

🔗 点击访问项目地址
GitHub
GitHub - BiiTts/CVE-2026-56782-Gorse-Auth-Bypass: CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key…
GitHub - BiiTts/CVE-2026-56782-Gorse-Auth-Bypass: CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key…
CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e. - BiiTts/CVE-2026-56782-Gorse-Auth-Bypass
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： Redline-Vidar-NJRat-Raccoon-C2-Panel
👤 项目作者： dohoangtungduong24
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 22:01:21

📝 项目描述：
Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon 2026

🔗 点击访问项目地址
GitHub
GitHub - dohoangtungduong24/Redline-Vidar-NJRat-Raccoon-C2-Panel: Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon…
GitHub - dohoangtungduong24/Redline-Vidar-NJRat-Raccoon-C2-Panel: Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon…
Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon 2026 - dohoangtungduong24/Redline-Vidar-NJRat-Raccoon-C2-Panel
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-53753-Crawl4AI-RCE
👤 项目作者： BiiTts
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 21:09:01

📝 项目描述：
CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e.

🔗 点击访问项目地址
GitHub
GitHub - BiiTts/CVE-2026-53753-Crawl4AI-RCE: CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back).…
CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e. - BiiTts/CVE-2026-53753-Crawl4AI-RCE
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit #RCE

📦 项目名称： CVE-2026-48907
👤 项目作者： K3ysTr0K3R
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 21:36:25

📝 项目描述：
CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execution (RCE)

🔗 点击访问项目地址
GitHub
GitHub - K3ysTr0K3R/CVE-2026-48907: CVE-2026
GitHub - K3ysTr0K3R/CVE-2026-48907: CVE-2026
CVE-2026 . Contribute to K3ysTr0K3R/CVE-2026-48907 development by creating an account on GitHub.
CVE POC Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： NetProbe
👤 项目作者： Asad2liaqat
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 20:38:03

📝 项目描述：
IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting & watch mode. Python | Scapy | CustomTkinter | SQLite | Flask | FYP 2026

🔗 点击访问项目地址
GitHub
GitHub - Asad2liaqat/NetProbe: IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting…
GitHub - Asad2liaqat/NetProbe: IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting…
IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting & watch mode. Python | Scapy | CustomTkinter | SQLite | Flask | FYP 2026 - Asad2liaqat/NetProbe
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Xray #POC

📦 项目名称： em-cl-xray-poc
👤 项目作者： thnguyenvn
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 21:01:54

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - thnguyenvn/em-cl-xray-poc
GitHub - thnguyenvn/em-cl-xray-poc
Contribute to thnguyenvn/em-cl-xray-poc development by creating an account on GitHub.
Xray POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #GitLab #EXP

📦 项目名称： simplon-azure-OCID-tp
👤 项目作者： WhiteMuush
🛠 开发语言： Shell
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 19:59:18

📝 项目描述：
TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure Container Apps via GitLab CI, avec authentification OIDC (sans secrets).

🔗 点击访问项目地址
GitHub
GitHub - WhiteMuush/simplon-azure-OCID-tp: TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure…
GitHub - WhiteMuush/simplon-azure-OCID-tp: TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure…
TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure Container Apps via GitLab CI, avec authentification OIDC (sans secrets). - WhiteMuush/simplon-azure-OCID-tp
GitLab EXP
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Inject

📦 项目名称： SeDebugPriv
👤 项目作者： stillbigjosh
🛠 开发语言： PowerShell
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 19:59:54

📝 项目描述：
SeDebugPrivileged shellcode injector

🔗 点击访问项目地址
GitHub
GitHub - stillbigjosh/SeDebugPriv: SeDebugPrivileged shellcode injector
GitHub - stillbigjosh/SeDebugPriv: SeDebugPrivileged shellcode injector
SeDebugPrivileged shellcode injector. Contribute to stillbigjosh/SeDebugPriv development by creating an account on GitHub.
Shellcode Inject
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： sentinel-py
👤 项目作者： Baylox
🛠 开发语言： Python
⭐ Star数量： 3 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 19:58:56

📝 项目描述：
SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security checks such as port scanning, SSL certificate analysis, and HTTP header inspection. Designed for learning, auditing, and internal testing.

🔗 点击访问项目地址
GitHub
GitHub - Baylox/sentinel-py: SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security…
GitHub - Baylox/sentinel-py: SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security…
SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security checks such as port scanning, SSL certificate analysis, and HTTP header inspection. Designed f...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #malware

📦 项目名称： YameenSec
👤 项目作者： YameenShaikh07
🛠 开发语言： Rich Text Format
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 18:27:41

📝 项目描述：
A collection of my cybersecurity work — pentest write-ups, malware analysis, Sigma & YARA rules.

🔗 点击访问项目地址
GitHub
GitHub - YameenShaikh07/YameenSec: A collection of my cybersecurity work — pentest write-ups, malware analysis, Sigma & YARA rules.
A collection of my cybersecurity work — pentest write-ups, malware analysis, Sigma & YARA rules. - YameenShaikh07/YameenSec
YARA rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE #POC

📦 项目名称： exploitrank
👤 项目作者： rinz0x0cruz
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 18:59:51

📝 项目描述：
Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions, offline dashboard. Go, key-free.

🔗 点击访问项目地址
GitHub
GitHub - rinz0x0cruz/exploitrank: Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions…
GitHub - rinz0x0cruz/exploitrank: Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions…
Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions, offline dashboard. Go, key-free. - rinz0x0cruz/exploitrank
Exploit CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： 2B-remote-agent
👤 项目作者： 2B-Systems
🛠 开发语言： Python
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 17:51:03

📝 项目描述：
Advanced remote system management framework featuring an asynchronous C agent and scalable Python C2 listener.

🔗 点击访问项目地址
GitHub
GitHub - 2B-Systems/2B-remote-agent: Advanced remote system management framework featuring an asynchronous C agent and scalable…
Advanced remote system management framework featuring an asynchronous C agent and scalable Python C2 listener. - 2B-Systems/2B-remote-agent
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Evasion #EDR

📦 项目名称： Advanced-Syscall-And-EDR-Evasion-Research
👤 项目作者： WhyzperMe
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 17:23:25

📝 项目描述：
Advanced Windows EDR evasion research project combining Halo's Gate, Tartarus Gate, Indirect Syscalls, Module Stomping, and APC Injection for stealthy shellcode execution.

🔗 点击访问项目地址
GitHub
GitHub - WhyzperMe/Advanced-Syscall-And-EDR-Evasion-Research: Advanced Windows EDR evasion research project combining Halo's Gate…
GitHub - WhyzperMe/Advanced-Syscall-And-EDR-Evasion-Research: Advanced Windows EDR evasion research project combining Halo's Gate…
Advanced Windows EDR evasion research project combining Halo's Gate, Tartarus Gate, Indirect Syscalls, Module Stomping, and APC Injection for stealthy shellcode execution. - WhyzperMe/Advan...
Shellcode Evasion EDR
Before
After
Back to Top