​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
ㅤ
#频道互推 #频道推荐

◈ 🌈破解软件分享✨
◈ Nf4Kz | 4K 蓝光影院
◈ 「 叙事诗 」影像与文字 ✨
◈ 夸克百度UC迅雷网盘资源分享
◈ 台灣精選生活素材
◈ Vmeis | 唯美🍥
◈ 🌈乐趣驿站🎈
◈ 🍉 猹的快乐基地
◈ 愚伯的文案场馆
◈ 🇩🇪德國精選生活素材
◈ 红果果爆款微短剧🍎
◈ 🇯🇵日本精選生活素材
ㅤ
ꕥ 🔥六合彩飞投|🇭🇰港彩|🇲🇴新澳彩
ꕥ 广告位招租

Powered by @PSDhutui_bot
频道互推 频道推荐
🚨 GitHub 监控消息提醒

🚨 发现关键词： #POC #CVE #RCE

📦 项目名称： attackwatch-vulnerability-poc
👤 项目作者： fankh
🛠 开发语言： Python
⭐ Star数量： 11 | 🍴 Fork数量： 1
📅 更新时间： 2026-07-01 22:07:36

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - fankh/attackwatch-vulnerability-poc
Contribute to fankh/attackwatch-vulnerability-poc development by creating an account on GitHub.
POC CVE RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： HATCHERY
👤 项目作者： aiagentmackenzie-lang
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 21:42:29

📝 项目描述：
Malware Sandbox Engine. Automated static & dynamic analysis: intake, YARA scanning, Docker sandbox execution, IOC extraction, STIX export, and React dashboard. Built for safe malware triage and detonation.

🔗 点击访问项目地址
GitHub
GitHub - aiagentmackenzie-lang/HATCHERY: Malware Sandbox Engine. Automated static & dynamic analysis: intake, YARA scanning, Docker…
GitHub - aiagentmackenzie-lang/HATCHERY: Malware Sandbox Engine. Automated static & dynamic analysis: intake, YARA scanning, Docker…
Malware Sandbox Engine. Automated static & dynamic analysis: intake, YARA scanning, Docker sandbox execution, IOC extraction, STIX export, and React dashboard. Built for safe malware triage...
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #malware

📦 项目名称： yaratune
👤 项目作者： Danush-Aries
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 21:56:14

📝 项目描述：
Generate a YARA rule from real malware + benign corpora, auto-tune it to zero false positives against the benign corpus, and emit a precision/recall test-evidence report. Modernizes the abandoned yarGen with an FP-tuning loop + proof.

🔗 点击访问项目地址
GitHub
GitHub - Danush-Aries/yaratune: Generate a YARA rule from real malware + benign corpora, auto-tune it to zero false positives against…
GitHub - Danush-Aries/yaratune: Generate a YARA rule from real malware + benign corpora, auto-tune it to zero false positives against…
Generate a YARA rule from real malware + benign corpora, auto-tune it to zero false positives against the benign corpus, and emit a precision/recall test-evidence report. Modernizes the abandoned y...
YARA rule malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE #POC

📦 项目名称： CVE-PoC-Hub
👤 项目作者： javokhir-sec
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 20:59:49

📝 项目描述：
🔬 Curated collection of working Proof-of-Concept exploits for latest CVEs — tested & verified

🔗 点击访问项目地址
GitHub
GitHub - javokhir-sec/CVE-PoC-Hub: 🔬 Curated collection of working Proof-of-Concept exploits for latest CVEs — tested & verified
GitHub - javokhir-sec/CVE-PoC-Hub: 🔬 Curated collection of working Proof-of-Concept exploits for latest CVEs — tested & verified
🔬 Curated collection of working Proof-of-Concept exploits for latest CVEs — tested & verified - javokhir-sec/CVE-PoC-Hub
Exploit CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： google-api-key-tools
👤 项目作者： Black0ffR
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 20:42:37

📝 项目描述：
Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys (AIza format). Multi-service scanner (24 endpoints), Burp extension, capability testing, referer bypass, evidence reports. For authorized bug bounty research.

🔗 点击访问项目地址
GitHub
GitHub - Black0ffR/google-api-key-tools: Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys…
GitHub - Black0ffR/google-api-key-tools: Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys…
Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys (AIza format). Multi-service scanner (24 endpoints), Burp extension, capability testing, referer bypass, evi...
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #Exploit #RCE

📦 项目名称： OpenSTAManager_RCE_Exploit-CVE-2026-38751-
👤 项目作者： hackthem
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 20:11:11

📝 项目描述：
OpenSTAManager RCE Exploit (CVE-2026-38751)

🔗 点击访问项目地址
GitHub
GitHub - hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751-: OpenSTAManager RCE Exploit (CVE-2026-38751)
GitHub - hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751-: OpenSTAManager RCE Exploit (CVE-2026-38751)
OpenSTAManager RCE Exploit (CVE-2026-38751). Contribute to hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751- development by creating an account on GitHub.
CVE Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE #Remote Code Execution

📦 项目名称： hookguard
👤 项目作者： Danush-Aries
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 20:01:56

📝 项目描述：
Static + runtime security scanner for Claude Code hooks. Catches the May-2026 SessionStart-RCE pattern in CI.

🔗 点击访问项目地址
GitHub
GitHub - Danush-Aries/hookguard: Static + runtime security scanner for Claude Code hooks. Catches the May-2026 SessionStart-RCE…
GitHub - Danush-Aries/hookguard: Static + runtime security scanner for Claude Code hooks. Catches the May-2026 SessionStart-RCE…
Static + runtime security scanner for Claude Code hooks. Catches the May-2026 SessionStart-RCE pattern in CI. - Danush-Aries/hookguard
RCE CVE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Execute

📦 项目名称： HollowGhost
👤 项目作者： Ares-21
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 18:32:21

📝 项目描述：
Stealthy process hollowing tool for deploying Meterpreter, Sliver, or custom payloads. Dodges Windows Defender with AES‑encrypted shellcode and a silent Nim stager.

🔗 点击访问项目地址
GitHub
GitHub - Ares-21/HollowGhost: Stealthy process hollowing tool for deploying Meterpreter, Sliver, or custom payloads. Dodges Windows…
Stealthy process hollowing tool for deploying Meterpreter, Sliver, or custom payloads. Dodges Windows Defender with AES‑encrypted shellcode and a silent Nim stager. - Ares-21/HollowGhost
Shellcode Execute
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #malware

📦 项目名称： mailstrix
👤 项目作者： myguard-labs
🛠 开发语言： Go
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 18:21:23

📝 项目描述：
Mailstrix is the owl that finds malware hiding in your mail. It takes hostile attachments apart — unwrapping OLE2/OOXML, VBA, RTF objects, PDFs, archives and nested carriers — until YARA detection rules can finally see the dangerous bits. It runs out-of-process behind Rspamd (async HTTP), SpamAssassin, an ICAP server, Dovecot Sieve, or standalone

🔗 点击访问项目地址
GitHub
GitHub - myguard-labs/mailstrix: Mailstrix is the owl that finds malware hiding in your mail. It takes hostile attachments apart…
GitHub - myguard-labs/mailstrix: Mailstrix is the owl that finds malware hiding in your mail. It takes hostile attachments apart…
Mailstrix is the owl that finds malware hiding in your mail. It takes hostile attachments apart — unwrapping OLE2/OOXML, VBA, RTF objects, PDFs, archives and nested carriers — until YARA detection ...
YARA rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： sxel
👤 项目作者： SentinelXofficial
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-01 18:45:54

📝 项目描述：
sxel — High-Performance Web Vulnerability Scanner

🔗 点击访问项目地址
GitHub
GitHub - SentinelXofficial/sxel: sxel — High-Performance Web Vulnerability Scanner
sxel — High-Performance Web Vulnerability Scanner. Contribute to SentinelXofficial/sxel development by creating an account on GitHub.
Vulnerability
Before
After
Back to Top