​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： wp2shell
👤 项目作者： JohenLastGen-JLG
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 21:39:44

📝 项目描述：
wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)

🔗 点击访问项目地址
GitHub
GitHub - JohenLastGen-JLG/wp2shell: wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)
GitHub - JohenLastGen-JLG/wp2shell: wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)
wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137) - JohenLastGen-JLG/wp2shell
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-21628_PoC
👤 项目作者： ChiefYoru
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 21:49:58

📝 项目描述：
Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla

🔗 点击访问项目地址
GitHub
GitHub - ChiefYoru/CVE-2026-21628_PoC: Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla
GitHub - ChiefYoru/CVE-2026-21628_PoC: Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla
Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla - ChiefYoru/CVE-2026-21628_PoC
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit

📦 项目名称： wp2shell-scan
👤 项目作者： fullhunt
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 20:45:11

📝 项目描述：
A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core

🔗 点击访问项目地址
GitHub
fullhunt/wp2shell-scan
fullhunt/wp2shell-scan
A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) — pre-authenticated remote code execution in WordPress core - fullhunt/wp2shell-scan
CVE POC Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit #RCE

📦 项目名称： CVE-2026-63030_PoC
👤 项目作者： ChiefYoru
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 20:59:27

📝 项目描述：
CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit

🔗 点击访问项目地址
GitHub
GitHub - ChiefYoru/CVE-2026-63030_PoC: CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit
GitHub - ChiefYoru/CVE-2026-63030_PoC: CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit
CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit - ChiefYoru/CVE-2026-63030_PoC
CVE POC Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF #CVE

📦 项目名称： CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh
👤 项目作者： rauljvc8
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 20:04:53

📝 项目描述：
Hands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it.

🔗 点击访问项目地址
GitHub
GitHub - rauljvc8/CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh: Hands-on vulnerability management case…
GitHub - rauljvc8/CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh: Hands-on vulnerability management case…
Hands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it. - rauljvc8/CVE-2025-68616-Detecting-and-Patching-an-...
SSRF CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： abdal-cve-2026-63030
👤 项目作者： ebrasha
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 20:02:51

📝 项目描述：
Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment.

🔗 点击访问项目地址
GitHub
GitHub - ebrasha/abdal-cve-2026-63030: Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect…
GitHub - ebrasha/abdal-cve-2026-63030: Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect…
Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shaf...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： ToxNetV2
👤 项目作者： dsagt315fgvds
🛠 开发语言： C
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 19:59:39

📝 项目描述：
ToxNetV2 C2 framework with bot_stub scanner

🔗 点击访问项目地址
GitHub
GitHub - dsagt315fgvds/ToxNetV2: ToxNetV2 C2 framework with bot_stub scanner
GitHub - dsagt315fgvds/ToxNetV2: ToxNetV2 C2 framework with bot_stub scanner
ToxNetV2 C2 framework with bot_stub scanner. Contribute to dsagt315fgvds/ToxNetV2 development by creating an account on GitHub.
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： intelthreadlinqs-mcp
👤 项目作者： threadlinqs-cmd
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 20:03:25

📝 项目描述：
Official MCP server for Threadlinqs Intelligence — 49 tools for threat intel, detections, IOCs, actors, C2, MITRE chains, and CVE/CWE. npm: intelthreadlinqs-mcp

🔗 点击访问项目地址
GitHub
GitHub - threadlinqs-cmd/intelthreadlinqs-mcp: Official MCP server for Threadlinqs Intelligence — 49 tools for threat intel, detections…
GitHub - threadlinqs-cmd/intelthreadlinqs-mcp: Official MCP server for Threadlinqs Intelligence — 49 tools for threat intel, detections…
Official MCP server for Threadlinqs Intelligence — 49 tools for threat intel, detections, IOCs, actors, C2, MITRE chains, and CVE/CWE. npm: intelthreadlinqs-mcp - threadlinqs-cmd/intelthreadlinqs-mcp
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： Burp_Thinker
👤 项目作者： orestescaminha
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 19:37:00

📝 项目描述：
O 'Burp_Thinker' é uma extensão para para integrar IA ao 'Burp Suite' e enviar requisições, através de um menu de contexto (Right click -> Send to AI).

🔗 点击访问项目地址
GitHub
GitHub - orestescaminha/Burp_Thinker: O 'Burp_Thinker' é uma extensão para para integrar IA ao 'Burp Suite' e enviar requisições…
GitHub - orestescaminha/Burp_Thinker: O 'Burp_Thinker' é uma extensão para para integrar IA ao 'Burp Suite' e enviar requisições…
O 'Burp_Thinker' é uma extensão para para integrar IA ao 'Burp Suite' e enviar requisições, através de um menu de contexto (Right click -> Send to AI). - orestescaminha/Burp_Thinker
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： WordPresShell
👤 项目作者： securelayer7
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 19:57:45

📝 项目描述：
Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)

🔗 点击访问项目地址
GitHub
GitHub - securelayer7/WordPresShell: Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)
Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core) - securelayer7/WordPresShell
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF #POC

📦 项目名称： ssrf-polyglot-test-1784401308
👤 项目作者： rotemreiss
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 19:02:02

📝 项目描述：
temp SSRF poc

🔗 点击访问项目地址
GitHub
GitHub - rotemreiss/ssrf-polyglot-test-1784401308: temp SSRF poc
GitHub - rotemreiss/ssrf-polyglot-test-1784401308: temp SSRF poc
temp SSRF poc. Contribute to rotemreiss/ssrf-polyglot-test-1784401308 development by creating an account on GitHub.
SSRF POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： CVE-2021-3129-Lab
👤 项目作者： theNareshofficial
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 18:57:04

📝 项目描述：
CVE-2021-3129: Laravel Debug Mode RCE - Complete exploitation lab with Python exploit, Docker container, and security analysis guide.

🔗 点击访问项目地址
GitHub
GitHub - theNareshofficial/CVE-2021-3129-Lab
Contribute to theNareshofficial/CVE-2021-3129-Lab development by creating an account on GitHub.
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #POC #CVE

📦 项目名称： wp2shell-poc
👤 项目作者： yoerivegt
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 19:02:38

📝 项目描述：
wp2shell (CVE-2026-60137 / CVE-2026-63030)

🔗 点击访问项目地址
GitHub
GitHub - yoerivegt/wp2shell-poc: wp2shell (CVE-2026-60137 / CVE-2026-63030)
wp2shell (CVE-2026-60137 / CVE-2026-63030). Contribute to yoerivegt/wp2shell-poc development by creating an account on GitHub.
POC CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-63030-POC
👤 项目作者： mrx-arafat
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 17:21:31

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - mrx-arafat/CVE-2026-63030-POC
GitHub - mrx-arafat/CVE-2026-63030-POC
Contribute to mrx-arafat/CVE-2026-63030-POC development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules

📦 项目名称： Auto-Secure-Chain
👤 项目作者： Ananyacodes
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 17:48:49

📝 项目描述：
an ECU firmware scanner, Finds insecure artifacts (hardcoded credentials, debug interfaces, cleartext services), detects PEM private keys, estimates entropy, runs YARA rules, and optionally verifies detached signatures using a PEM public key.

🔗 点击访问项目地址
GitHub
GitHub - Ananyacodes/Auto-Secure-Chain: an ECU firmware scanner, Finds insecure artifacts (hardcoded credentials, debug interfaces…
GitHub - Ananyacodes/Auto-Secure-Chain: an ECU firmware scanner, Finds insecure artifacts (hardcoded credentials, debug interfaces…
an ECU firmware scanner, Finds insecure artifacts (hardcoded credentials, debug interfaces, cleartext services), detects PEM private keys, estimates entropy, runs YARA rules, and optionally verifie...
YARA rules
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： WannaCry-YARA-Static-Detection-Lab
👤 项目作者： dontrellkwilson-cyber
🛠 开发语言： YARA
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 18:05:08

📝 项目描述：
This lab demonstrates how YARA can be used to identify malware-related indicators through static pattern matching.

🔗 点击访问项目地址
GitHub
GitHub - dontrellkwilson-cyber/WannaCry-YARA-Static-Detection-Lab: This lab demonstrates how YARA can be used to identify malware…
GitHub - dontrellkwilson-cyber/WannaCry-YARA-Static-Detection-Lab: This lab demonstrates how YARA can be used to identify malware…
This lab demonstrates how YARA can be used to identify malware-related indicators through static pattern matching. - dontrellkwilson-cyber/WannaCry-YARA-Static-Detection-Lab
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit

📦 项目名称： wp2shell
👤 项目作者： 0xWhoknows
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 17:33:49

📝 项目描述：
Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.

🔗 点击访问项目地址
GitHub
GitHub - 0xWhoknows/wp2shell: Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress…
GitHub - 0xWhoknows/wp2shell: Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress…
Automated exploit chain for CVE-2026-63030 / CVE-2026-60137 — unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports ...
CVE POC Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #RCE

📦 项目名称： wp2shell_scanner
👤 项目作者： zi3lak
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 17:56:49

📝 项目描述：
Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation.

🔗 点击访问项目地址
GitHub
GitHub - zi3lak/wp2shell_scanner: Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030…
GitHub - zi3lak/wp2shell_scanner: Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030…
Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation. - zi3lak/wp2shell_scanner
CVE RCE
TG必备的搜索引擎，快搜kuai帮你发现有趣群组、频道、视频、音乐、电影、新闻 | Find cool stuff all in one bot!

机器人：@kuai @kuaia @kuaiaa

👉 https://t.me/kuai?start=a_3URZVD0
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： YARA-Hello-World-Malware-Detection-Lab
👤 项目作者： dontrellkwilson-cyber
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-18 16:58:53

📝 项目描述：
This lab introduces malware analysis with YARA, an open-source pattern-matching tool used to detect files or processes that contain defined strings, regular expressions, or other conditions.

🔗 点击访问项目地址
GitHub
GitHub - dontrellkwilson-cyber/YARA-Hello-World-Malware-Detection-Lab: This lab introduces malware analysis with YARA, an open…
This lab introduces malware analysis with YARA, an open-source pattern-matching tool used to detect files or processes that contain defined strings, regular expressions, or other conditions. - dont...
YARA malware
Before
After
Back to Top