GitHub 红队武器库🚨

📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。

08:15 · Jan 2, 2025 · Thu

GitHub监控消息提醒！！！

更新了：反序列化
描述：ysoSimple：简易的Java漏洞利用工具，集成Java反序列化，Hessian反序列化，XStream反序列化，SnakeYaml反序列化，Shiro550，JSF反序列化，SSTI模板注入，JdbcAttackPayload，JNDIAttack，字节码生成。
URL：https://github.com/B0T1eR/ysoSimple

标签：#反序列化

GitHub

GitHub - B0T1eR/ysoSimple: ysoSimple：简易的Java漏洞利用工具，集成Java反序列化，Hessian反序列化，XStream反序列化，SnakeYaml反序列化，Shiro550，JSF反序列化，SSTI模板注入，…

ysoSimple：简易的Java漏洞利用工具，集成Java反序列化，Hessian反序列化，XStream反序列化，SnakeYaml反序列化，Shiro550，JSF反序列化，SSTI模板注入，JdbcAttackPayload，JNDIAttack，字节码生成。 - B0T1eR/ysoSimple

反序列化

05:31 · Jan 2, 2025 · Thu

GitHub监控消息提醒！！！

更新了：渗透测试
描述：PenSafe（渗透测试安全扫描器），能用上此工具说明测试系统很安全！！！
URL：https://github.com/yuning029/PenSafe

标签：#渗透测试

渗透测试

04:32 · Jan 2, 2025 · Thu

GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-49112 Windows LDAP RCE PoC and Metasploit Module
URL：https://github.com/BOl1o/CVE-2024-49112-RCE-PoC

标签：#CVE-2024

CVE

03:30 · Jan 2, 2025 · Thu

GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Jenkins CVE-2024-23897 POC : Arbitrary File Read Vulnerability Leading to RCE
URL：https://github.com/Marouane133/jenkins-lfi

标签：#CVE-2024

CVE

23:38 · Jan 1, 2025 · Wed

GitHub监控消息提醒！！！

更新了：RCE
描述：🐛 RCE w/ .mochi writeup.
URL：https://github.com/dceit/mochi-rce-poc

标签：#RCE

RCE

21:41 · Jan 1, 2025 · Wed

GitHub监控消息提醒！！！

更新了：RCE
描述：Simple PHP Photo Gallery 0.7 is vulnerable to Unauthenticated RFI. This script will attempt to turn that into RCE by automatically hosting a PHP reverse shell and then calling that shell back.
URL：https://github.com/beauknowstech/SimplePHPGal-RCE.py

标签：#RCE

GitHub

GitHub - beauknowstech/SimplePHPGal-RCE.py: Simple PHP Photo Gallery 0.7 is vulnerable to Unauthenticated RFI. This script will…

Simple PHP Photo Gallery 0.7 is vulnerable to Unauthenticated RFI. This script will attempt to turn that into RCE by automatically hosting a PHP reverse shell and then calling that shell back. - be...

RCE

20:22 · Jan 1, 2025 · Wed

GitHub监控消息提醒！！！

更新了：CVE-2024
描述：PoC for CVE-2024-53522 affecting HOSxP XE 4
URL：https://github.com/Safecloudth/CVE-2024-53522

标签：#CVE-2024

GitHub

GitHub - Safecloudth/CVE-2024-53522: PoC for CVE-2024-53522 affecting HOSxP XE 4

PoC for CVE-2024-53522 affecting HOSxP XE 4. Contribute to Safecloudth/CVE-2024-53522 development by creating an account on GitHub.

CVE

18:21 · Jan 1, 2025 · Wed

GitHub监控消息提醒！！！

更新了：CVE-2024
描述：LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112
URL：https://github.com/SafeBreach-Labs/CVE-2024-49112

标签：#CVE-2024

GitHub

GitHub - SafeBreach-Labs/CVE-2024-49113: LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113 - SafeBreach-Labs/CVE-2024-49113

CVE

11:40 · Jan 1, 2025 · Wed

GitHub监控消息提醒！！！

更新了：渗透测试
描述：Virgol渗透测试工具集
URL：https://github.com/VirgoLee/Virgol

标签：#渗透测试

GitHub

GitHub - VirgoLee/Virgol: Virgol渗透测试工具

Virgol渗透测试工具. Contribute to VirgoLee/Virgol development by creating an account on GitHub.

渗透测试

02:23 · Jan 1, 2025 · Wed

GitHub监控消息提醒！！！

更新了：RCE
描述：TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
URL：https://github.com/Zuk4r1/VulnKit

标签：#RCE

GitHub

GitHub - Zuk4r1/VulnKit: VulnKit es una herramienta de auditoría de seguridad que busca vulnerabilidades críticas como inyección…

VulnKit es una herramienta de auditoría de seguridad que busca vulnerabilidades críticas como inyección SQL, RCE, SSRF, deserialización insegura y XSS. Escanea encabezados de seguridad y ejecuta ex...

RCE

19:30 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-51442 write up and example config file
URL：https://github.com/mselbrede/CVE-2024-51442

标签：#CVE-2024

GitHub

GitHub - mselbrede/CVE-2024-51442: CVE-2024-51442 write up and example config file

CVE-2024-51442 write up and example config file. Contribute to mselbrede/CVE-2024-51442 development by creating an account on GitHub.

CVE

12:56 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/ajaykumarsangem/Remote-Code-Executor-for-Multiple-Programming-Languages

标签：#RCE

GitHub

GitHub - ajaykumarsangem/Remote-Code-Executor-for-Multiple-Programming-Languages: Developed a web-based executor supporting multiple…

Developed a web-based executor supporting multiple programming languages with user authentication (login/sign-up).– RCE Compiler that allows users to write, compile, and execute code in multiple p...

RCE

12:31 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/ajaykumarsangem/-Remote-Code-Executor-for-Multiple-Programming-Languages

标签：#RCE

RCE

10:18 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：hvv
描述：阿里云应急排查手册-运维hvv分享
URL：https://github.com/chaos198800/a-li-yun-ying-ji-pai-cha-shou-ce---yun-wei-hvv-fen-xiang

标签：#hvv

hvv

08:47 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：信息收集
描述：股票交流推广源码股票客户信息收集网站源码
URL：https://github.com/official-free12/gu_fS

标签：#信息收集

GitHub

GitHub - official-free12/gu_fS: 股票交流推广源码股票客户信息收集网站源码

股票交流推广源码股票客户信息收集网站源码. Contribute to official-free12/gu_fS development by creating an account on GitHub.

信息收集

07:45 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Cleo 远程代码执行漏洞批量检测脚本（CVE-2024-50623）
URL：https://github.com/iSee857/Cleo-CVE-2024-50623-PoC

标签：#CVE-2024

GitHub

GitHub - iSee857/Cleo-CVE-2024-50623-PoC: Cleo 远程代码执行漏洞批量检测脚本（CVE-2024-50623）

Cleo 远程代码执行漏洞批量检测脚本（CVE-2024-50623）. Contribute to iSee857/Cleo-CVE-2024-50623-PoC development by creating an account on GitHub.

CVE

07:17 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：护网
描述：2023奇安信护网面试题
URL：https://github.com/chaos198800/2023-qi-an-xin-hu-wang-mian-shi-ti

标签：#护网

护网

07:05 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：使用 Nuclei 进行日志分析,辅助蓝队人员快速挖掘WEB日志中的漏洞特征。
URL：https://github.com/ahisec/nla

标签：#漏洞挖掘

GitHub

GitHub - ahisec/nla: 使用 Nuclei 进行日志痕迹检测辅助蓝队人员检测WEB日志中的攻击痕迹

使用 Nuclei 进行日志痕迹检测辅助蓝队人员检测WEB日志中的攻击痕迹. Contribute to ahisec/nla development by creating an account on GitHub.

漏洞挖掘

06:54 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：代码审计
描述：java代码审计靶场笔记笔记
URL：https://github.com/chenkevon/JavaCodeAudit

标签：#代码审计

GitHub

chenkevon/JavaCodeAudit

java代码审计靶场笔记笔记. Contribute to chenkevon/JavaCodeAudit development by creating an account on GitHub.

代码审计

05:54 · Dec 31, 2024 · Tue

GitHub监控消息提醒！！！

更新了：RCE
描述：HackTheBox Writeup: SQL Injections - exploitation and mitigation techniques like enumeration, UNION injections, file reading/writing, and RCE for offensive security.
URL：https://github.com/ramyardaneshgar/HTB-Writeup-SQLInjection

标签：#RCE

GitHub

GitHub - ramyardaneshgar/HTB-Writeup-SQLInjection: HackTheBox Writeup: SQL Injections - exploitation and mitigation techniques…

HackTheBox Writeup: SQL Injections - exploitation and mitigation techniques like enumeration, UNION injections, file reading/writing, and RCE for offensive security. - ramyardaneshgar/HTB-Writeup-S...

RCE

Before

After

Home