​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-70463
👤 项目作者： Fyyre
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-28 04:36:19

📝 项目描述：
Testing CVE-2026-70463 by Fyyre

🔗 点击访问项目地址
GitHub
GitHub - Fyyre/CVE-2026-70463: Testing CVE-2026-70463 by Fyyre
GitHub - Fyyre/CVE-2026-70463: Testing CVE-2026-70463 by Fyyre
Testing CVE-2026-70463 by Fyyre. Contribute to Fyyre/CVE-2026-70463 development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #DOM

📦 项目名称： dom_xss_lab
👤 项目作者： Eidosse
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-28 03:27:49

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - Eidosse/dom_xss_lab
GitHub - Eidosse/dom_xss_lab
Contribute to Eidosse/dom_xss_lab development by creating an account on GitHub.
XSS DOM
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Jenkins #CVE

📦 项目名称： kernel-matrix
👤 项目作者： ManuelFCastillo
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-28 03:43:29

📝 项目描述：
Jenkins-driven Linux kernel compatibility matrix — boots real VMs via libvirt and characterises the Falco eBPF security agent across distros and kernel versions.

🔗 点击访问项目地址
GitHub
GitHub - ManuelFCastillo/kernel-matrix: Jenkins-driven Linux kernel compatibility matrix — boots real VMs via libvirt and characterises…
GitHub - ManuelFCastillo/kernel-matrix: Jenkins-driven Linux kernel compatibility matrix — boots real VMs via libvirt and characterises…
Jenkins-driven Linux kernel compatibility matrix — boots real VMs via libvirt and characterises the Falco eBPF security agent across distros and kernel versions. - ManuelFCastillo/kernel-matrix
Jenkins CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： VulnShield-
👤 项目作者： marwaabdulla826-maker
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-28 02:35:41

📝 项目描述：
A lightweight, user-friendly web vulnerability scanner that audits web applications for HTTP security header misconfigurations, XSS, and SQL Injection threats in real-time.

🔗 点击访问项目地址
GitHub
GitHub - marwaabdulla826-maker/VulnShield-: A lightweight, user-friendly web vulnerability scanner that audits web applications…
A lightweight, user-friendly web vulnerability scanner that audits web applications for HTTP security header misconfigurations, XSS, and SQL Injection threats in real-time. - marwaabdulla826-maker/...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： lul-botnet-analysis
👤 项目作者： 1rhino2
🛠 开发语言： YARA
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-28 01:51:48

📝 项目描述：
Static analysis, IOCs, and YARA for a fresh multi-architecture Linux DDoS bot build.

🔗 点击访问项目地址
GitHub
GitHub - 1rhino2/lul-botnet-analysis: Static analysis, IOCs, and YARA for a fresh multi-architecture Linux DDoS bot build.
GitHub - 1rhino2/lul-botnet-analysis: Static analysis, IOCs, and YARA for a fresh multi-architecture Linux DDoS bot build.
Static analysis, IOCs, and YARA for a fresh multi-architecture Linux DDoS bot build. - 1rhino2/lul-botnet-analysis
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： CVE-2025-3248-Langflow-RCE
👤 项目作者： hideki233
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-28 00:09:01

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - hideki233/CVE-2025-3248-Langflow-RCE
GitHub - hideki233/CVE-2025-3248-Langflow-RCE
Contribute to hideki233/CVE-2025-3248-Langflow-RCE development by creating an account on GitHub.
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Command and Control

📦 项目名称： WRAT
👤 项目作者： Wasiq2006
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 23:53:59

📝 项目描述：
WRAT is a Python-based Remote Administration Tool that uses Discord WebSockets for Command and Control (C2), enabling remote monitoring, diagnostics, screen/webcam surveillance, and interactive PowerShell control.

🔗 点击访问项目地址
GitHub
GitHub - Wasiq2006/WRAT: WRAT is a Python-based Remote Administration Tool that uses Discord WebSockets for Command and Control…
GitHub - Wasiq2006/WRAT: WRAT is a Python-based Remote Administration Tool that uses Discord WebSockets for Command and Control…
WRAT is a Python-based Remote Administration Tool that uses Discord WebSockets for Command and Control (C2), enabling remote monitoring, diagnostics, screen/webcam surveillance, and interactive Pow...
C2 Command
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Vanta
👤 项目作者： Devcraz
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 23:59:21

📝 项目描述：
AI-powered web vulnerability scanner with terminal interface

🔗 点击访问项目地址
GitHub
GitHub - Devcraz/Vanta: AI-powered web vulnerability scanner with terminal interface
GitHub - Devcraz/Vanta: AI-powered web vulnerability scanner with terminal interface
AI-powered web vulnerability scanner with terminal interface - Devcraz/Vanta
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #Exploit

📦 项目名称： ghostlock-pfem10
👤 项目作者： diyiqiuye
🛠 开发语言： C
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 22:31:47

📝 项目描述：
GhostLock (CVE-2026-43499 / IonStack) research for OPPO Find X5 Pro (PFEM10): exploit chain, progress, blocker log, and OPPO 5-series kernel notes

🔗 点击访问项目地址
GitHub
GitHub - diyiqiuye/ghostlock-pfem10: GhostLock (CVE-2026-43499 / IonStack) research for OPPO Find X5 Pro (PFEM10): exploit chain…
GitHub - diyiqiuye/ghostlock-pfem10: GhostLock (CVE-2026-43499 / IonStack) research for OPPO Find X5 Pro (PFEM10): exploit chain…
GhostLock (CVE-2026-43499 / IonStack) research for OPPO Find X5 Pro (PFEM10): exploit chain, progress, blocker log, and OPPO 5-series kernel notes - diyiqiuye/ghostlock-pfem10
CVE Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE #POC

📦 项目名称： speculative-execution
👤 项目作者： rios0rios0
🛠 开发语言： C
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 21:55:12

📝 项目描述：
Academic research on speculative execution vulnerabilities (Meltdown, Spectre, Spoiler). C/C++ implementations exploring CPU security exploitation limits and sensitive information disclosure.

🔗 点击访问项目地址
GitHub
GitHub - rios0rios0/speculative-execution: Academic research on speculative execution vulnerabilities (Meltdown, Spectre, Spoiler).…
GitHub - rios0rios0/speculative-execution: Academic research on speculative execution vulnerabilities (Meltdown, Spectre, Spoiler).…
Academic research on speculative execution vulnerabilities (Meltdown, Spectre, Spoiler). C/C++ implementations exploring CPU security exploitation limits and sensitive information disclosure. - rio...
Exploit CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Fortinet #POC

📦 项目名称： fortigate-sdwan-poc
👤 项目作者： rmehunro
🛠 开发语言： Unknown
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 20:07:04

📝 项目描述：
This project documents the design, implementation, and validation of a Fortinet SD-WAN Proof of Concept (POC) built to evaluate transport redundancy, dynamic routing, and symmetric traffic forwarding across an enterprise network.

🔗 点击访问项目地址
GitHub
GitHub - rmehunro/fortigate-sdwan-poc: This project documents the design, implementation, and validation of a Fortinet SD-WAN Proof…
GitHub - rmehunro/fortigate-sdwan-poc: This project documents the design, implementation, and validation of a Fortinet SD-WAN Proof…
This project documents the design, implementation, and validation of a Fortinet SD-WAN Proof of Concept (POC) built to evaluate transport redundancy, dynamic routing, and symmetric traffic forwardi...
Fortinet POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： ai-vuln-scanner
👤 项目作者： AZA738
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 19:59:06

📝 项目描述：
Custom AI-driven vulnerability scanner & triage harness orchestrating Kali Linux tools and OpenAI APIs.

🔗 点击访问项目地址
GitHub
GitHub - AZA738/ai-vuln-scanner: Custom AI-driven vulnerability scanner & triage harness orchestrating Kali Linux tools and OpenAI…
GitHub - AZA738/ai-vuln-scanner: Custom AI-driven vulnerability scanner & triage harness orchestrating Kali Linux tools and OpenAI…
Custom AI-driven vulnerability scanner & triage harness orchestrating Kali Linux tools and OpenAI APIs. - AZA738/ai-vuln-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： The-Red-Project-by-Waseem-Turk
👤 项目作者： turkwaseem20-byte
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 17:27:41

📝 项目描述：
Conducted a black-box penetration test on a Linux target, using Nmap and Gobuster for reconnaissance. Identified and exploited IDOR, insecure session management, and RCE vulnerabilities. Escalated privileges to root through a PATH hijacking vulnerability in a misconfigured SUID binary. Documented findings, impact, and recommended security fixes.

🔗 点击访问项目地址
GitHub
GitHub - turkwaseem20-byte/The-Red-Project-by-Waseem-Turk: Conducted a black-box penetration test on a Linux target, using Nmap…
Conducted a black-box penetration test on a Linux target, using Nmap and Gobuster for reconnaissance. Identified and exploited IDOR, insecure session management, and RCE vulnerabilities. Escalated ...
RCE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Nuclei #templates

📦 项目名称： templates-stats
👤 项目作者： projectdiscovery
🛠 开发语言： Go
⭐ Star数量： 10 | 🍴 Fork数量： 5
📅 更新时间： 2026-08-27 18:46:49

📝 项目描述：
A utility for extracting various meta data from nuclei-templates.

🔗 点击访问项目地址
GitHub
GitHub - projectdiscovery/templates-stats: A utility for extracting various meta data from nuclei-templates.
GitHub - projectdiscovery/templates-stats: A utility for extracting various meta data from nuclei-templates.
A utility for extracting various meta data from nuclei-templates. - projectdiscovery/templates-stats
Nuclei templates
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Thicket
👤 项目作者： DaHyper
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 17:53:09

📝 项目描述：
Dependency vulnerability scanner that tells you which CVEs actually reach your code. CLI in, web UI out.

🔗 点击访问项目地址
GitHub
GitHub - DaHyper/Thicket: Dependency vulnerability scanner that tells you which CVEs actually reach your code. CLI in, web UI out.
Dependency vulnerability scanner that tells you which CVEs actually reach your code. CLI in, web UI out. - DaHyper/Thicket
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Stored

📦 项目名称： stored-xss-security
👤 项目作者： Qruby626
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 17:37:34

📝 项目描述：
Aplikasi simulasi keamanan web untuk penelitian Stored XSS menggunakan Flask, Rule-Based Detection, dan Content Security Policy.

🔗 点击访问项目地址
XSS Stored
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Sliver #C2

📦 项目名称： Sliver-GUI
👤 项目作者： spsm94
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 18:00:21

📝 项目描述：
GUI for Sliver C2

🔗 点击访问项目地址
GitHub
spsm94/Sliver-GUI
spsm94/Sliver-GUI
GUI for Sliver C2. Contribute to spsm94/Sliver-GUI development by creating an account on GitHub.
Sliver C2
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： burp-ext_requestminimizer
👤 项目作者： g4nkd
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-27 17:52:40

📝 项目描述：
Burp Suite extension that minimizes HTTP requests by removing unnecessary parameters, headers, and cookies while preserving the original response behavior.

🔗 点击访问项目地址
GitHub
GitHub - g4nkd/burp-ext_requestminimizer: Burp Suite extension that minimizes HTTP requests by removing unnecessary parameters…
GitHub - g4nkd/burp-ext_requestminimizer: Burp Suite extension that minimizes HTTP requests by removing unnecessary parameters…
Burp Suite extension that minimizes HTTP requests by removing unnecessary parameters, headers, and cookies while preserving the original response behavior. - g4nkd/burp-ext_requestminimizer
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework #Beacon #Command and Control

📦 项目名称： CORVUS
👤 项目作者： MatrixTM26
🛠 开发语言： C
⭐ Star数量： 3 | 🍴 Fork数量： 1
📅 更新时间： 2026-08-27 17:49:56

📝 项目描述：
simple c2 example in C

🔗 点击访问项目地址
GitHub
GitHub - MatrixTM26/CORVUS: simple c2 example in C
GitHub - MatrixTM26/CORVUS: simple c2 example in C
simple c2 example in C. Contribute to MatrixTM26/CORVUS development by creating an account on GitHub.
C2 Framework Beacon Command
TG必备的搜索引擎，快搜kuai帮你发现有趣群组、频道、视频、音乐、电影、新闻 | Find cool stuff all in one bot!

机器人：@kuai @kuaia @kuaiaa

👉 https://t.me/kuai?start=a_3URZVD0
Before
After
Back to Top