GitHub监控消息提醒！！！

更新了：代码审计
描述：大模型做代码审计挖漏洞
URL：https://github.com/llm-sec/code-audit-script-boy

标签：#代码审计

GitHub

GitHub - llm-sec/code-audit-script-boy: 大模型做代码审计挖漏洞

大模型做代码审计挖漏洞. Contribute to llm-sec/code-audit-script-boy development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：反序列化
描述：iOS json 序列化 、反序列化库
URL：https://github.com/HangZhouShuChengKeJi/ZBWJson

标签：#反序列化

GitHub

GitHub - HangZhouShuChengKeJi/ZBWJson: iOS json 序列化 、反序列化库

iOS json 序列化 、反序列化库. Contribute to HangZhouShuChengKeJi/ZBWJson development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：信息收集
描述：密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、端口扫描、批量信息权重查询、密码字典等功能
URL：https://github.com/haishikeji/QT-JYZ-YY

标签：#信息收集

GitHub

GitHub - haishikeji/QT-JYZ-YY: 加油站运营系统是一个集成了多种功能的综合管理平台，系统提供H5、小程序，支持微信支付、支付宝支付、拉卡拉支付。帮助加油站实现高效、精准的运营管理。该系统涵盖了从员工管理、广告投放（如轮播图广…

加油站运营系统是一个集成了多种功能的综合管理平台，系统提供H5、小程序，支持微信支付、支付宝支付、拉卡拉支付。帮助加油站实现高效、精准的运营管理。该系统涵盖了从员工管理、广告投放（如轮播图广告、优惠活动推广）到油品管理（包括油价、油号列表及油品信息维护）、资金管理（如资金流水监控、拉卡拉分账商户及接收方管理）、订单处理（涵盖订单列表、订单详情查看、退款订单管理）以及客户管理（例如加油卡发行、...

GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Homemade Aggressor scripts kit for Cobalt Strike
URL：https://github.com/nickvourd/CS-Aggressor-Kit

标签：#Cobalt Strike

GitHub

GitHub - nickvourd/CS-Aggressor-Kit: Homemade Aggressor scripts kit for Cobalt Strike

Homemade Aggressor scripts kit for Cobalt Strike. Contribute to nickvourd/CS-Aggressor-Kit development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：越权
描述：一个支持被动代理的调用 KIMI AI 进行越权漏洞检测的工具。
URL：https://github.com/Ed1s0nZ/PrivHunterAI

标签：#越权

GitHub

GitHub - Ed1s0nZ/PrivHunterAI: 一款通过被动代理方式，利用主流 AI（如 Kimi、DeepSeek、GPT 等）检测越权漏洞的工具。其核心检测功能依托相关 AI 引擎的开放 API 构建，支持 HTTPS 协议的数据传输与交互。

一款通过被动代理方式，利用主流 AI（如 Kimi、DeepSeek、GPT 等）检测越权漏洞的工具。其核心检测功能依托相关 AI 引擎的开放 API 构建，支持 HTTPS 协议的数据传输与交互。 - Ed1s0nZ/PrivHunterAI

GitHub监控消息提醒！！！

更新了：绕过
描述：一个使用Python开发的工具，通过修改gerber内文件的方法来绕过嘉立创白嫖PCB时的拆单检测
URL：https://github.com/zhangMonday/JLC-no-chaidan

标签：#绕过

GitHub

GitHub - zhangMonday/JLC-no-chaidan: 一个使用Python开发的工具，通过修改gerber内文件的方法来绕过嘉立创白嫖PCB时的拆单检测

一个使用Python开发的工具，通过修改gerber内文件的方法来绕过嘉立创白嫖PCB时的拆单检测. Contribute to zhangMonday/JLC-no-chaidan development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：RCE
描述：Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)
URL：https://github.com/watchtowrlabs/CVE-2025-0282

标签：#RCE

GitHub

GitHub - watchtowrlabs/CVE-2025-0282: Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282) - watchtowrlabs/CVE-2025-0282

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways
URL：https://github.com/sfewer-r7/CVE-2025-0282

标签：#CVE-2025

GitHub

GitHub - sfewer-r7/CVE-2025-0282: PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti…

PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways - sfewer-r7/CVE-2025-0282

GitHub监控消息提醒！！！

更新了：RCE
描述：xdebug 2.5.5 RCE exploit
URL：https://github.com/D3Ext/xdebug-exploit

标签：#RCE

GitHub

GitHub - D3Ext/xdebug-exploit: xdebug 2.5.5 RCE exploit

xdebug 2.5.5 RCE exploit. Contribute to D3Ext/xdebug-exploit development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：RCE
描述：xdebug 2.5.5 RCE exploit
URL：https://github.com/D3Ext/XDEBUG-Exploit

标签：#RCE

GitHub

GitHub - D3Ext/CVE-2015-10141: POC exploit for CVE-2015-10141

POC exploit for CVE-2015-10141. Contribute to D3Ext/CVE-2015-10141 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure REST API endpoints and install vulnerable plugins, risking RCE, SQLi, XSS, and backdoors.
URL：https://github.com/RonF98/CVE-2024-11972-POC

标签：#RCE

GitHub

GitHub - RonF98/CVE-2024-11972-POC: CVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure…

CVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure REST API endpoints and install vulnerable plugins, risking RCE, SQLi, XSS, and backdoors. - RonF9...

GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/mrmtwoj/CVE-2023-25136

标签：#RCE

GitHub

GitHub - mrmtwoj/CVE-2023-25136: This vulnerability is of the "double-free" type, which occurs during the processing of key exchange…

This vulnerability is of the "double-free" type, which occurs during the processing of key exchange (KEX) algorithms in OpenSSH. A "double-free" vulnerability ha...

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC of CVE-2025-22710
URL：https://github.com/DoTTak/CVE-2025-22710

标签：#CVE-2025

GitHub

GitHub - DoTTak/CVE-2025-22710: PoC of CVE-2025-22710

PoC of CVE-2025-22710. Contribute to DoTTak/CVE-2025-22710 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：Red Team
描述：Setup Active Directory with Sysmon and Attack on it using Crowbar , Generate Telemetry using Atomic Red Team and investigate the logs using Splunk
URL：https://github.com/muja789/Active-Directory-Project

标签：#Red Team

GitHub

GitHub - muja789/Active-Directory-Project: Setup Active Directory with Sysmon and Attack on it using Crowbar , Generate Telemetry…

Setup Active Directory with Sysmon and Attack on it using Crowbar , Generate Telemetry using Atomic Red Team and investigate the logs using Splunk - muja789/Active-Directory-Project

GitHub监控消息提醒！！！

更新了：Red Team
描述：This project automates the setup of work environments for Red Team operators, enabling faster deployment and operational readiness.
URL：https://github.com/Oni-kuki/RedTeam-Operator_Workstation

标签：#Red Team

GitHub

GitHub - Oni-kuki/RedTeam-Operator_Workstation: This project automates the setup of work environments for Red Team operators, enabling…

This project automates the setup of work environments for Red Team operators, enabling faster deployment and operational readiness. - Oni-kuki/RedTeam-Operator_Workstation

GitHub监控消息提醒！！！

更新了：反序列化
描述：JSFTomcatExample: 用Tomcat搭建的JSF框架简单Demo,用于学习和研究JSF反序列化。
URL：https://github.com/B0T1eR/JSFTomcatExample

标签：#反序列化

GitHub

GitHub - B0T1eR/JSFTomcatExample: JSFTomcatExample: 用Tomcat搭建的JSF框架简单Demo,用于学习和研究JSF反序列化。

JSFTomcatExample: 用Tomcat搭建的JSF框架简单Demo,用于学习和研究JSF反序列化。 - B0T1eR/JSFTomcatExample

GitHub监控消息提醒！！！

更新了：护网
描述：gateway2 执行程序发布版 此项目将维护网关2的最新稳定版发布版，请大家在此下载使用，不必到源码或示例中下载网关2。
URL：https://github.com/carocean/gateway2-release

标签：#护网

GitHub

GitHub - carocean/gateway2-release: gateway2 执行程序发布版 此项目将维护网关2的最新稳定版发布版，请大家在此下载使用，不必到源码或示例中下载网关2。

gateway2 执行程序发布版 此项目将维护网关2的最新稳定版发布版，请大家在此下载使用，不必到源码或示例中下载网关2。 - carocean/gateway2-release

GitHub监控消息提醒！！！

更新了：攻防
描述：森林攻防
URL：https://github.com/zhou274/Forestdefense

标签：#攻防

GitHub

GitHub - zhou274/Forestdefense: 森林攻防

森林攻防. Contribute to zhou274/Forestdefense development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：钓鱼
描述：AntiAutoFish 旨在检测并阻止服务器中的自动化钓鱼行为。 | AntiAutoFish is a Minecraft Bukkit/Spigot plugin designed to detect and prevent automated fishing on servers, ensuring fair gameplay.
URL：https://github.com/PSHNIM/AntiAutoFish

标签：#钓鱼

GitHub

GitHub - PSHNIM/AntiAutoFish: AntiAutoFish 旨在检测并阻止服务器中的自动化钓鱼行为。 | AntiAutoFish is a Minecraft Bukkit/Spigot plugin designed to…

AntiAutoFish 旨在检测并阻止服务器中的自动化钓鱼行为。 | AntiAutoFish is a Minecraft Bukkit/Spigot plugin designed to detect and prevent automated fishing on servers, ensuring fair gameplay. - PSHNIM/AntiAutoFish

GitHub监控消息提醒！！！

更新了：RCE
描述：REMOTE COMMAND EXECUTION RCE
URL：https://github.com/DarkspaceSoftwareandSecurity/SPIDERFOOT

标签：#RCE

GitHub

GitHub - DarkspaceSoftwareandSecurity/SPIDERFOOT: REMOTE COMMAND EXECUTION RCE

REMOTE COMMAND EXECUTION RCE . Contribute to DarkspaceSoftwareandSecurity/SPIDERFOOT development by creating an account on GitHub.