📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！
更新了：漏洞利用
描述：本项目用于搜集 2022 年的漏洞，注意：本项目并不刻意搜集 POC 或 EXP，主要以CVE-2021、CVE-2022 为关键词，包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用
URL：https://github.com/binganao/vulns-2022
更新了：漏洞利用
描述：本项目用于搜集 2022 年的漏洞，注意：本项目并不刻意搜集 POC 或 EXP，主要以CVE-2021、CVE-2022 为关键词，包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用
URL：https://github.com/binganao/vulns-2022
GitHub
GitHub - binganao/vulns-2022: 本项目用于搜集 2022 年的漏洞，注意：本项目并不刻意搜集 POC 或 EXP，主要以CVE-2021、CVE-2022 为关键词，包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用
本项目用于搜集 2022 年的漏洞，注意：本项目并不刻意搜集 POC 或 EXP，主要以CVE-2021、CVE-2022 为关键词，包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用 - GitHub - binganao/vulns-2022: 本项目用于搜集 2022 年的漏洞，注意：本项目并不刻意搜集 POC 或 EXP，主要以CVE-2021、CVE-2022 为关键词，...
GitHub监控消息提醒！！！
更新了：漏洞利用
描述：Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
URL：https://github.com/wjl110/Clash_for_Windows-poc-rce-
更新了：漏洞利用
描述：Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
URL：https://github.com/wjl110/Clash_for_Windows-poc-rce-
GitHub
GitHub - wjl110/Clash_for_Windows-poc-rce-: Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用 - wjl110/Clash_for_Windows-poc-rce-
GitHub监控消息提醒！！！
更新了：漏洞利用
描述：Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
URL：https://github.com/wjl110/Clash_for_Windows--
更新了：漏洞利用
描述：Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
URL：https://github.com/wjl110/Clash_for_Windows--
GitHub
GitHub - wjl110/Clash_for_Windows-poc-rce-: Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用 - GitHub - wjl110/Clash_for_Windows-poc-rce-: Clash_for_Windows远程代码执行漏洞:漏洞利用poc,远程rce ,打开即用,开箱即用
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：Apache APISIX batch-requests RCE(CVE-2022-24112)
URL：https://github.com/Axx8/CVE-2022-24112
更新了：CVE-2022
描述：Apache APISIX batch-requests RCE(CVE-2022-24112)
URL：https://github.com/Axx8/CVE-2022-24112
GitHub
GitHub - Axx8/CVE-2022-24112: Apache APISIX batch-requests RCE(CVE-2022-24112)
Apache APISIX batch-requests RCE(CVE-2022-24112). Contribute to Axx8/CVE-2022-24112 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：CVE-2022-24086 about Magento RCE
URL：https://github.com/Mr-xn/CVE-2022-24086
更新了：CVE-2022
描述：CVE-2022-24086 about Magento RCE
URL：https://github.com/Mr-xn/CVE-2022-24086
GitHub监控消息提醒！！！
更新了：Red Team
描述：方便红队人员对目标站点进行安全检测，快速获取资产。It is convenient for red team personnel to conduct security detection on the target site and quickly obtain assets.
URL：https://github.com/joseljim/URC_Route_Planning
更新了：Red Team
描述：方便红队人员对目标站点进行安全检测，快速获取资产。It is convenient for red team personnel to conduct security detection on the target site and quickly obtain assets.
URL：https://github.com/joseljim/URC_Route_Planning
GitHub
GitHub - joseljim/URC_Autonomous_Navigation: The University Rover Challenge (URC) is the world's premier robotics competition for…
The University Rover Challenge (URC) is the world's premier robotics competition for college students. Held annually in the desert of southern Utah in the United States, URC challenges stu...
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers
URL：https://github.com/p0dalirius/CVE-2022-21907-http.sys
更新了：CVE-2022
描述：Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers
URL：https://github.com/p0dalirius/CVE-2022-21907-http.sys
GitHub
GitHub - p0dalirius/CVE-2022-21907-http.sys: Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel…
Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers - p0dalirius/CVE-2022-21907-http.sys
GitHub监控消息提醒！！！
更新了：内网渗透
描述：内网渗透测试工具，弱密码爆破、信息收集和漏洞扫描
URL：https://github.com/Curry32/Network_Security
更新了：内网渗透
描述：内网渗透测试工具，弱密码爆破、信息收集和漏洞扫描
URL：https://github.com/Curry32/Network_Security
GitHub
GitHub - Curry32/Network_Security: 这个Git仓库主要是提供网络安全的学习资料，是我自己平时学习记录下来的笔记，目前只有Python语言的学习笔记，但未来还将不断更新，内容将包括但不局限于编程语言、数据库、Linux和…
这个Git仓库主要是提供网络安全的学习资料，是我自己平时学习记录下来的笔记，目前只有Python语言的学习笔记，但未来还将不断更新，内容将包括但不局限于编程语言、数据库、Linux和Shell编程、计算机基础知识、操作系统、计算机网络、网络协议分析、数据结构和算法、信息安全数学基础、密码学、Kali渗透测试课程的学习资料，这些内容在后续都会呈现。我这么做的目的也是本着开源的精神，我本科读的是...
GitHub监控消息提醒！！！
更新了：Cobalt Strike
描述：Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
URL：https://github.com/Cobalt-Strike/community_kit
更新了：Cobalt Strike
描述：Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
URL：https://github.com/Cobalt-Strike/community_kit
GitHub
GitHub - Cobalt-Strike/community_kit: Cobalt Strike is a post-exploitation framework designed to be extended and customized by…
Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be cha...
GitHub监控消息提醒！！！
更新了：红队
描述：方便红队人员对目标站点进行安全检测，快速获取资产。It is convenient for red team personnel to conduct security detection on the target site and quickly obtain assets.
URL：https://github.com/ExpLangcn/WanLi
更新了：红队
描述：方便红队人员对目标站点进行安全检测，快速获取资产。It is convenient for red team personnel to conduct security detection on the target site and quickly obtain assets.
URL：https://github.com/ExpLangcn/WanLi
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：CVE-2022-0185 POC and Docker and simple Analysis write up
URL：https://github.com/chenaotian/CVE-2022-0185
更新了：CVE-2022
描述：CVE-2022-0185 POC and Docker and simple Analysis write up
URL：https://github.com/chenaotian/CVE-2022-0185
GitHub
GitHub - chenaotian/CVE-2022-0185: CVE-2022-0185 POC and Docker and Analysis write up
CVE-2022-0185 POC and Docker and Analysis write up - chenaotian/CVE-2022-0185
GitHub监控消息提醒！！！
更新了：Red Team
描述：Red Team and Offensive Security Scanning and Reconnaisance Tool for Companies and Pentesters.
URL：https://github.com/Jistrokz/TheDigger
更新了：Red Team
描述：Red Team and Offensive Security Scanning and Reconnaisance Tool for Companies and Pentesters.
URL：https://github.com/Jistrokz/TheDigger
GitHub
GitHub - Jistrokz/TheDigger: Red Team and Offensive Security Scanning and Reconnaisance Tool for Companies and Pentesters.
Red Team and Offensive Security Scanning and Reconnaisance Tool for Companies and Pentesters. - GitHub - Jistrokz/TheDigger: Red Team and Offensive Security Scanning and Reconnaisance Tool for Comp...
GitHub监控消息提醒！！！
更新了：Red Team
描述：Red Team Suite Key Management & Utility Software
URL：https://github.com/Tech-Slayers/RTS-Encryption-Manager
更新了：Red Team
描述：Red Team Suite Key Management & Utility Software
URL：https://github.com/Tech-Slayers/RTS-Encryption-Manager
GitHub
GitHub - Tech-Slayers/RTS-Encryption-Manager: Red Team Suite Key Management & Utility Software
Red Team Suite Key Management & Utility Software. Contribute to Tech-Slayers/RTS-Encryption-Manager development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：Red Team
描述：Red Team vs. Blue Team scenario in which you I played the role of both pentester and SOC analyst.
URL：https://github.com/Ogichka/Red-Vs.-Blue-Team-Project
更新了：Red Team
描述：Red Team vs. Blue Team scenario in which you I played the role of both pentester and SOC analyst.
URL：https://github.com/Ogichka/Red-Vs.-Blue-Team-Project
GitHub
GitHub - Ogichka/Red-Vs.-Blue-Team-Project: Red Team vs. Blue Team scenario in which I played the role of both pentester and SOC…
Red Team vs. Blue Team scenario in which I played the role of both pentester and SOC analyst. - GitHub - Ogichka/Red-Vs.-Blue-Team-Project: Red Team vs. Blue Team scenario in which I played the rol...
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：CVE-2022-24112：Apache APISIX apisix/batch-requests RCE
URL：https://github.com/Mr-xn/CVE-2022-24112
更新了：CVE-2022
描述：CVE-2022-24112：Apache APISIX apisix/batch-requests RCE
URL：https://github.com/Mr-xn/CVE-2022-24112
GitHub
GitHub - Mr-xn/CVE-2022-24112: CVE-2022-24112：Apache APISIX apisix/batch-requests RCE
CVE-2022-24112：Apache APISIX apisix/batch-requests RCE - Mr-xn/CVE-2022-24112
GitHub监控消息提醒！！！
更新了：Cobalt Strike
描述：The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
URL：https://github.com/N7WEra/SharpAllTheThings
更新了：Cobalt Strike
描述：The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
URL：https://github.com/N7WEra/SharpAllTheThings
GitHub
GitHub - N7WEra/SharpAllTheThings: The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike…
The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command. - N7WEra/SharpAllTheThings
GitHub监控消息提醒！！！
更新了：后渗透
描述：ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
URL：https://github.com/ffffffff0x/1earn
更新了：后渗透
描述：ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
URL：https://github.com/ffffffff0x/1earn
GitHub
GitHub - ffffffff0x/1earn: ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup - ffffffff0x/1earn
GitHub监控消息提醒！！！
更新了：CVE-2022
描述：CVE-2022-24112 check
URL：https://github.com/coconut20/CVE-2022-21907-RCE-POC
更新了：CVE-2022
描述：CVE-2022-24112 check
URL：https://github.com/coconut20/CVE-2022-21907-RCE-POC
GitHub
GitHub - coconut20/CVE-2022-21907-RCE-POC: CVE-2022-21907 Mass Exploitation tool written in Python 3 compatible with lists of URL/IPs.…
CVE-2022-21907 Mass Exploitation tool written in Python 3 compatible with lists of URL/IPs. For a large number of targets you can increase the number of threads, we don't recommend more tha...
