​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-1974
URL：https://github.com/sandumjacob/IngressNightmare-POCs

标签：#CVE-2025
GitHub
GitHub - sandumjacob/IngressNightmare-POCs: CVE-2025-1974
GitHub - sandumjacob/IngressNightmare-POCs: CVE-2025-1974
CVE-2025-1974. Contribute to sandumjacob/IngressNightmare-POCs development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Sigma Rule for CVE-2025–29927 Detection
URL：https://github.com/elshaheedy/CVE-2025-29927-Sigma-Rule

标签：#CVE-2025
GitHub
GitHub - elshaheedy/CVE-2025-29927-Sigma-Rule: Sigma Rule for CVE-2025–29927 Detection
GitHub - elshaheedy/CVE-2025-29927-Sigma-Rule: Sigma Rule for CVE-2025–29927 Detection
Sigma Rule for CVE-2025–29927 Detection. Contribute to elshaheedy/CVE-2025-29927-Sigma-Rule development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
URL：https://github.com/0xWhoknows/CVE-2025-29927

标签：#CVE-2025
GitHub
GitHub - 0xWhoknows/CVE-2025-29927: Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process…
GitHub - 0xWhoknows/CVE-2025-29927: Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process…
Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process large URL lists, detect vulnerabilities, and save results. Features connection pooling, cachi...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
URL：https://github.com/ricsirigu/CVE-2025-29927

标签：#CVE-2025
GitHub
GitHub - ricsirigu/CVE-2025-29927: A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
GitHub - ricsirigu/CVE-2025-29927: A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass - GitHub - ricsirigu/CVE-2025-29927: A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A playground to test the RCE exploit for tomcat CVE-2025-24813
URL：https://github.com/u238/Tomcat-CVE_2025_24813

标签：#CVE-2025
GitHub
GitHub - u238/Tomcat-CVE_2025_24813: A playground to test the RCE exploit for tomcat CVE-2025-24813
GitHub - u238/Tomcat-CVE_2025_24813: A playground to test the RCE exploit for tomcat CVE-2025-24813
A playground to test the RCE exploit for tomcat CVE-2025-24813 - u238/Tomcat-CVE_2025_24813
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927の検証
URL：https://github.com/kuzushiki/CVE-2025-29927-test

标签：#CVE-2025
GitHub
GitHub - kuzushiki/CVE-2025-29927-test: CVE-2025-29927の検証
GitHub - kuzushiki/CVE-2025-29927-test: CVE-2025-29927の検証
CVE-2025-29927の検証. Contribute to kuzushiki/CVE-2025-29927-test development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927 Authorization Bypass in Next.js Middleware
URL：https://github.com/arvion-agent/next-CVE-2025-29927

标签：#CVE-2025
GitHub
GitHub - arvion-agent/next-CVE-2025-29927: CVE-2025-29927 Authorization Bypass in Next.js Middleware
CVE-2025-29927 Authorization Bypass in Next.js Middleware - arvion-agent/next-CVE-2025-29927
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Next.js POC for CVE-2025-29927
URL：https://github.com/azu/nextjs-cve-2025-29927-poc

标签：#CVE-2025
GitHub
GitHub - azu/nextjs-cve-2025-29927-poc: Next.js PoC for CVE-2025-29927
GitHub - azu/nextjs-cve-2025-29927-poc: Next.js PoC for CVE-2025-29927
Next.js PoC for CVE-2025-29927. Contribute to azu/nextjs-cve-2025-29927-poc development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Next.Js 权限绕过漏洞(CVE-2025-29927)
URL：https://github.com/iSee857/CVE-2025-29927

标签：#CVE-2025
GitHub
GitHub - iSee857/CVE-2025-29927: Next.Js 权限绕过漏洞(CVE-2025-29927)
GitHub - iSee857/CVE-2025-29927: Next.Js 权限绕过漏洞(CVE-2025-29927)
Next.Js 权限绕过漏洞(CVE-2025-29927). Contribute to iSee857/CVE-2025-29927 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Demo for Next.js middleware bypass - CVE-2025-29927
URL：https://github.com/fourcube/nextjs-middleware-bypass-demo

标签：#CVE-2025
GitHub
GitHub - fourcube/nextjs-middleware-bypass-demo: Demo for Next.js middleware bypass - CVE-2025-29927
GitHub - fourcube/nextjs-middleware-bypass-demo: Demo for Next.js middleware bypass - CVE-2025-29927
Demo for Next.js middleware bypass - CVE-2025-29927 - fourcube/nextjs-middleware-bypass-demo
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927 Exploit Checker
URL：https://github.com/RoyCampos/CVE-2025-29927

标签：#CVE-2025
GitHub
GitHub - RoyCampos/CVE-2025-29927: CVE-2025-29927 Exploit Checker
GitHub - RoyCampos/CVE-2025-29927: CVE-2025-29927 Exploit Checker
CVE-2025-29927 Exploit Checker. Contribute to RoyCampos/CVE-2025-29927 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927 lab
URL：https://github.com/strobes-security/nextjs-vulnerable-app

标签：#CVE-2025
GitHub
GitHub - strobes-security/nextjs-vulnerable-app: CVE-2025-29927 lab
GitHub - strobes-security/nextjs-vulnerable-app: CVE-2025-29927 lab
CVE-2025-29927 lab. Contribute to strobes-security/nextjs-vulnerable-app development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/davidmgaviria/CVE2_Jenkins_RCE

标签：#RCE
GitHub
GitHub - davidmgaviria/CVE2_Jenkins_RCE: A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability…
GitHub - davidmgaviria/CVE2_Jenkins_RCE: A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability…
A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. For educational use in the Hacking & Offensive Securi...
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：XWiki Admin Tools - CSRF to RCE
URL：https://github.com/Mehran-Seifalinia/CVE-2023-48292

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template cve-2024-4577, pentest, php, poc, rce-exploit, redteam
URL：https://github.com/creamylegum/CVE-2024-4577-PHP-RCE

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：漏洞复现
描述：漏洞复现文档，请不要危害互联网，仅供学习研究使用。
URL：https://github.com/dotXiaoWangSec/docs

标签：#漏洞复现
GitHub
GitHub - dotXiaoWangSec/docs: 漏洞复现文档，请不要危害互联网，仅供学习研究使用。
GitHub - dotXiaoWangSec/docs: 漏洞复现文档，请不要危害互联网，仅供学习研究使用。
漏洞复现文档，请不要危害互联网，仅供学习研究使用。. Contribute to dotXiaoWangSec/docs development by creating an account on GitHub.
漏洞复现
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：nps漏洞利用工具
URL：https://github.com/Ren-Bamboo/NpsPocExp

标签：#漏洞利用
GitHub
GitHub - Ren-Bamboo/NpsPocExp: nps漏洞利用工具
GitHub - Ren-Bamboo/NpsPocExp: nps漏洞利用工具
nps漏洞利用工具. Contribute to Ren-Bamboo/NpsPocExp development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+
URL：https://github.com/pleasantlag/cobalt_sync

标签：#Cobalt Strike
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-29927 Proof of Concept
URL：https://github.com/aydinnyunus/CVE-2025-29927

标签：#CVE-2025
GitHub
GitHub - aydinnyunus/CVE-2025-29927: CVE-2025-29927 Proof of Concept
GitHub - aydinnyunus/CVE-2025-29927: CVE-2025-29927 Proof of Concept
CVE-2025-29927 Proof of Concept. Contribute to aydinnyunus/CVE-2025-29927 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：PAN-OS auth bypass + RCE
URL：https://github.com/stupidgossi/CVE-2024-9474

标签：#RCE
RCE
Before
After
Back to Top