​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-0824, CVE-2022-0829, File Manger privilege exploit
URL：https://github.com/gokul-ramesh/WebminRCE-exploit

标签：#CVE-2022
GitHub
GitHub - gokul-ramesh/WebminRCE-exploit: CVE-2022-0824, CVE-2022-0829, File Manger privilege exploit
GitHub - gokul-ramesh/WebminRCE-exploit: CVE-2022-0824, CVE-2022-0829, File Manger privilege exploit
CVE-2022-0824, CVE-2022-0829, File Manger privilege exploit - gokul-ramesh/WebminRCE-exploit
CVE
GitHub监控消息提醒！！！

更新了：漏洞POC
描述：自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！
URL：https://github.com/ExpLangcn/NucleiTP

标签：#漏洞POC
漏洞POC
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)
URL：https://github.com/cryxnet/CVE-2022-42889-RCE

标签：#CVE-2022
GitHub
GitHub - cryxnet/CVE-2022-42889-RCE: Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)
GitHub - cryxnet/CVE-2022-42889-RCE: Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)
Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability) - cryxnet/CVE-2022-42889-RCE
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：🐟原神自动钓鱼（原神钓鱼姬 | Genshin Fishing Toy | 原神釣り師）
URL：https://github.com/genshin-matrix/genshin-fishing-toy

标签：#钓鱼
GitHub
GitHub - genshin-matrix/genshin-fishing-toy: 🐟原神自动钓鱼(原神钓鱼姬 | Genshin Fishing Toy | 原神釣り師)
GitHub - genshin-matrix/genshin-fishing-toy: 🐟原神自动钓鱼(原神钓鱼姬 | Genshin Fishing Toy | 原神釣り師)
🐟原神自动钓鱼(原神钓鱼姬 | Genshin Fishing Toy | 原神釣り師). Contribute to genshin-matrix/genshin-fishing-toy development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：代码审计
描述：代码审计文件后缀筛选工具
URL：https://github.com/He1za1/ListFile

标签：#代码审计
GitHub
GitHub - He1za1/ListFile: 代码审计文件后缀筛选工具
代码审计文件后缀筛选工具. Contribute to He1za1/ListFile development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：渗透测试
描述：一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS)辅助分析工具
URL：https://github.com/sulab999/AppMessenger

标签：#渗透测试
GitHub
GitHub - sulab999/AppMessenger: 一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具
一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具 - sulab999/AppMessenger
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
URL：https://github.com/SpindleSec/cve-2022-31692

标签：#CVE-2022
GitHub
GitHub - blipzip/cve-2022-31692: A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE…
GitHub - blipzip/cve-2022-31692: A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE…
A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692 - blipzip/cve-2022-31692
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：这是一个钓鱼网页，仅供学习 Nuxt
URL：https://github.com/bigbug-gg/like-qq-login

标签：#钓鱼
GitHub
GitHub - bigbug-gg/like-qq-login: 钓鱼网页,仿照QQ登录界面 vue.js + nuxt.js + tailwindcss
钓鱼网页,仿照QQ登录界面 vue.js + nuxt.js + tailwindcss. Contribute to bigbug-gg/like-qq-login development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：getshell
描述：Some payload for getshell in web.
URL：https://github.com/DXHM/Usual_payload

标签：#getshell
GitHub
GitHub - DXHM/Usual_payload: Some payload for getshell in web.
GitHub - DXHM/Usual_payload: Some payload for getshell in web.
Some payload for getshell in web. Contribute to DXHM/Usual_payload development by creating an account on GitHub.
getshell
GitHub监控消息提醒！！！

更新了：钓鱼
描述：千梦网创108计第17计：钓鱼淘客深度玩法，利用兴趣爱好搭建百万淘客站
URL：https://github.com/qq488745278qq/100_2942

标签：#钓鱼
GitHub
GitHub - qq488745278qq/100_2942: 千梦网创108计第17计：钓鱼淘客深度玩法，利用兴趣爱好搭建百万淘客站
GitHub - qq488745278qq/100_2942: 千梦网创108计第17计：钓鱼淘客深度玩法，利用兴趣爱好搭建百万淘客站
千梦网创108计第17计：钓鱼淘客深度玩法，利用兴趣爱好搭建百万淘客站. Contribute to qq488745278qq/100_2942 development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：The first poc video presenting the sql injection test from ( WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661)
URL：https://github.com/APTIRAN/CVE-2022-21661

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：A Azure Exploitation Toolkit for Red Team & Pentesters
URL：https://github.com/SikretaLabs/BlueMap

标签：#Red Team
GitHub
GitHub - SikretaLabs/BlueMap: A Azure Exploitation Toolkit for Red Team & Pentesters
GitHub - SikretaLabs/BlueMap: A Azure Exploitation Toolkit for Red Team & Pentesters
A Azure Exploitation Toolkit for Red Team & Pentesters - SikretaLabs/BlueMap
Red
GitHub监控消息提醒！！！

更新了：钓鱼
描述：🐟 原神自动钓鱼机，有界面且操作简单 | Genshin Impact Auto Fishing Machine.
URL：https://github.com/emako/genshin-fishing-toy

标签：#钓鱼
钓鱼
GitHub监控消息提醒！！！

更新了：webshell
描述：A simple, yet sample, Rust webshell
URL：https://github.com/zinzloun/Sirus

标签：#webshell
GitHub
GitHub - zinzloun/SiRus: A simple, yet sample, Rust webshell
GitHub - zinzloun/SiRus: A simple, yet sample, Rust webshell
A simple, yet sample, Rust webshell . Contribute to zinzloun/SiRus development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：钓鱼
描述：猫之城自动钓鱼
URL：https://github.com/Lorpaves/CatCity-AutoFishing

标签：#钓鱼
GitHub
GitHub - Lorpaves/CatCity-AutoFishing: 猫之城自动钓鱼
GitHub - Lorpaves/CatCity-AutoFishing: 猫之城自动钓鱼
猫之城自动钓鱼. Contribute to Lorpaves/CatCity-AutoFishing development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：DrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field
URL：https://github.com/HarleyDoo/CVE-2022-32548-RCE-POC

标签：#CVE-2022
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus
URL：https://github.com/H4de5-7/schtask-bypass

标签：#免杀
免杀
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：PoC to exploit CVE-2022-43144
URL：https://github.com/mudassiruddin/CVE-2022-43144-Stored-XSS

标签：#CVE-2022
GitHub
GitHub - mudassiruddin/CVE-2022-43144-Stored-XSS: PoC to exploit CVE-2022-43144
GitHub - mudassiruddin/CVE-2022-43144-Stored-XSS: PoC to exploit CVE-2022-43144
PoC to exploit CVE-2022-43144. Contribute to mudassiruddin/CVE-2022-43144-Stored-XSS development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus
URL：https://github.com/H4de5-7/Bundler-bypass

标签：#免杀
免杀
GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-42889 (a.k.a. Text4Shell) RCE Proof of Concept
URL：https://github.com/sunnyvale-it/CVE-2022-42889-PoC

标签：#CVE-2022
GitHub
GitHub - sunnyvale-it/CVE-2022-42889-PoC: CVE-2022-42889 (a.k.a. Text4Shell) RCE Proof of Concept
GitHub - sunnyvale-it/CVE-2022-42889-PoC: CVE-2022-42889 (a.k.a. Text4Shell) RCE Proof of Concept
CVE-2022-42889 (a.k.a. Text4Shell) RCE Proof of Concept - sunnyvale-it/CVE-2022-42889-PoC
CVE
Before
After
Back to Top