​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：免杀
描述：白签名免杀
URL：https://github.com/MarZaKore/EvilCodeHiding

标签：#免杀
免杀
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：漏洞检测的小工具
URL：https://github.com/hanbufei/vulCheck

标签：#漏洞检测
漏洞检测
GitHub监控消息提醒！！！

更新了：应急响应
描述：用于批量Linux资源应急响应检查
URL：https://github.com/liuxinyu228/fireman

标签：#应急响应
GitHub
GitHub - liuxinyu228/fireman: 用于批量Linux资源应急响应检查
GitHub - liuxinyu228/fireman: 用于批量Linux资源应急响应检查
用于批量Linux资源应急响应检查. Contribute to liuxinyu228/fireman development by creating an account on GitHub.
应急响应
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2023-39362). Run it at your own risk!
URL：https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application

标签：#CVE-2023
GitHub
GitHub - m3ssap0/cacti-rce-snmp-options-vulnerable-application: WARNING: This is a vulnerable application to test the exploit for…
GitHub - m3ssap0/cacti-rce-snmp-options-vulnerable-application: WARNING: This is a vulnerable application to test the exploit for…
WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2023-39362). Run it at your own risk! - m3ssap0/cacti-rce-snmp-options-vulnerable-application
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：A simple webshell written in Go
URL：https://github.com/whitfieldsdad/remy

标签：#webshell
webshell
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-3124 PoC
URL：https://github.com/AmirWhiteHat/CVE-2023-3124

标签：#CVE-2023
GitHub
GitHub - AmirWhiteHat/CVE-2023-3124: CVE-2023-3124 PoC
GitHub - AmirWhiteHat/CVE-2023-3124: CVE-2023-3124 PoC
CVE-2023-3124 PoC. Contribute to AmirWhiteHat/CVE-2023-3124 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：A tool to fetch the RocketMQ broker configuration in order to discover indicators of compromise for CVE-2023-33246
URL：https://github.com/vulncheck-oss/fetch-broker-conf

标签：#CVE-2023
GitHub
GitHub - vulncheck-oss/fetch-broker-conf: A go-exploit for fetching the RocketMQ broker configuration in order to discover indicators…
GitHub - vulncheck-oss/fetch-broker-conf: A go-exploit for fetching the RocketMQ broker configuration in order to discover indicators…
A go-exploit for fetching the RocketMQ broker configuration in order to discover indicators of compromise for CVE-2023-33246 - vulncheck-oss/fetch-broker-conf
CVE
GitHub监控消息提醒！！！

更新了：红队
描述：蓝队分析研判工具箱，自带的反编译工具对红队也有帮助，有建议欢迎给我留言
URL：https://github.com/abc123info/BlueTeamTools

标签：#红队
GitHub
GitHub - abc123info/BlueTeamTools: 蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP…
GitHub - abc123info/BlueTeamTools: 蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP…
蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。 - abc123info/BlueTeamTools
红队
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-4634
URL：https://github.com/Patrowl/CVE-2023-4634

标签：#CVE-2023
GitHub
GitHub - Patrowl/CVE-2023-4634: CVE-2023-4634
GitHub - Patrowl/CVE-2023-4634: CVE-2023-4634
CVE-2023-4634. Contribute to Patrowl/CVE-2023-4634 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Mass exploit - CVE-2023-41538 < phpjabbers PHP Forum < Cross Site Scripting (XSS)
URL：https://github.com/codeb0ss/CVE-2023-41538-PoC

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-41507 A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.
URL：https://github.com/redblueteam/CVE-2023-41507

标签：#CVE-2023
GitHub
GitHub - redblueteam/CVE-2023-41507: CVE-2023-41507 A hard coded password in Super Store Finder v3.6 allows attackers to access…
GitHub - redblueteam/CVE-2023-41507: CVE-2023-41507 A hard coded password in Super Store Finder v3.6 allows attackers to access…
CVE-2023-41507 A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel. - redblueteam/CVE-2023-41507
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel.
URL：https://github.com/redblueteam/CVE-2023-41508

标签：#CVE-2023
GitHub
GitHub - redblueteam/CVE-2023-41508: CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access…
GitHub - redblueteam/CVE-2023-41508: CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access…
CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel. - redblueteam/CVE-2023-41508
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Script to exploit CVE-2023-38035
URL：https://github.com/mind2hex/MICS_Hunter

标签：#CVE-2023
GitHub
GitHub - mind2hex/MICS_Hunter: Script to exploit CVE-2023-38035
GitHub - mind2hex/MICS_Hunter: Script to exploit CVE-2023-38035
Script to exploit CVE-2023-38035. Contribute to mind2hex/MICS_Hunter development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：A Slack bot phishing framework for Red Teaming exercises
URL：https://github.com/Drew-Sec/Evil_Slackbot

标签：#Red Team
GitHub
GitHub - Drew-Sec/Evil_Slackbot: A Slack bot phishing framework for Red Teaming exercises
GitHub - Drew-Sec/Evil_Slackbot: A Slack bot phishing framework for Red Teaming exercises
A Slack bot phishing framework for Red Teaming exercises - GitHub - Drew-Sec/Evil_Slackbot: A Slack bot phishing framework for Red Teaming exercises
Red
GitHub监控消息提醒！！！

更新了：Red Team
描述：A Slack bot phishing framework for Red Teaming exercises
URL：https://github.com/Drew-Sec/Slack_Attack_Framework

标签：#Red Team
GitHub
GitHub - Drew-Sec/Evil_Slackbot: A Slack bot phishing framework for Red Teaming exercises
GitHub - Drew-Sec/Evil_Slackbot: A Slack bot phishing framework for Red Teaming exercises
A Slack bot phishing framework for Red Teaming exercises - GitHub - Drew-Sec/Evil_Slackbot: A Slack bot phishing framework for Red Teaming exercises
Red
GitHub监控消息提醒！！！

更新了：漏洞复现
描述：漏洞复现
URL：https://github.com/ly-test-fuzz/cve-recovery

标签：#漏洞复现
漏洞复现
GitHub监控消息提醒！！！

更新了：反序列化
描述：本项目基于RPC 通信原理使用C++编写的分布式TCP通信框架(RPC框架)。使用muduo网络库实现高并发的RPC同步调用请求处理，使用Protobuf进行序列化和反序列化，采用ZooKeeper作为服务注册配置管理中心提供服务注册和服务发现功能。
URL：https://github.com/Ge-ze/DistributedRPC

标签：#反序列化
GitHub
GitHub - Ge-ze/DistributedRPC: 本项目基于RPC 通信原理使用C++编写的分布式TCP通信框架(RPC框架)。使用muduo网络库实现高并发的RPC同步调用请求处理，使用Protobuf进行序列化和反序列化，采用ZooKe…
GitHub - Ge-ze/DistributedRPC: 本项目基于RPC 通信原理使用C++编写的分布式TCP通信框架(RPC框架)。使用muduo网络库实现高并发的RPC同步调用请求处理，使用Protobuf进行序列化和反序列化，采用ZooKe…
本项目基于RPC 通信原理使用C++编写的分布式TCP通信框架(RPC框架)。使用muduo网络库实现高并发的RPC同步调用请求处理，使用Protobuf进行序列化和反序列化，采用ZooKeeper作为服务注册配置管理中心提供服务注册和服务发现功能。 - GitHub - Ge-ze/DistributedRPC: 本项目基于RPC 通信原理使用C++编写的分布式TCP通信框架(RPC框架)...
反序列化
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-34039
URL：https://github.com/syedhafiz1234/CVE-2023-34039

标签：#CVE-2023
GitHub
GitHub - syedhafiz1234/CVE-2023-34039: CVE-2023-34039
GitHub - syedhafiz1234/CVE-2023-34039: CVE-2023-34039
CVE-2023-34039. Contribute to syedhafiz1234/CVE-2023-34039 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：nftables oob read/write exploit (CVE-2023-35001)
URL：https://github.com/syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-

标签：#CVE-2023
GitHub
GitHub - syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-: nftables oob read/write exploit (CVE-2023-35001)
GitHub - syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-: nftables oob read/write exploit (CVE-2023-35001)
nftables oob read/write exploit (CVE-2023-35001). Contribute to syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001- development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：tomcat mem webshell demo
URL：https://github.com/pacemrc/testMemShell

标签：#webshell
GitHub
GitHub - pacemrc/testMemShell: tomcat mem webshell demo
GitHub - pacemrc/testMemShell: tomcat mem webshell demo
tomcat mem webshell demo. Contribute to pacemrc/testMemShell development by creating an account on GitHub.
webshell
Before
After
Back to Top