​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：绕过
描述：pyjail (python jail) 绕过 一把梭 CTF 工具
URL：https://github.com/wubowuboOne/qoder-vip

标签：#绕过
GitHub
GitHub - wubowuboOne/qoder-vip: A tool that enables infinite account resets, spoofing of machine codes and device fingerprints…
A tool that enables infinite account resets, spoofing of machine codes and device fingerprints, and clearing of login states to bypass platform account limits.可以无限次重置账户、伪造机器码和设备指纹、清除登录状态以绕过平台账户限制的工...
绕过
GitHub监控消息提醒！！！

更新了：getshell
描述：🏠博客：https://getshell.icu
URL：https://github.com/SewellDinG/sewellding.github.io

标签：#getshell
getshell
GitHub监控消息提醒！！！

更新了：信息收集
描述：资产狩猎框架-AssetsHunter，信息收集是一项艺术~
URL：https://github.com/rabbitmask/AssetsHunter

标签：#信息收集
GitHub
GitHub - rabbitmask/AssetsHunter: 资产狩猎框架-AssetsHunter，信息收集是一项艺术~
GitHub - rabbitmask/AssetsHunter: 资产狩猎框架-AssetsHunter，信息收集是一项艺术~
资产狩猎框架-AssetsHunter，信息收集是一项艺术~. Contribute to rabbitmask/AssetsHunter development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：红队
描述：基于意淫，MultiLayerAttackTool 是一款专为红队攻防演练和网络安全研究设计的高性能异步多层混合攻击模拟框架。集成了四层攻击向量，采用先进的异步IO架构，可实现极致的网络压力测试。
URL：https://github.com/7huukdlnkjkjba/MultiLayerAttackTool

标签：#红队
GitHub
GitHub - 7huukdlnkjkjba/MultiLayerAttackTool: 基于意淫，MultiLayerAttackTool 是一款专为红队攻防演练和网络安全研究设计的高性能异步多层混合攻击模拟框架。集成了四层攻击向量，采用先进的异步…
GitHub - 7huukdlnkjkjba/MultiLayerAttackTool: 基于意淫，MultiLayerAttackTool 是一款专为红队攻防演练和网络安全研究设计的高性能异步多层混合攻击模拟框架。集成了四层攻击向量，采用先进的异步…
基于意淫，MultiLayerAttackTool 是一款专为红队攻防演练和网络安全研究设计的高性能异步多层混合攻击模拟框架。集成了四层攻击向量，采用先进的异步IO架构，可实现极致的网络压力测试。 - 7huukdlnkjkjba/MultiLayerAttackTool
红队
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677
URL：https://github.com/PeterGabaldon/CVE-2025-40677

标签：#CVE-2025
GitHub
GitHub - PeterGabaldon/CVE-2025-40677: Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677
GitHub - PeterGabaldon/CVE-2025-40677: Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677
Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677 - PeterGabaldon/CVE-2025-40677
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述： Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library in windows.
URL：https://github.com/fy-poc/full-poc-CVE-2025_21298

标签：#CVE-2025
GitHub
GitHub - fy-poc/full-poc-CVE-2025_21298: Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library…
GitHub - fy-poc/full-poc-CVE-2025_21298: Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library…
Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library in windows. - fy-poc/full-poc-CVE-2025_21298
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：nunjucks RCE for Nunchuck Machine Ctf - Hackthebox
URL：https://github.com/declanmiddleton/nunjucks-rce

标签：#RCE
GitHub
GitHub - declanmiddleton/nunjucks-rce: nunjucks RCE for Nunchuck Machine Ctf - Hackthebox
GitHub - declanmiddleton/nunjucks-rce: nunjucks RCE for Nunchuck Machine Ctf - Hackthebox
nunjucks RCE for Nunchuck Machine Ctf - Hackthebox - declanmiddleton/nunjucks-rce
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-8088 path traversal tool
URL：https://github.com/m4nbun/CVE-2025-8088

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：hvv
描述：hvv
URL：https://github.com/msmshaqeeq29-source/b-bm

标签：#hvv
GitHub
GitHub - msmshaqeeq29-source/b-bm: hvv
GitHub - msmshaqeeq29-source/b-bm: hvv
hvv. Contribute to msmshaqeeq29-source/b-bm development by creating an account on GitHub.
hvv
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152)
URL：https://github.com/kh4sh3i/CVE-2025-34152

标签：#CVE-2025
GitHub
GitHub - kh4sh3i/CVE-2025-34152: Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152)
GitHub - kh4sh3i/CVE-2025-34152: Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152)
Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152) - kh4sh3i/CVE-2025-34152
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：This repo contains RCE exploit for Era htb machine
URL：https://github.com/symphony2colour/era-htb-rce

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A working (at least for me :] ) exploit for CVE-2025-25257
URL：https://github.com/segfault-it/CVE-2025-25257

标签：#CVE-2025
GitHub
GitHub - segfault-it/CVE-2025-25257: A working (at least for me :] ) exploit for CVE-2025-25257
A working (at least for me :] ) exploit for CVE-2025-25257 - segfault-it/CVE-2025-25257
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Backdrop CMS 1.27.1 – Authenticated RCE
URL：https://github.com/lineeralgebra/backdrop_rce.py

标签：#RCE
GitHub
GitHub - lineeralgebra/backdrop_rce.py: Backdrop CMS 1.27.1 – Authenticated RCE
GitHub - lineeralgebra/backdrop_rce.py: Backdrop CMS 1.27.1 – Authenticated RCE
Backdrop CMS 1.27.1 – Authenticated RCE. Contribute to lineeralgebra/backdrop_rce.py development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.
URL：https://github.com/ashardev002/CVE-2025-32463_chwoot

标签：#CVE-2025
GitHub
GitHub - ashardev002/CVE-2025-32463_chwoot: 🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature…
🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment. - ashardev002/CVE-2025-32463_chwoot
CVE
GitHub监控消息提醒！！！

更新了：漏洞EXP
描述：POCGeneratorMCP一个基于 Model Context Protocol (MCP) 的 POCSuite3 POC/EXP 生成工具服务实现。这个服务可以帮助安全研究人员快速生成和测试漏洞验证代码。
URL：https://github.com/rockmelodies/POCGeneratorMCP

标签：#漏洞EXP
GitHub
GitHub - rockmelodies/POCGeneratorMCP: POCGeneratorMCP一个基于 Model Context Protocol (MCP) 的 POCSuite3 POC/EXP 生成工具服务实现。这个服务可以帮助安…
POCGeneratorMCP一个基于 Model Context Protocol (MCP) 的 POCSuite3 POC/EXP 生成工具服务实现。这个服务可以帮助安全研究人员快速生成和测试漏洞验证代码。 - rockmelodies/POCGeneratorMCP
漏洞EXP
GitHub监控消息提醒！！！

更新了：RCE
描述：PHP to .jpg embedding script, designed to support PHP RCE polyglot techniques.
URL：https://github.com/amalpvatayam67/day08-CISCO-fmc-sim

标签：#RCE
GitHub
GitHub - amalpvatayam67/day08-CISCO-fmc-sim: This is a minimal, educational simulation that demonstrates the _impact_ class of…
GitHub - amalpvatayam67/day08-CISCO-fmc-sim: This is a minimal, educational simulation that demonstrates the _impact_ class of…
This is a minimal, educational simulation that demonstrates the _impact_ class of a management-plane parsing RCE (inspired by CVE-2025-20265). It intentionally executes commands from crafted input ...
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：CTF that including path traversal and RCE vulnerabilities in Flask due to the server is running on Debug Mode
URL：https://github.com/doriav20/FlaskCTF

标签：#RCE
GitHub
GitHub - doriav20/FlaskCTF: CTF that including path traversal and RCE vulnerabilities in Flask due to the server is running on…
GitHub - doriav20/FlaskCTF: CTF that including path traversal and RCE vulnerabilities in Flask due to the server is running on…
CTF that including path traversal and RCE vulnerabilities in Flask due to the server is running on Debug Mode - doriav20/FlaskCTF
RCE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试报告生成工具
URL：https://github.com/djytmdj/Penetration-test-report-generation-tool

标签：#渗透测试
GitHub
GitHub - djytmdj/Penetration-test-report-generation-tool: 渗透测试报告生成工具
渗透测试报告生成工具. Contribute to djytmdj/Penetration-test-report-generation-tool development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Detection for CVE-2025-10035
URL：https://github.com/rxerium/CVE-2025-10035

标签：#CVE-2025
GitHub
GitHub - rxerium/CVE-2025-10035: Detection for CVE-2025-10035
GitHub - rxerium/CVE-2025-10035: Detection for CVE-2025-10035
Detection for CVE-2025-10035. Contribute to rxerium/CVE-2025-10035 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🛡️ Exploit Akamai's RepositoryService XXE vulnerability (CVE-2025-49493) with this testbed, aiding in secure coding practices and vulnerability assessments.
URL：https://github.com/sanchitsahni/CVE-2025-57515

标签：#CVE-2025
CVE
Before
After
Back to Top