📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒!!!
更新了:渗透测试
描述:一个大模型MCP 工具,可以使用KALI系统进行自动化的渗透测试,实测可以使用Cloude ,Gemini, Qwen模型进行测试,MCP需要使用chatbox,其它客户端软件自行测试
URL:https://github.com/Grand38D/Kali-MCP-tool
标签:#渗透测试
更新了:渗透测试
描述:一个大模型MCP 工具,可以使用KALI系统进行自动化的渗透测试,实测可以使用Cloude ,Gemini, Qwen模型进行测试,MCP需要使用chatbox,其它客户端软件自行测试
URL:https://github.com/Grand38D/Kali-MCP-tool
标签:#渗透测试
GitHub监控消息提醒!!!
更新了:Red Team
描述:Simulated Red Team attack & Blue Team defense using OPNSense and Suricata in a segmented network lab
URL:https://github.com/Vlassov248/Red-VS-Blue-Opnsense-Lab
标签:#Red Team
更新了:Red Team
描述:Simulated Red Team attack & Blue Team defense using OPNSense and Suricata in a segmented network lab
URL:https://github.com/Vlassov248/Red-VS-Blue-Opnsense-Lab
标签:#Red Team
GitHub监控消息提醒!!!
更新了:反序列化
描述:项目简介:基于C++11与Reactor高并发网络模型的企业级即时通信平台。本平台支持企业级即时通信,致力于解决单机性能瓶颈与单点故障问题,实现企业内部、企业之间信息数据的安全传输、身份鉴别和认证。 主要技术栈:C++11、Linux/CentOS、MySQL、Redis、Nginx、Reactor、多路复用epoll、套接字通信、多线程、JSON序列化和反序列化、muduo网络库开发
URL:https://github.com/JDafan/SynapseIM-High-Concurrency-IM-System-for-Enterprise
标签:#反序列化
更新了:反序列化
描述:项目简介:基于C++11与Reactor高并发网络模型的企业级即时通信平台。本平台支持企业级即时通信,致力于解决单机性能瓶颈与单点故障问题,实现企业内部、企业之间信息数据的安全传输、身份鉴别和认证。 主要技术栈:C++11、Linux/CentOS、MySQL、Redis、Nginx、Reactor、多路复用epoll、套接字通信、多线程、JSON序列化和反序列化、muduo网络库开发
URL:https://github.com/JDafan/SynapseIM-High-Concurrency-IM-System-for-Enterprise
标签:#反序列化
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:🚨 Exploit WinRAR CVE-2025-8088 with this PoC RAR archive, demonstrating the vulnerability and its impact when executed on the affected software.
URL:https://github.com/pablo388/WinRAR-CVE-2025-8088-PoC-RAR
标签:#CVE-2025
更新了:CVE-2025
描述:🚨 Exploit WinRAR CVE-2025-8088 with this PoC RAR archive, demonstrating the vulnerability and its impact when executed on the affected software.
URL:https://github.com/pablo388/WinRAR-CVE-2025-8088-PoC-RAR
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:This repository contains a Proof of Concept (PoC) for CVE-2025-32463, a vulnerability in sudo allowing a chroot escape to achieve local privilege escalation.
URL:https://github.com/nelissandro/CVE-2025-32463-Sudo-Chroot-Escape
标签:#CVE-2025
更新了:CVE-2025
描述:This repository contains a Proof of Concept (PoC) for CVE-2025-32463, a vulnerability in sudo allowing a chroot escape to achieve local privilege escalation.
URL:https://github.com/nelissandro/CVE-2025-32463-Sudo-Chroot-Escape
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:渗透测试
描述:Lightx 是一款轻量级、高效率的网络安全扫描工具,专为安全研究人员和渗透测试工程师设计。它集成了端口扫描、服务识别、Web指纹识别、漏洞扫描和弱口令检测等功能,提供全面的安全评估能力。
URL:https://github.com/onewinner/Lightx
标签:#渗透测试
更新了:渗透测试
描述:Lightx 是一款轻量级、高效率的网络安全扫描工具,专为安全研究人员和渗透测试工程师设计。它集成了端口扫描、服务识别、Web指纹识别、漏洞扫描和弱口令检测等功能,提供全面的安全评估能力。
URL:https://github.com/onewinner/Lightx
标签:#渗透测试
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:⚠️ Demonstrate CVE-2025-55188 with this proof-of-concept exploit for 7-Zip, revealing vulnerabilities in file extraction handling and potential impacts.
URL:https://github.com/Sh3ruman/CVE-2025-55188-7z-exploit
标签:#CVE-2025
更新了:CVE-2025
描述:⚠️ Demonstrate CVE-2025-55188 with this proof-of-concept exploit for 7-Zip, revealing vulnerabilities in file extraction handling and potential impacts.
URL:https://github.com/Sh3ruman/CVE-2025-55188-7z-exploit
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:CVE-2025-34100 test
URL:https://github.com/hyeonyeonglee/CVE-2025-34100
标签:#CVE-2025
更新了:CVE-2025
描述:CVE-2025-34100 test
URL:https://github.com/hyeonyeonglee/CVE-2025-34100
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:CVE-2025-0133 Exploit
URL:https://github.com/adhamelhansye/CVE-2025-0133
标签:#CVE-2025
更新了:CVE-2025
描述:CVE-2025-0133 Exploit
URL:https://github.com/adhamelhansye/CVE-2025-0133
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:RCE
描述:🚨 Demonstrate CVE-2025-54253, a critical OGNL injection vulnerability in Adobe AEM Forms, for educational and research purposes.
URL:https://github.com/akujedanjedon/CVE-2025-54253-Exploit-Demo
标签:#RCE
更新了:RCE
描述:🚨 Demonstrate CVE-2025-54253, a critical OGNL injection vulnerability in Adobe AEM Forms, for educational and research purposes.
URL:https://github.com/akujedanjedon/CVE-2025-54253-Exploit-Demo
标签:#RCE
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:RCE hook
URL:https://github.com/butyraldehyde/CVE-2025-48384-PoC-Part2
标签:#CVE-2025
更新了:CVE-2025
描述:RCE hook
URL:https://github.com/butyraldehyde/CVE-2025-48384-PoC-Part2
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:🔍 Exploit the CVE-2025-54424 RCE vulnerability in 1Panel, enabling unauthorized command execution through a certification bypass tool for scanning and exploitation.
URL:https://github.com/bejbitoilet5125521/CVE-2025-54424
标签:#CVE-2025
更新了:CVE-2025
描述:🔍 Exploit the CVE-2025-54424 RCE vulnerability in 1Panel, enabling unauthorized command execution through a certification bypass tool for scanning and exploitation.
URL:https://github.com/bejbitoilet5125521/CVE-2025-54424
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:应急响应
描述:渗透测试,应急响应综合练习平台
URL:https://github.com/MchalTesla/emergency-toolkit
标签:#应急响应
更新了:应急响应
描述:渗透测试,应急响应综合练习平台
URL:https://github.com/MchalTesla/emergency-toolkit
标签:#应急响应
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:💻 Demonstrate a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET, enabling remote code execution with a Proof-of-Concept script.
URL:https://github.com/jaydenb546/CVE-2025-30406
标签:#CVE-2025
更新了:CVE-2025
描述:💻 Demonstrate a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET, enabling remote code execution with a Proof-of-Concept script.
URL:https://github.com/jaydenb546/CVE-2025-30406
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:🐳 Reproduce and test the CVE-2025-32463 vulnerability in a Docker-based lab environment for security research and practical analysis.
URL:https://github.com/DaadaAyoze/CVE-2025-32463-lab
标签:#CVE-2025
更新了:CVE-2025
描述:🐳 Reproduce and test the CVE-2025-32463 vulnerability in a Docker-based lab environment for security research and practical analysis.
URL:https://github.com/DaadaAyoze/CVE-2025-32463-lab
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
URL:https://github.com/amalpvatayam67/day10-nextjs-middleware-lab
标签:#CVE-2025
更新了:CVE-2025
描述:Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
URL:https://github.com/amalpvatayam67/day10-nextjs-middleware-lab
标签:#CVE-2025
GitHub监控消息提醒!!!
更新了:CVE-2025
描述:🔍 Scan for potential exposure to the critical SharePoint vulnerability CVE-2025-53770 with this simple and effective tool for authorized testing.
URL:https://github.com/ziisenpai/CVE-2025-53770-Scanner
标签:#CVE-2025
更新了:CVE-2025
描述:🔍 Scan for potential exposure to the critical SharePoint vulnerability CVE-2025-53770 with this simple and effective tool for authorized testing.
URL:https://github.com/ziisenpai/CVE-2025-53770-Scanner
标签:#CVE-2025