​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：渗透测试
描述：SBSCAN是一款针对spring框架的渗透测试工具，可以对指定站点进行spring boot敏感信息扫描以及进行spring漏洞扫描与验证。
URL：https://github.com/sule01u/SBSCAN

标签：#渗透测试
GitHub
GitHub - WuliRuler/SBSCAN: 🎭 SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN…
GitHub - WuliRuler/SBSCAN: 🎭 SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN…
🎭 SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN is a penetration testing tool focused on the spring framework that can scan springboot sensitiv...
渗透测试
GitHub监控消息提醒！！！

更新了：横向移动
描述：Lateral movement tools by abusing port 135（135端口横向移动工具）
URL：https://github.com/wqreytuk/py135

标签：#横向移动
横向移动
GitHub监控消息提醒！！！

更新了：RCE
描述：Simple demo of a Remote Code Execution (RCE) Vulnerability in Node.js and how using distroless prevents it.
URL：https://github.com/mwager/nodejs_exploit

标签：#RCE
GitHub
GitHub - mwager/nodejs_exploit: Simple demo of a Remote Code Execution (RCE) Vulnerability in Node.js and how using distroless…
Simple demo of a Remote Code Execution (RCE) Vulnerability in Node.js and how using distroless prevents it. - GitHub - mwager/nodejs_exploit: Simple demo of a Remote Code Execution (RCE) Vulnerabi...
RCE
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：爬取智能合约结合深度学习技术对其进行重入漏洞检测，同时分析其上下文对其进行字节码重写修复
URL：https://github.com/eliQAQ/detect-vulnerable-contract

标签：#漏洞检测
GitHub
GitHub - eliQAQ/detect-vulnerable-contract: 爬取智能合约结合深度学习技术对其进行重入漏洞检测，同时分析其上下文对其进行字节码重写修复
GitHub - eliQAQ/detect-vulnerable-contract: 爬取智能合约结合深度学习技术对其进行重入漏洞检测，同时分析其上下文对其进行字节码重写修复
爬取智能合约结合深度学习技术对其进行重入漏洞检测，同时分析其上下文对其进行字节码重写修复. Contribute to eliQAQ/detect-vulnerable-contract development by creating an account on GitHub.
漏洞检测
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Mass exploit - CVE-2023-38501 - Copyparty < Cross-Site Scripting [XSS]
URL：https://github.com/codeb0ss/CVE-2023-38501-Exploit

标签：#CVE-2023
GitHub
GitHub - codeb0ss/CVE-2023-38501-Exploit: Mass exploit - CVE-2023-38501 - Copyparty < Cross-Site Scripting [XSS]
GitHub - codeb0ss/CVE-2023-38501-Exploit: Mass exploit - CVE-2023-38501 - Copyparty < Cross-Site Scripting [XSS]
Mass exploit - CVE-2023-38501 - Copyparty < Cross-Site Scripting [XSS] - codeb0ss/CVE-2023-38501-Exploit
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Mass check CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)
URL：https://github.com/rajat4722/Bug-Bounty-Hacktoberfest-2023

标签：#RCE
GitHub
GitHub - rajat4722/Stuff-Bug-Bounty: This repository contains a collection of cheat sheets for bug bounty hunters. These cheat…
GitHub - rajat4722/Stuff-Bug-Bounty: This repository contains a collection of cheat sheets for bug bounty hunters. These cheat…
This repository contains a collection of cheat sheets for bug bounty hunters. These cheat sheets cover a variety of topics, including SQL injection, XSS, SSRF, RCE, open redirect, command injection...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Mass check CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)
URL：https://github.com/zaenhaxor/CVE-2023-41892

标签：#CVE-2023
GitHub
GitHub - zaenhaxor/CVE-2023-41892: CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)
CVE-2023-41892 - Craft CMS Remote Code Execution (RCE) - zaenhaxor/CVE-2023-41892
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Visual Studio RCE using PreBuildEvent tag on .csproj file
URL：https://github.com/fantasy0x1/csproj-rce

标签：#RCE
GitHub
GitHub - exorcize/csproj-rce: Visual Studio RCE using PreBuild target on .csproj file
Visual Studio RCE using PreBuild target on .csproj file - exorcize/csproj-rce
RCE
GitHub监控消息提醒！！！

更新了：Red Team
描述：A set of Ansible scripts that can be used for Incident Response competitions by the Red Team to create low-hanging fruit for the blueteam to find.
URL：https://github.com/ads3853/TrainingWheelsProtocol

标签：#Red Team
GitHub
GitHub - ads3853/TrainingWheelsProtocol: A set of Ansible scripts that can be used for Incident Response competitions by the Red…
GitHub - ads3853/TrainingWheelsProtocol: A set of Ansible scripts that can be used for Incident Response competitions by the Red…
A set of Ansible scripts that can be used for Incident Response competitions by the Red Team to create low-hanging fruit for the Blue Team to find (and Red Team to exploit) - ads3853/TrainingWheels...
Red
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：PoC of CVE-2023-42793
URL：https://github.com/Zenmovie/CVE-2023-42793

标签：#CVE-2023
GitHub
GitHub - Zenmovie/CVE-2023-42793: PoC of CVE-2023-42793
GitHub - Zenmovie/CVE-2023-42793: PoC of CVE-2023-42793
PoC of CVE-2023-42793. Contribute to Zenmovie/CVE-2023-42793 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Useful Cobalt Strike techniques learned from engagements
URL：https://github.com/wsummerhill/C2_RedTeam_CheatSheets

标签：#Cobalt Strike
GitHub
GitHub - wsummerhill/C2_RedTeam_CheatSheets: Useful C2 techniques and cheat sheets learned from engagements
GitHub - wsummerhill/C2_RedTeam_CheatSheets: Useful C2 techniques and cheat sheets learned from engagements
Useful C2 techniques and cheat sheets learned from engagements - wsummerhill/C2_RedTeam_CheatSheets
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：PoC for CVE-2023-44961
URL：https://github.com/ggb0n/CVE-2023-44961

标签：#CVE-2023
GitHub
GitHub - ggb0n/CVE-2023-44961: PoC for CVE-2023-44961
GitHub - ggb0n/CVE-2023-44961: PoC for CVE-2023-44961
PoC for CVE-2023-44961. Contribute to ggb0n/CVE-2023-44961 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：A tool for finding vulnerable libwebp(CVE-2023-4863)
URL：https://github.com/murphysecurity/libwebp-checker

标签：#CVE-2023
GitHub
GitHub - murphysecurity/libwebp-checker: A tool for finding vulnerable libwebp(CVE-2023-4863)
GitHub - murphysecurity/libwebp-checker: A tool for finding vulnerable libwebp(CVE-2023-4863)
A tool for finding vulnerable libwebp(CVE-2023-4863) - murphysecurity/libwebp-checker
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接
URL：https://github.com/Schira4396/VcenterKiller

标签：#webshell
GitHub
GitHub - Schira4396/VcenterKiller: 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022…
一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接 - Schira4396/VcenterKiller
webshell
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Example of CVE-2023-41105
URL：https://github.com/JawadPy/CVE-2023-41105

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Useful Cobalt Strike techniques learned from engagements
URL：https://github.com/wsummerhill/C2_RedTeam_CheatSheet

标签：#Cobalt Strike
GitHub
GitHub - wsummerhill/C2_RedTeam_CheatSheets: Useful C2 techniques and cheatsheets learned from engagements
Useful C2 techniques and cheatsheets learned from engagements - wsummerhill/C2_RedTeam_CheatSheets
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-4911 proof of concept
URL：https://github.com/RickdeJager/CVE-2023-4911

标签：#CVE-2023
GitHub
GitHub - RickdeJager/CVE-2023-4911: CVE-2023-4911 proof of concept
CVE-2023-4911 proof of concept. Contribute to RickdeJager/CVE-2023-4911 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：红队
描述：红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
URL：https://github.com/ffffffff0x/f8x

标签：#红队
GitHub
GitHub - ffffffff0x/f8x: 红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
GitHub - ffffffff0x/f8x: 红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool - ffffffff0x/f8x
红队
GitHub监控消息提醒！！！

更新了：RCE
描述：RCET Third Semester Lab Documentation
URL：https://github.com/leistimo/RCET3_Lab

标签：#RCE
RCE
Before
After
Back to Top