​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-5538 - MpOperationLogs <= 1.0.1 - 未经身份验证的存储跨站点脚本
URL：https://github.com/juweihuitao/MpOperationLogs

标签：#CVE-2023
GitHub
GitHub - juweihuitao/MpOperationLogs: CVE-2023-5538 - MpOperationLogs <= 1.0.1 - 未经身份验证的存储跨站点脚本
GitHub - juweihuitao/MpOperationLogs: CVE-2023-5538 - MpOperationLogs <= 1.0.1 - 未经身份验证的存储跨站点脚本
CVE-2023-5538 - MpOperationLogs <= 1.0.1 - 未经身份验证的存储跨站点脚本 - juweihuitao/MpOperationLogs
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2023-38646 Unauthenticated RCE vulnerability in Metabase
URL：https://github.com/nickswink/CVE-2023-38646

标签：#RCE
GitHub
GitHub - nickswink/CVE-2023-38646: CVE-2023-38646 Unauthenticated RCE vulnerability in Metabase
GitHub - nickswink/CVE-2023-38646: CVE-2023-38646 Unauthenticated RCE vulnerability in Metabase
CVE-2023-38646 Unauthenticated RCE vulnerability in Metabase - nickswink/CVE-2023-38646
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：The OverlayFS vulnerability CVE-2023-0386
URL：https://github.com/Rabie-el-hakouni/CVE-2023-0386

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-38646 Metabase 0.46.6 exploit
URL：https://github.com/SUT0L/CVE-2023-38646

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：弱口令
描述：PHPipam开源IP地址管理系统弱口令漏洞
URL：https://github.com/thedarknessdied/PHPipam_OpenSourceIPAddress_Management_System_WeakPasswordVulnerability

标签：#弱口令
GitHub
GitHub - thedarknessdied/PHPipam_OpenSourceIPAddress_Management_System_WeakPasswordVulnerability: PHPipam开源IP地址管理系统弱口令漏洞
GitHub - thedarknessdied/PHPipam_OpenSourceIPAddress_Management_System_WeakPasswordVulnerability: PHPipam开源IP地址管理系统弱口令漏洞
PHPipam开源IP地址管理系统弱口令漏洞. Contribute to thedarknessdied/PHPipam_OpenSourceIPAddress_Management_System_WeakPasswordVulnerability development by creating an account on GitHub.
弱口令
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-22515
URL：https://github.com/kh4sh3i/CVE-2023-22515

标签：#CVE-2023
GitHub
GitHub - kh4sh3i/CVE-2023-22515: CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server
GitHub - kh4sh3i/CVE-2023-22515: CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server
CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server - kh4sh3i/CVE-2023-22515
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具
URL：https://github.com/ad-calcium/CVE-2023-22515

标签：#CVE-2023
GitHub
GitHub - ad-calcium/CVE-2023-22515: Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具
Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具. Contribute to ad-calcium/CVE-2023-22515 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：一款Go Fyne实现的GUI扫描器，功能涵盖网站扫描、端口扫描、企业信息收集、子域名暴破、空间引擎搜索、CDN识别等多功能的工具
URL：https://github.com/yanghaiji/DataXplorer

标签：#信息收集
GitHub
GitHub - yanghaiji/DataXplorer: DataXplorer是一个非常有价值的工具，它的核心任务是解决分布式系统中日志收集和分析的挑战。该工具的设计理念基于
GitHub - yanghaiji/DataXplorer: DataXplorer是一个非常有价值的工具，它的核心任务是解决分布式系统中日志收集和分析的挑战。该工具的设计理念基于"数据"和"探索"，旨在提供一种高度可定制且不侵入应用代码的方式来实现对日志数据的采集和分析。…
DataXplorer是一个非常有价值的工具，它的核心任务是解决分布式系统中日志收集和分析的挑战。该工具的设计理念基于"数据"和"探索"，旨在提供一种高度可定制且不侵入应用代码的方式来实现对日志数据的采集和分析。 DataXplorer基于Java技术，借助javassist和Spring框架的集成，能够在不干扰应用程...
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：PoC for CVE-2023-44962
URL：https://github.com/ggb0n/CVE-2023-44962

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.
URL：https://github.com/wrv/cve-2023-5217-poc

标签：#CVE-2023
GitHub
GitHub - UT-Security/cve-2023-5217-poc: A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.
GitHub - UT-Security/cve-2023-5217-poc: A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.
A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface. - UT-Security/cve-2023-5217-poc
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：One XSS 是一款基于Cloudflare Pages/D1/KV实现的在线XSS平台,可自定义模块和项目,用于帮助渗透测试工程师进行XSS漏洞验证.
URL：https://github.com/onxss/OneXSS

标签：#渗透测试
GitHub
GitHub - onxss/OneXSS: One XSS 是一款基于Cloudflare Pages/D1/KV实现的在线XSS平台,可自定义模块和项目,用于帮助渗透测试工程师进行XSS漏洞验证.
GitHub - onxss/OneXSS: One XSS 是一款基于Cloudflare Pages/D1/KV实现的在线XSS平台,可自定义模块和项目,用于帮助渗透测试工程师进行XSS漏洞验证.
One XSS 是一款基于Cloudflare Pages/D1/KV实现的在线XSS平台,可自定义模块和项目,用于帮助渗透测试工程师进行XSS漏洞验证. - onxss/OneXSS
渗透测试
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2023-38646 Metabase RCE
URL：https://github.com/Boogipop/MetabaseRceTools

标签：#RCE
GitHub
GitHub - Boogipop/MetabaseRceTools: CVE-2023-38646 Metabase RCE
GitHub - Boogipop/MetabaseRceTools: CVE-2023-38646 Metabase RCE
CVE-2023-38646 Metabase RCE. Contribute to Boogipop/MetabaseRceTools development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：红队
描述：红队打点工具，批量url快速发现文件上传点
URL：https://github.com/dahezhiquan/FindUpload

标签：#红队
GitHub
GitHub - dahezhiquan/FindUpload: 红队打点工具，批量url快速发现文件上传点和登录框
GitHub - dahezhiquan/FindUpload: 红队打点工具，批量url快速发现文件上传点和登录框
红队打点工具，批量url快速发现文件上传点和登录框. Contribute to dahezhiquan/FindUpload development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team GUI
URL：https://github.com/rfs85/RedTeamGUI

标签：#Red Team
GitHub
GitHub - rfs85/RedTeamGUI: Red Team GUI
GitHub - rfs85/RedTeamGUI: Red Team GUI
Red Team GUI. Contribute to rfs85/RedTeamGUI development by creating an account on GitHub.
Red
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-42471
URL：https://github.com/actuator/wave.ai.browser

标签：#CVE-2023
GitHub
GitHub - actuator/wave.ai.browser: CVE-2023-42471
GitHub - actuator/wave.ai.browser: CVE-2023-42471
CVE-2023-42471. Contribute to actuator/wave.ai.browser development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-22515: Confluence Broken Access Control Exploit
URL：https://github.com/Chocapikk/CVE-2023-22515

标签：#CVE-2023
GitHub
GitHub - Chocapikk/CVE-2023-22515: CVE-2023-22515: Confluence Broken Access Control Exploit
GitHub - Chocapikk/CVE-2023-22515: CVE-2023-22515: Confluence Broken Access Control Exploit
CVE-2023-22515: Confluence Broken Access Control Exploit - Chocapikk/CVE-2023-22515
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Poc for CVE-2023-22515
URL：https://github.com/j3seer/CVE-2023-22515-POC

标签：#CVE-2023
GitHub
GitHub - j3seer/CVE-2023-22515-POC: Poc for CVE-2023-22515
GitHub - j3seer/CVE-2023-22515-POC: Poc for CVE-2023-22515
Poc for CVE-2023-22515. Contribute to j3seer/CVE-2023-22515-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：一款全面而强大的漏洞扫描和利用工具。(愿景)
URL：https://github.com/yhy0/Jie

标签：#漏洞利用
GitHub
GitHub - yhy0/Jie: Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications.…
GitHub - yhy0/Jie: Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications.…
Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information g...
漏洞利用
GitHub监控消息提醒！！！

更新了：RCE
描述：Voorlopige plaats om issues, vragen en verzoeken voor door RCE-beheerde thesauri
URL：https://github.com/cultureelerfgoed/thesauri

标签：#RCE
GitHub
GitHub - cultureelerfgoed/thesauri: Plek voor issues, vragen en verzoeken voor RCE-beheerde thesauri, zoals de Cultuurhistorische…
GitHub - cultureelerfgoed/thesauri: Plek voor issues, vragen en verzoeken voor RCE-beheerde thesauri, zoals de Cultuurhistorische…
Plek voor issues, vragen en verzoeken voor RCE-beheerde thesauri, zoals de Cultuurhistorische Thesaurus - cultureelerfgoed/thesauri
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
URL：https://github.com/bcdannyboy/CVE-2023-44487

标签：#CVE-2023
GitHub
GitHub - bcdannyboy/CVE-2023-44487: Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
GitHub - bcdannyboy/CVE-2023-44487: Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 - bcdannyboy/CVE-2023-44487
CVE
Before
After
Back to Top