​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-61882
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-61882

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-32462 & CVE-2025-32463
URL：https://github.com/harsh1verma/CVE-Analysis

标签：#CVE-2025
GitHub
harsh1verma/CVE-Analysis
harsh1verma/CVE-Analysis
CVE-2025-32462 & CVE-2025-32463. Contribute to harsh1verma/CVE-Analysis development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：集成多种攻防技术与检测手段，帮助安全测试人员高效执行信息收集、漏洞挖掘、利用验证， 提升渗透测试的自动化与体系化水平，为安全团队快速发现潜在风险与攻击面提供有力支持。
URL：https://github.com/hack007x/MoonVeil

标签：#信息收集
GitHub
GitHub - hack007x/MoonVeil: 集成多种攻防技术与检测手段，帮助安全测试人员高效执行信息收集、漏洞挖掘、利用验证， 提升渗透测试的自动化与体系化水平，为安全团队快速发现潜在风险与攻击面提供有力支持。
集成多种攻防技术与检测手段，帮助安全测试人员高效执行信息收集、漏洞挖掘、利用验证， 提升渗透测试的自动化与体系化水平，为安全团队快速发现潜在风险与攻击面提供有力支持。 - hack007x/MoonVeil
信息收集
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2025-46817 – Redis Lua unpack Integer Overflow (Potential RCE)
URL：https://github.com/dwisiswant0/CVE-2025-46817

标签：#RCE
GitHub
GitHub - dwisiswant0/CVE-2025-46817: CVE-2025-46817 – Redis Lua unpack Integer Overflow (Potential RCE)
GitHub - dwisiswant0/CVE-2025-46817: CVE-2025-46817 – Redis Lua unpack Integer Overflow (Potential RCE)
CVE-2025-46817 – Redis Lua unpack Integer Overflow (Potential RCE) - dwisiswant0/CVE-2025-46817
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-49844 – Redis Lua Parser Use-After-Free
URL：https://github.com/dwisiswant0/CVE-2025-49844

标签：#CVE-2025
GitHub
GitHub - dwisiswant0/CVE-2025-49844: CVE-2025-49844 – Redis Lua Parser Use-After-Free
GitHub - dwisiswant0/CVE-2025-49844: CVE-2025-49844 – Redis Lua Parser Use-After-Free
CVE-2025-49844 – Redis Lua Parser Use-After-Free. Contribute to dwisiswant0/CVE-2025-49844 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：内网渗透
描述：内网渗透的思路技巧 工具利用 实战案例分享
URL：https://github.com/Eaglesmfw/-

标签：#内网渗透
GitHub
Eaglesmfw/-
Eaglesmfw/-
内网渗透的思路技巧 工具利用 实战案例分享. Contribute to Eaglesmfw/- development by creating an account on GitHub.
内网渗透
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17)
URL：https://github.com/r3dBust3r/CVE-2025-32463

标签：#CVE-2025
GitHub
GitHub - r3dBust3r/CVE-2025-32463: This repository contains an exploit script for CVE-2025-32463, a local privilege escalation…
GitHub - r3dBust3r/CVE-2025-32463: This repository contains an exploit script for CVE-2025-32463, a local privilege escalation…
This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17) - r3dBust3r/CVE-2025-32463
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Exploit for CVE-2025-61882 (do not use without any written permission).
URL：https://github.com/Sachinart/CVE-2025-61882

标签：#CVE-2025
GitHub
GitHub - Sachinart/CVE-2025-61882: Exploit for CVE-2025-61882 (do not use without any written permission).
GitHub - Sachinart/CVE-2025-61882: Exploit for CVE-2025-61882 (do not use without any written permission).
Exploit for CVE-2025-61882 (do not use without any written permission). - Sachinart/CVE-2025-61882
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：An Obsidian plugin that quickly generates HTB penetration testing note templates,一款能够快速生成HTB渗透测试笔记模版的Obsidian 插件，有助于对您的知识库进行管理查询
URL：https://github.com/Ryanu9/Obsidian-Machine-Tracker

标签：#渗透测试
GitHub
Ryanu9/Obsidian-Machine-Tracker
An Obsidian plugin that quickly generates HTB penetration testing note templates,一款能够快速生成HTB渗透测试笔记模版的Obsidian 插件，有助于对您的知识库进行管理查询 - Ryanu9/Obsidian-Machine-Tracker
渗透测试
GitHub监控消息提醒！！！

更新了：钓鱼
描述：Russian Fishing 4 Auto Script 俄罗斯钓鱼4自动化脚本
URL：https://github.com/fyodorrss/RussianFishing4-Script

标签：#钓鱼
钓鱼
GitHub监控消息提醒！！！

更新了：Red Team
描述：A C++ command-line tool for pentesters and Red Teamers to quickly scaffold and manage directory structures for engagements, labs, and tools.
URL：https://github.com/dcollaoa/rt_manager

标签：#Red Team
Red
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.
URL：https://github.com/OilSeller2001/PoC-for-CVE-2025-9074

标签：#CVE-2025
GitHub
GitHub - OilSeller2001/PoC-for-CVE-2025-9074: Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure…
Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access. - OilSeller2001/PoC-for-CVE-2025-9074
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：钓鱼网站：url模型和dnn模型
URL：https://github.com/mengguiyouziyi/phish

标签：#钓鱼
GitHub
GitHub - mengguiyouziyi/phish: 钓鱼网站：url模型和dnn模型
钓鱼网站：url模型和dnn模型. Contribute to mengguiyouziyi/phish development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Proof Of Concept For CVE-2025-59489. Affects unity games running on Android.
URL：https://github.com/GithubKillsMyOpsec/CVE-2025-59489-POC

标签：#CVE-2025
GitHub
GitHub - GithubKillsMyOpsec/CVE-2025-59489-POC: Proof Of Concept For CVE-2025-59489. Affects unity games running on Android.
GitHub - GithubKillsMyOpsec/CVE-2025-59489-POC: Proof Of Concept For CVE-2025-59489. Affects unity games running on Android.
Proof Of Concept For CVE-2025-59489. Affects unity games running on Android. - GithubKillsMyOpsec/CVE-2025-59489-POC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Detection for CVE-2025-61882
URL：https://github.com/rxerium/CVE-2025-61882

标签：#CVE-2025
GitHub
GitHub - rxerium/CVE-2025-61882-CVE-2025-61884: Detection for CVE-2025-61882 & CVE-2025-61884
GitHub - rxerium/CVE-2025-61882-CVE-2025-61884: Detection for CVE-2025-61882 & CVE-2025-61884
Detection for CVE-2025-61882 & CVE-2025-61884. Contribute to rxerium/CVE-2025-61882-CVE-2025-61884 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast
URL：https://github.com/drcrypterdotru/Apache-GOExploiter

标签：#CVE-2025
GitHub
GitHub - drcrypterdotru/Apache-GOExploiter: Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast
GitHub - drcrypterdotru/Apache-GOExploiter: Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast
Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast - drcrypterdotru/Apache-GOExploiter
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：本库用于渗透测试入门学习记录
URL：https://github.com/ssh79-l/-

标签：#渗透测试
GitHub
GitHub - ssh79-l/-: 本库用于渗透测试入门学习记录
本库用于渗透测试入门学习记录. Contribute to ssh79-l/- development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation
URL：https://github.com/Jenderal92/WP-CVE-2025-6934

标签：#CVE-2025
GitHub
GitHub - Jenderal92/WP-CVE-2025-6934: WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation
GitHub - Jenderal92/WP-CVE-2025-6934: WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation
WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation - Jenderal92/WP-CVE-2025-6934
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。
URL：https://github.com/xminj/monitor-agent

标签：#信息收集
GitHub
GitHub - xminj/monitor-agent: 基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。
GitHub - xminj/monitor-agent: 基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。
基于micronaut框架完成的一个硬件资源信息收集。可通过GraalVM工具打包成本地可执行文件。 - xminj/monitor-agent
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2025
描述： This repository contains a proof-of-concept exploit script for CVE-2025-1338
URL：https://github.com/jxcaxtc/CVE-2025-1338

标签：#CVE-2025
GitHub
GitHub - jxcaxtc/CVE-2025-1338: This repository contains a proof-of-concept exploit script for CVE-2025-1338
GitHub - jxcaxtc/CVE-2025-1338: This repository contains a proof-of-concept exploit script for CVE-2025-1338
This repository contains a proof-of-concept exploit script for CVE-2025-1338 - jxcaxtc/CVE-2025-1338
CVE
Before
After
Back to Top