📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！
更新了：弱口令
描述：自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等
URL：https://github.com/shadowabi/S-BlastingDictionary
标签：#弱口令
更新了：弱口令
描述：自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等
URL：https://github.com/shadowabi/S-BlastingDictionary
标签：#弱口令
GitHub
GitHub - shadowabi/S-BlastingDictionary: 自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等
自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等. Contribute to shadowabi/S-BlastingDictionary development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：反序列化
描述：针对finereportv10反序列化接口/webroot/decision/remote/design/channel进行无回显检测并提供Godzilla memshell注入功能（部分环境无法成功）
URL：https://github.com/Niiiiko/Finev10Memshell
标签：#反序列化
更新了：反序列化
描述：针对finereportv10反序列化接口/webroot/decision/remote/design/channel进行无回显检测并提供Godzilla memshell注入功能（部分环境无法成功）
URL：https://github.com/Niiiiko/Finev10Memshell
标签：#反序列化
GitHub监控消息提醒！！！
更新了：CVE-2023
描述：Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.
URL：https://github.com/chaudharyarjun/LooneyPwner
标签：#CVE-2023
更新了：CVE-2023
描述：Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.
URL：https://github.com/chaudharyarjun/LooneyPwner
标签：#CVE-2023
GitHub
GitHub - chaudharyarjun/LooneyPwner: Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various…
Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. - chaudharyarjun/LooneyPwner
GitHub监控消息提醒！！！
更新了：CVE-2023
描述：CVE-2023-20198 Checkscript
URL：https://github.com/Atea-Redteam/CVE-2023-20198
标签：#CVE-2023
更新了：CVE-2023
描述：CVE-2023-20198 Checkscript
URL：https://github.com/Atea-Redteam/CVE-2023-20198
标签：#CVE-2023
GitHub
GitHub - Atea-Redteam/CVE-2023-20198: CVE-2023-20198 Checkscript
CVE-2023-20198 Checkscript. Contribute to Atea-Redteam/CVE-2023-20198 development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：护网
描述：nb_proxypool代理池power by funboost,抓取20+免费代理网站,实时维护网站更新
URL：https://github.com/seccome/Ehoney
标签：#护网
更新了：护网
描述：nb_proxypool代理池power by funboost,抓取20+免费代理网站,实时维护网站更新
URL：https://github.com/seccome/Ehoney
标签：#护网
GitHub
GitHub - seccome/Ehoney: 安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot…
安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functi...
GitHub监控消息提醒！！！
更新了：RCE
描述：MyBB 1.8.32 - Chained LFI Remote Code Execution (RCE) (Authenticated) python exploit script...
URL：https://github.com/FDlucifer/mybb_1832_LFI_RCE
标签：#RCE
更新了：RCE
描述：MyBB 1.8.32 - Chained LFI Remote Code Execution (RCE) (Authenticated) python exploit script...
URL：https://github.com/FDlucifer/mybb_1832_LFI_RCE
标签：#RCE
GitHub
GitHub - FDlucifer/mybb_1832_LFI_RCE: MyBB 1.8.32 - Chained LFI Remote Code Execution (RCE) (Authenticated) python exploit script...
MyBB 1.8.32 - Chained LFI Remote Code Execution (RCE) (Authenticated) python exploit script... - FDlucifer/mybb_1832_LFI_RCE
GitHub监控消息提醒！！！
更新了：Red Team
描述：Red Team suite of systemd timers
URL：https://github.com/camperboy1000/explosive-timers
标签：#Red Team
更新了：Red Team
描述：Red Team suite of systemd timers
URL：https://github.com/camperboy1000/explosive-timers
标签：#Red Team
GitHub
GitHub - camperboy1000/explosive-timers: Red Team suite of systemd timers
Red Team suite of systemd timers. Contribute to camperboy1000/explosive-timers development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：webshell
描述：基于python的webshell管理工具
URL：https://github.com/thedarknessdied/Deep-sea-torpedo
标签：#webshell
更新了：webshell
描述：基于python的webshell管理工具
URL：https://github.com/thedarknessdied/Deep-sea-torpedo
标签：#webshell
GitHub
GitHub - thedarknessdied/Deep-sea-torpedo: 基于python的webshell管理工具
基于python的webshell管理工具. Contribute to thedarknessdied/Deep-sea-torpedo development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：红队
描述：红队资产收集工具，集合了所有空间测绘接口，写成导入api，即可进行操作的GUI工具，拒绝CLI繁琐操作
URL：https://github.com/soryecker/LaoTool
标签：#红队
更新了：红队
描述：红队资产收集工具，集合了所有空间测绘接口，写成导入api，即可进行操作的GUI工具，拒绝CLI繁琐操作
URL：https://github.com/soryecker/LaoTool
标签：#红队
GitHub监控消息提醒！！！
更新了：CVE-2023
描述：A proof of concept for testing CVE-2023-38545 against local curl
URL：https://github.com/bcdannyboy/CVE-2023-38545
标签：#CVE-2023
更新了：CVE-2023
描述：A proof of concept for testing CVE-2023-38545 against local curl
URL：https://github.com/bcdannyboy/CVE-2023-38545
标签：#CVE-2023
GitHub监控消息提醒！！！
更新了：RCE
描述：Fortinet unauthenticated RCE POC and writeup...
URL：https://github.com/m474r5/CVE-2023-27997-RCE
标签：#RCE
更新了：RCE
描述：Fortinet unauthenticated RCE POC and writeup...
URL：https://github.com/m474r5/CVE-2023-27997-RCE
标签：#RCE
GitHub监控消息提醒！！！
更新了：burp
描述：Custom burp extension using the Burp API to allow user to connect to bind shells
URL：https://github.com/xP4RAD0Xx/BurpBind.py
标签：#burp
更新了：burp
描述：Custom burp extension using the Burp API to allow user to connect to bind shells
URL：https://github.com/xP4RAD0Xx/BurpBind.py
标签：#burp
GitHub
GitHub - xP4RAD0Xx/BurpBind.py: Custom burp extension using the Burp API to allow user to connect to bind shells
Custom burp extension using the Burp API to allow user to connect to bind shells - GitHub - xP4RAD0Xx/BurpBind.py: Custom burp extension using the Burp API to allow user to connect to bind shells
GitHub监控消息提醒！！！
更新了：CVE-2023
描述：Test repo pour la CVE-2023-42793 de TeamCity
URL：https://github.com/LeHeron/TC_test
标签：#CVE-2023
更新了：CVE-2023
描述：Test repo pour la CVE-2023-42793 de TeamCity
URL：https://github.com/LeHeron/TC_test
标签：#CVE-2023
GitHub
GitHub - LeHeron/TC_test: Test repo pour la CVE-2023-42793 de TeamCity
Test repo pour la CVE-2023-42793 de TeamCity. Contribute to LeHeron/TC_test development by creating an account on GitHub.
GitHub监控消息提醒！！！
更新了：burp
描述：Nmap utilities for use with project discovery's httpx so map with burp. Could also be used with sitekick.py
URL：https://github.com/awillard1/nmap_utils
标签：#burp
更新了：burp
描述：Nmap utilities for use with project discovery's httpx so map with burp. Could also be used with sitekick.py
URL：https://github.com/awillard1/nmap_utils
标签：#burp
GitHub
GitHub - awillard1/nmap_utils: Nmap utilities for use with project discovery's httpx so map with burp. Could also be used with…
Nmap utilities for use with project discovery's httpx so map with burp. Could also be used with sitekick.py - GitHub - awillard1/nmap_utils: Nmap utilities for use with project discovery&am...
