​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：漏洞利用仓库
URL：https://github.com/vivian5566/exploit

标签：#漏洞利用
漏洞利用
GitHub监控消息提醒！！！

更新了：RCE
描述：一个简单的Shiro RCE检测和利用脚本。- Simple scanner and exploit for Shiro RCE.
URL：https://github.com/Hack3rHan/Shiro-Rce-Tool

标签：#RCE
GitHub
GitHub - Hack3rHan/Shiro-Rce-Tool: 一个简单的Shiro RCE检测和利用脚本。- Simple scanner and exploit for Shiro RCE.
GitHub - Hack3rHan/Shiro-Rce-Tool: 一个简单的Shiro RCE检测和利用脚本。- Simple scanner and exploit for Shiro RCE.
一个简单的Shiro RCE检测和利用脚本。- Simple scanner and exploit for Shiro RCE. - Hack3rHan/Shiro-Rce-Tool
RCE
GitHub监控消息提醒！！！

更新了：漏洞扫描
描述：javafx编写的poc管理工具和漏洞扫描的小工具
URL：https://github.com/Janhsu/oday

标签：#漏洞扫描
GitHub
GitHub - Janhsu/oday: javafx编写的poc管理工具和漏洞扫描的小工具
javafx编写的poc管理工具和漏洞扫描的小工具. Contribute to Janhsu/oday development by creating an account on GitHub.
漏洞扫描
GitHub监控消息提醒！！！

更新了：绕过
描述：父进程绕过——2
URL：https://github.com/Laster-dev/Parent-process-bypass-2

标签：#绕过
GitHub
GitHub - Laster-dev/Parent-process-bypass-2: 父进程绕过——2
GitHub - Laster-dev/Parent-process-bypass-2: 父进程绕过——2
父进程绕过——2. Contribute to Laster-dev/Parent-process-bypass-2 development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：burp
描述：reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
URL：https://github.com/bit4woo/reCAPTCHA

标签：#burp
GitHub
GitHub - bit4woo/reCAPTCHA: reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload…
reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件 - bit4woo/reCAPTCHA
burp
GitHub监控消息提醒！！！

更新了：反序列化
描述：A simple JSON serialization and deserialization library for Java Analyzer V2 project (为 Jar Analyzer V2 项目编写的 JSON 序列化和反序列化库)
URL：https://github.com/jar-analyzer/y4-json

标签：#反序列化
反序列化
GitHub监控消息提醒！！！

更新了：RCE
描述：FREEPBX 2023 [13,14,15,16] low level Authenticated RCE
URL：https://github.com/z3ro/Freepbx-API-RCE-

标签：#RCE
GitHub
GitHub - z3ro/Freepbx-API-RCE-: FREEPBX 2023 [13,14,15,16] low level Authenticated RCE
GitHub - z3ro/Freepbx-API-RCE-: FREEPBX 2023 [13,14,15,16] low level Authenticated RCE
FREEPBX 2023 [13,14,15,16] low level Authenticated RCE - GitHub - z3ro/Freepbx-API-RCE-: FREEPBX 2023 [13,14,15,16] low level Authenticated RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-36553 unauthenticated RCE PoC for Fortinet Fortisiem
URL：https://github.com/kenit7s/CVE-2023-36553-RCE

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：I Doc View RCE PoC Repo.
URL：https://github.com/yggo/I_Doc_View_RCE

标签：#RCE
GitHub
yggo/I_Doc_View_RCE
yggo/I_Doc_View_RCE
I Doc View RCE PoC Repo. Contribute to yggo/I_Doc_View_RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Teaming
URL：https://github.com/thepcn3rd/goAdv

标签：#Red Team
GitHub
GitHub - thepcn3rd/goAdv: Red Teaming
GitHub - thepcn3rd/goAdv: Red Teaming
Red Teaming. Contribute to thepcn3rd/goAdv development by creating an account on GitHub.
Red
GitHub监控消息提醒！！！

更新了：RCE
描述：RCEMIP-II
URL：https://github.com/shauntmcgovern/893BRemovedAll8i8lenceAndPrototyp8s_Incl-iMSDT-s---_OpenSo-u-rceG-Tx-TTxdedddeded88

标签：#RCE
GitHub
GitHub - shauntmcgovern/OpenSourceValidRadarInfraredVideoGameSonarLaserResearcherPrecursor2-1--2--2-2--1--2-: Radar, Sonar, Thermal…
GitHub - shauntmcgovern/OpenSourceValidRadarInfraredVideoGameSonarLaserResearcherPrecursor2-1--2--2-2--1--2-: Radar, Sonar, Thermal…
Radar, Sonar, Thermal, Infrared, Laser, Weather, Forensic and Future well-being of any individiual in a medical, taxonomic, biological, chemical, physical, branch-ecclesiastical-type face and warre...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：PoC for the CVE-2023-49103
URL：https://github.com/creacitysec/CVE-2023-49103

标签：#CVE-2023
GitHub
GitHub - creacitysec/CVE-2023-49103: PoC for the CVE-2023-49103
GitHub - creacitysec/CVE-2023-49103: PoC for the CVE-2023-49103
PoC for the CVE-2023-49103. Contribute to creacitysec/CVE-2023-49103 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：My notes containing the Certified Red Team Professional Course
URL：https://github.com/HackerTXK/Recon_auto

标签：#Red Team
GitHub
HackerTXK/Recon_auto
Whether you are a bounty hunter, a penetration tester, or a member of the Red Team, you may waste a lot of time during the normal reconnaissance phase, this automated reconnaissance script may save...
Red
GitHub监控消息提醒！！！

更新了：Red Team
描述：Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more
URL：https://github.com/edoardottt/malicious-rMQR-Codes

标签：#Red Team
GitHub
GitHub - edoardottt/malicious-rMQR-Codes: Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments…
Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more - edoardottt/malicious-rMQR-Codes
Red
GitHub监控消息提醒！！！

更新了：burp
描述：Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。
URL：https://github.com/f0ng/autoDecoder

标签：#burp
GitHub
GitHub - f0ng/autoDecoder: Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。
GitHub - f0ng/autoDecoder: Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。
Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。 - f0ng/autoDecoder
burp
GitHub监控消息提醒！！！

更新了：绕过
描述：自动更新获取常用域名服务的即时IP，可以配合SwitchHosts进行一键修改。这样可以绕过相关限制，以及省去DNS查询解析。
URL：https://github.com/r007b34r/Web-event-trigger-bot

标签：#绕过
GitHub
GitHub - r007b34r/Web-event-trigger-bot: web event trigger bot extension for google browser,Use burp to monitor traffic, no longer…
web event trigger bot extension for google browser,Use burp to monitor traffic, no longer need to click everywhere with the mouse，Basically can bypass all anti-crawling strategies,make life easier!...
绕过
GitHub监控消息提醒！！！

更新了：RCE
描述：Laravel RCE (CVE-2021-3129)
URL：https://github.com/joshuavanderpoll/CVE-2021-3129

标签：#RCE
GitHub
GitHub - joshuavanderpoll/CVE-2021-3129: Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)
GitHub - joshuavanderpoll/CVE-2021-3129: Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)
Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection) - joshuavanderpoll/CVE-2021-3129
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：exploit for cve-2023-47246 SysAid RCE (shell upload)
URL：https://github.com/rainbowhatrkn/CVE-2023-47246

标签：#RCE
GitHub
rainbowhatrkn/CVE-2023-47246
rainbowhatrkn/CVE-2023-47246
exploit for cve-2023-47246 SysAid RCE (shell upload) - rainbowhatrkn/CVE-2023-47246
RCE
GitHub监控消息提醒！！！

更新了：webshell
描述：kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略
URL：https://github.com/kunwu2023/kunwu

标签：#webshell
GitHub
GitHub - kunwu2023/kunwu: kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略
GitHub - kunwu2023/kunwu: kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略
kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略 - kunwu2023/kunwu
webshell
GitHub监控消息提醒！！！

更新了：Red Team
描述：Open-Source C2 Framework for Red Team Assessments
URL：https://github.com/ComplexSec/PikaC2

标签：#Red Team
GitHub
GitHub - ComplexSec/PikaC2: Open-Source C2 Framework for Red Team Assessments
GitHub - ComplexSec/PikaC2: Open-Source C2 Framework for Red Team Assessments
Open-Source C2 Framework for Red Team Assessments. Contribute to ComplexSec/PikaC2 development by creating an account on GitHub.
Red
Before
After
Back to Top