​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：轻量化sql漏洞检测_毕设代码，20251119开始设计。哪位大佬可以指点一二
URL：https://github.com/YAnglduo/sqlight

标签：#漏洞检测
GitHub
GitHub - YAnglduo/sqlight: 轻量化sql漏洞检测_毕设代码，20251119开始设计。哪位大佬可以指点一二
GitHub - YAnglduo/sqlight: 轻量化sql漏洞检测_毕设代码，20251119开始设计。哪位大佬可以指点一二
轻量化sql漏洞检测_毕设代码，20251119开始设计。哪位大佬可以指点一二. Contribute to YAnglduo/sqlight development by creating an account on GitHub.
漏洞检测
GitHub监控消息提醒！！！

更新了：hvv
描述：Auto-generated backend repository for project prj_hvveroa9
URL：https://github.com/sarigama-github/backend-repo_hvveroa9_3nzmot

标签：#hvv
GitHub
GitHub - sarigama-github/backend-repo_hvveroa9_3nzmot: Auto-generated backend repository for project prj_hvveroa9
GitHub - sarigama-github/backend-repo_hvveroa9_3nzmot: Auto-generated backend repository for project prj_hvveroa9
Auto-generated backend repository for project prj_hvveroa9 - sarigama-github/backend-repo_hvveroa9_3nzmot
hvv
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-10230
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-10230

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject` system call.
URL：https://github.com/canomer/CVE-2025-54110-Kernel-EoP-PoC

标签：#CVE-2025
GitHub
GitHub - canomer/CVE-2025-54110-Kernel-EoP-PoC: Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level…
Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject` system call. - canomer/CVE-2025-54110-Kernel-Eo...
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试工具箱框架
URL：https://github.com/zifeiyu-sec/ZiFeiYu-Toolkit

标签：#渗透测试
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-58034
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-58034

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Exploit para explotar la vulnerabilidad RCE presente en la versión 2.3.4 de vsftpd.
URL：https://github.com/Maalfer/vsftpd-2.3.4-exploit

标签：#RCE
GitHub
GitHub - Maalfer/vsftpd-2.3.4-exploit: Exploit para explotar la vulnerabilidad RCE presente en la versión 2.3.4 de vsftpd.
GitHub - Maalfer/vsftpd-2.3.4-exploit: Exploit para explotar la vulnerabilidad RCE presente en la versión 2.3.4 de vsftpd.
Exploit para explotar la vulnerabilidad RCE presente en la versión 2.3.4 de vsftpd. - Maalfer/vsftpd-2.3.4-exploit
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-25255
URL：https://github.com/chjkfbvmvff/CVE-2025-25255

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：Aixcc Atlanta战队的Java漏洞挖掘智能体代码复现。
URL：https://github.com/zyufoye/AIXCC_Atlanta_Java_Running_test

标签：#漏洞挖掘
GitHub
GitHub - zyufoye/AIXCC_Atlanta_Java_Running_test: Aixcc Atlanta战队的Java漏洞挖掘智能体代码复现。
Aixcc Atlanta战队的Java漏洞挖掘智能体代码复现。. Contribute to zyufoye/AIXCC_Atlanta_Java_Running_test development by creating an account on GitHub.
漏洞挖掘
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)
URL：https://github.com/b5null/Invoke-BadSuccessor.ps1

标签：#CVE-2025
GitHub
GitHub - b5null/Invoke-BadSuccessor.ps1: PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)
GitHub - b5null/Invoke-BadSuccessor.ps1: PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)
PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779) - b5null/Invoke-BadSuccessor.ps1
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing Training with just one DOCKER
URL：https://github.com/netw0rk7/CVE-2022-0543-Home-Lab

标签：#RCE
GitHub
GitHub - netw0rk7/CVE-2022-0543-Home-Lab: CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing…
GitHub - netw0rk7/CVE-2022-0543-Home-Lab: CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing…
CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing Training with just one DOCKER - netw0rk7/CVE-2022-0543-Home-Lab
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Small PoC to automate exploitation of CVE-2025-63406.
URL：https://github.com/voidsshadows/Hikvision-City-Hunter

标签：#CVE-2025
GitHub
GitHub - voidsshadows/Hikvision-City-Hunter: This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA…
GitHub - voidsshadows/Hikvision-City-Hunter: This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA…
This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, and honeypot filtering (skips devices ...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-11833 Checker
URL：https://github.com/Kazgangap/CVE-2025-11833

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：Easy File Sharing Web Server 渗透测试
URL：https://github.com/1376524890/Easy-File-Sharing-Web-Server-

标签：#渗透测试
GitHub
GitHub - 1376524890/Easy-File-Sharing-Web-Server-: Easy File Sharing Web Server 渗透测试
GitHub - 1376524890/Easy-File-Sharing-Web-Server-: Easy File Sharing Web Server 渗透测试
Easy File Sharing Web Server 渗透测试. Contribute to 1376524890/Easy-File-Sharing-Web-Server- development by creating an account on GitHub.
渗透测试
GitHub监控消息提醒！！！

更新了：RCE
描述：A collection of responsibly disclosed and anonymized vulnerability reports, including CVEs, XSS, RCE, DoS, and more.
URL：https://github.com/ghostycr/security-research-reports

标签：#RCE
GitHub
GitHub - ghostycr/security-research-reports: A collection of responsibly disclosed and anonymized vulnerability reports, including…
GitHub - ghostycr/security-research-reports: A collection of responsibly disclosed and anonymized vulnerability reports, including…
A collection of responsibly disclosed and anonymized vulnerability reports, including CVEs, XSS, RCE, DoS, and more. - ghostycr/security-research-reports
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Small PoC to automate exploitation of CVE-2025-63406.
URL：https://github.com/WinDyAlphA/CVE-2025-63406-PoC

标签：#CVE-2025
GitHub
GitHub - Nxvh1337/CVE-2025-63406-PoC: Small PoC to automate exploitation of CVE-2025-63406.
GitHub - Nxvh1337/CVE-2025-63406-PoC: Small PoC to automate exploitation of CVE-2025-63406.
Small PoC to automate exploitation of CVE-2025-63406. - Nxvh1337/CVE-2025-63406-PoC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.
URL：https://github.com/abrewer251/CVE-2025-62215_Windows_Kernel_PE

标签：#CVE-2025
GitHub
GitHub - abrewer251/CVE-2025-62215_Windows_Kernel_PE: This PoC demonstrates a race condition in the Windows kernel leading to a…
This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM. The exploit uses multithreaded handle manipulatio...
CVE
GitHub监控消息提醒！！！

更新了：提权
描述：一个神一般的linux全架构全漏洞提权程序
URL：https://github.com/gangyincoding/DocSphere

标签：#提权
GitHub
GitHub - gangyincoding/DocSphere: DocSphere是一款专为现代企业设计的智能文档管理系统，旨在简化企业内部文件的存储、共享和协作流程。通过直观的用户界面和强大的功能，DocSphere帮助团队高效组织、安全管理和便捷访问企业知识资产。…
DocSphere是一款专为现代企业设计的智能文档管理系统，旨在简化企业内部文件的存储、共享和协作流程。通过直观的用户界面和强大的功能，DocSphere帮助团队高效组织、安全管理和便捷访问企业知识资产。 系统采用前后端分离架构，提供响应式设计，确保用户在任何设备上都能获得一致的优质体验。DocSphere的核心理念是"连接人与知识"，通过智能的权限管理...
提权
GitHub监控消息提醒！！！

更新了：钓鱼
描述：七日世界挂机钓鱼工具
URL：https://github.com/WXHD/QRSJ_Fishing

标签：#钓鱼
GitHub
WXHD/QRSJ_Fishing
七日世界挂机钓鱼工具. Contribute to WXHD/QRSJ_Fishing development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：绕过
描述：基于dirSearch 进行了 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别 的改造升级
URL：https://github.com/ZapcoMan/dirsearchplus

标签：#绕过
GitHub
GitHub - ZapcoMan/dirsearchplus: 基于dirSearch 进行了 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别 的改造升级
GitHub - ZapcoMan/dirsearchplus: 基于dirSearch 进行了 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别 的改造升级
基于dirSearch 进行了 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别 的改造升级 - ZapcoMan/dirsearchplus
绕过
Before
After
Back to Top