​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Unauthenticated RCE in ZoneMinder Snapshots
URL：https://github.com/rvizx/CVE-2023-26035

标签：#CVE-2023
GitHub
GitHub - rvzsec/CVE-2023-26035: Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit
GitHub - rvzsec/CVE-2023-26035: Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit
Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit - rvzsec/CVE-2023-26035
CVE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike BOFS
URL：https://github.com/Workingdaturah/BOF-Learning

标签：#Cobalt Strike
GitHub
GitHub - Workingdaturah/BOF-Learning: Cobalt Strike BOFS
GitHub - Workingdaturah/BOF-Learning: Cobalt Strike BOFS
Cobalt Strike BOFS. Contribute to Workingdaturah/BOF-Learning development by creating an account on GitHub.
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Cisco CVE-2023-20198
URL：https://github.com/Vulnmachines/Cisco_CVE-2023-20198

标签：#CVE-2023
GitHub
GitHub - Vulnmachines/Cisco_CVE-2023-20198: Cisco CVE-2023-20198
GitHub - Vulnmachines/Cisco_CVE-2023-20198: Cisco CVE-2023-20198
Cisco CVE-2023-20198. Contribute to Vulnmachines/Cisco_CVE-2023-20198 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：免杀
描述：一键免杀冰蝎、哥斯拉等webshel​​l的php、jsp木马文件
URL：https://github.com/xiaogang000/XG_NTAI

标签：#免杀
GitHub
GitHub - xiaogang000/XG_NTAI: 用于Webshell木马免杀、流量加密传输，多多支持star
用于Webshell木马免杀、流量加密传输，多多支持star. Contribute to xiaogang000/XG_NTAI development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：Metabase postgres (org.h2.Driver) RCE without INIT
URL：https://github.com/0utl4nder/Another-Metabase-RCE-CVE-2023-38646

标签：#RCE
GitHub
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
Metabase postgres (org.h2.Driver) RCE without INIT - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Metabase postgres (org.h2.Driver) RCE without INIT
URL：https://github.com/0utl4nder/Another-Metabase-RCE-CVE-2023-38646-

标签：#RCE
GitHub
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
GitHub - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646: Metabase postgres (org.h2.Driver) RCE without INIT
Metabase postgres (org.h2.Driver) RCE without INIT - 0utl4nder/Another-Metabase-RCE-CVE-2023-38646
RCE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：PoC of CVE-2023-4911
URL：https://github.com/snurkeburk/Looney-Tunables

标签：#CVE-2023
GitHub
GitHub - snurkeburk/Looney-Tunables: PoC of CVE-2023-4911
GitHub - snurkeburk/Looney-Tunables: PoC of CVE-2023-4911
PoC of CVE-2023-4911. Contribute to snurkeburk/Looney-Tunables development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Ansible Playbook for CVE-2023-4966
URL：https://github.com/ditekshen/ansible-cve-2023-4966

标签：#CVE-2023
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。
URL：https://github.com/xu-xiang/awesome-security-vul-llm

标签：#信息收集
GitHub
GitHub - xu-xiang/awesome-security-vul-llm: 本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇…
本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。 - xu-xiang/awesome-security-vul-llm
信息收集
GitHub监控消息提醒！！！

更新了：RCE
描述：The frontend app for my toy RCE project
URL：https://github.com/KhachikAstoyan/toy-tce-client

标签：#RCE
GitHub
GitHub - KhachikAstoyan/toy-tce-client: The frontend app for my toy RCE project
GitHub - KhachikAstoyan/toy-tce-client: The frontend app for my toy RCE project
The frontend app for my toy RCE project. Contribute to KhachikAstoyan/toy-tce-client development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：护网
描述：Java-JWT 安全加密 JSON 数据，安全传输，守护网络安全
URL：https://github.com/AstralQuanta/CustomJWT

标签：#护网
GitHub
GitHub - AstralQuanta/CustomJWT: Java-JWT Securely Encrypts JSON Data for Secure Transmission and Network Security
GitHub - AstralQuanta/CustomJWT: Java-JWT Securely Encrypts JSON Data for Secure Transmission and Network Security
Java-JWT Securely Encrypts JSON Data for Secure Transmission and Network Security - AstralQuanta/CustomJWT
护网
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Exploit for CVE-2023-46604
URL：https://github.com/mrpentst/CVE-2023-46604

标签：#CVE-2023
GitHub
GitHub - mrpentst/CVE-2023-46604: Exploit for CVE-2023-46604
GitHub - mrpentst/CVE-2023-46604: Exploit for CVE-2023-46604
Exploit for CVE-2023-46604. Contribute to mrpentst/CVE-2023-46604 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：钓鱼
描述：钓鱼,Telegram:@abc362,渔具,水库,水产,鱼类,观赏鱼,淡水鱼 #鱼百科 #金鱼 #鲤科 Fishing, fishing gear, reservoirs, aquatic products, fish, ornamental fish, freshwater fish, fish encyclopedia, goldfish, carps
URL：https://github.com/mayeobey/feder

标签：#钓鱼
GitHub
GitHub - mayeobey/feder: 钓鱼,Telegram:@abc362,渔具,水库,水产,鱼类,观赏鱼,淡水鱼 #鱼百科 #金鱼 #鲤科 Fishing, fishing gear, reservoirs, aquatic products…
钓鱼,Telegram:@abc362,渔具,水库,水产,鱼类,观赏鱼,淡水鱼 #鱼百科 #金鱼 #鲤科 Fishing, fishing gear, reservoirs, aquatic products, fish, ornamental fish, freshwater fish, fish encyclopedia, goldfish, carps - GitHub - mayeo...
鱼百科 金鱼 鲤科 钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
URL：https://github.com/mbadanoiu/CVE-2023-49964

标签：#CVE-2023
GitHub
GitHub - mbadanoiu/CVE-2023-49964: CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
GitHub - mbadanoiu/CVE-2023-49964: CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco - mbadanoiu/CVE-2023-49964
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-20273 Exploit PoC
URL：https://github.com/smokeintheshell/CVE-2023-20273

标签：#CVE-2023
GitHub
GitHub - smokeintheshell/CVE-2023-20273: CVE-2023-20273 Exploit PoC
GitHub - smokeintheshell/CVE-2023-20273: CVE-2023-20273 Exploit PoC
CVE-2023-20273 Exploit PoC. Contribute to smokeintheshell/CVE-2023-20273 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198
URL：https://github.com/netbell/CVE-2023-20198-Fix

标签：#CVE-2023
GitHub
GitHub - netbell/CVE-2023-20198-Fix: Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198
GitHub - netbell/CVE-2023-20198-Fix: Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198
Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198 - netbell/CVE-2023-20198-Fix
CVE
GitHub监控消息提醒！！！

更新了：红队
描述：Vps_tracker一款攻防演练中快速定位红队资产工具
URL：https://github.com/GeniusZJL/Vps_tracke

标签：#红队
GitHub
GitHub - LittlePeachZ/Vps_tracke: Vps_tracker一款攻防演练中快速定位红队资产工具
GitHub - LittlePeachZ/Vps_tracke: Vps_tracker一款攻防演练中快速定位红队资产工具
Vps_tracker一款攻防演练中快速定位红队资产工具. Contribute to LittlePeachZ/Vps_tracke development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：bypass av
描述：一次免杀实践（bypass 360、huorong、windows defender、kaspersky、）
URL：https://github.com/minhangxiaohui/AvoidRandomKill

标签：#bypass av
GitHub
GitHub - minhangxiaohui/AvoidRandomKill: 一次免杀实践（bypass 360、huorong、windows defender、kaspersky、）
一次免杀实践（bypass 360、huorong、windows defender、kaspersky、） - minhangxiaohui/AvoidRandomKill
bypass
GitHub监控消息提醒！！！

更新了：渗透测试
描述：一段可以让AI回答有关渗透测试问题的话
URL：https://github.com/fsaza/tsc

标签：#渗透测试
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Python Script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.
URL：https://github.com/jmussmann/cve-2023-4966-iocs

标签：#CVE-2023
GitHub
GitHub - jmussmann/cve-2023-4966-iocs: Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.
GitHub - jmussmann/cve-2023-4966-iocs: Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.
Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation. - jmussmann/cve-2023-4966-iocs
CVE
Before
After
Back to Top