​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：RCE
描述：This is a POC script for CVE-2025-55182 (React SSR RCE)
URL：https://github.com/Darker-Ink/react-ssr-vulnerability

标签：#RCE
GitHub
GitHub - Darker-Ink/react-ssr-vulnerability: This is a POC script for CVE-2025-55182 (React SSR RCE)
GitHub - Darker-Ink/react-ssr-vulnerability: This is a POC script for CVE-2025-55182 (React SSR RCE)
This is a POC script for CVE-2025-55182 (React SSR RCE) - Darker-Ink/react-ssr-vulnerability
RCE
GitHub监控消息提醒！！！

更新了：攻防
描述：一个批量爬取安全技术社区文章的工具（目前支持先知社区、奇安信攻防社区），支持Markdown、PDF、HTML多种格式输出
URL：https://github.com/Huu1j/crawl_xz

标签：#攻防
GitHub
GitHub - Huu1j/crawl_xz: 一个批量爬取安全技术社区文章的工具（目前支持先知社区、奇安信攻防社区），支持Markdown、PDF、HTML多种格式输出
一个批量爬取安全技术社区文章的工具（目前支持先知社区、奇安信攻防社区），支持Markdown、PDF、HTML多种格式输出 - Huu1j/crawl_xz
攻防
GitHub监控消息提醒！！！

更新了：绕过
描述：自动更新获取常用域名服务的即时IP，可以配合SwitchHosts进行一键修改。这样可以绕过相关限制，以及省去DNS查询解析。
URL：https://github.com/lza6/infip-2api-cfwork

标签：#绕过
GitHub
GitHub - lza6/infip-2api-cfwork: Cloudflare Workers 边缘计算 · 无需 Cookie (自动凭证获取/会话保活) · 浏览器指纹全真模拟 (User-Agent/Sec-CH-UA) · 动态 IP 伪装与轮询…
Cloudflare Workers 边缘计算 · 无需 Cookie (自动凭证获取/会话保活) · 浏览器指纹全真模拟 (User-Agent/Sec-CH-UA) · 动态 IP 伪装与轮询 (绕过 IP 封禁) · 深度抗 429/WAF 限流策略 · 智能指数退避重试机制 · 强制串行队列管理 · OpenAI 流式接口 (SSE) 完美转译 · 多模态 (Vision/Base6...
绕过
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A proof of concept exploit script for CVE-2025-55182
URL：https://github.com/Cillian-Collins/CVE-2025-55182

标签：#CVE-2025
GitHub
GitHub - Cillian-Collins/CVE-2025-55182: A proof of concept exploit script for CVE-2025-55182
GitHub - Cillian-Collins/CVE-2025-55182: A proof of concept exploit script for CVE-2025-55182
A proof of concept exploit script for CVE-2025-55182 - Cillian-Collins/CVE-2025-55182
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects
URL：https://github.com/ZihxS/check-react-rce-cve-2025-55182

标签：#RCE
GitHub
GitHub - ZihxS/check-react-rce-cve-2025-55182: Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React…
GitHub - ZihxS/check-react-rce-cve-2025-55182: Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React…
Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects - ZihxS/check-react-rce-cve-2025-55182
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only.
URL：https://github.com/KrE80r/cve-2025-13486-vuln-setup

标签：#RCE
GitHub
GitHub - KrE80r/cve-2025-13486-vuln-setup: Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research…
GitHub - KrE80r/cve-2025-13486-vuln-setup: Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research…
Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only. - KrE80r/cve-2025-13486-vuln-setup
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Checks if your NextJS server is vulnerable to CVE-2025-66478
URL：https://github.com/mattcbarrett/check-cve-2025-66478

标签：#CVE-2025
GitHub
GitHub - mattcbarrett/check-cve-2025-66478: Checks if your NextJS server is vulnerable to CVE-2025-66478
GitHub - mattcbarrett/check-cve-2025-66478: Checks if your NextJS server is vulnerable to CVE-2025-66478
Checks if your NextJS server is vulnerable to CVE-2025-66478 - mattcbarrett/check-cve-2025-66478
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Community tool to detect and remediate CVE-2025-55182 (React2Shell) - Critical RCE vulnerability in React Server Components
URL：https://github.com/nxgn-kd01/cve-2025-55182-scanner

标签：#RCE
GitHub
GitHub - nxgn-kd01/react2shell-scanner: Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast…
GitHub - nxgn-kd01/react2shell-scanner: Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast…
Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives. - nxgn-kd01/react2shell-scanner
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Functional Python POC to test if servers are vulnerable to CVE-2025-55182
URL：https://github.com/aquinn-r7/CVE-2025-55182-VulnCheckPOC

标签：#CVE-2025
GitHub
GitHub - aquinn-r7/CVE-2025-55182-VulnCheckPOC: Functional Python POC to test if servers are vulnerable to CVE-2025-55182
GitHub - aquinn-r7/CVE-2025-55182-VulnCheckPOC: Functional Python POC to test if servers are vulnerable to CVE-2025-55182
Functional Python POC to test if servers are vulnerable to CVE-2025-55182 - aquinn-r7/CVE-2025-55182-VulnCheckPOC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Burp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).
URL：https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

标签：#CVE-2025
GitHub
GitHub - tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension: Burp Suite extension to detect the Next.js / React Server Components…
GitHub - tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension: Burp Suite extension to detect the Next.js / React Server Components…
Burp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478). - tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-S...
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Burp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).
URL：https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension-

标签：#RCE
GitHub
GitHub - tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension: Burp Suite extension to detect the Next.js / React Server Components…
GitHub - tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension: Burp Suite extension to detect the Next.js / React Server Components…
Burp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478). - tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-S...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-55182 detection for Vite Rsc and NextJS. Real shit, no LLMs
URL：https://github.com/acheong08/CVE-2025-55182-detection

标签：#CVE-2025
GitHub
GitHub - acheong08/CVE-2025-55182-poc: Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.
GitHub - acheong08/CVE-2025-55182-poc: Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.
Actual CVE-2025-55182 detection and exploit. No bullshit LLMs. - acheong08/CVE-2025-55182-poc
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：Scout 是一个基于 Roo Code VS Code 扩展 设计的实验性 Agent 实现。它专注于通过模拟人类行为进行精准的网络信息收集、研究与交互，旨在将 Roo Code 转变为一个强大的 Web 研究助手。
URL：https://github.com/pdyt/-MCMC-

标签：#信息收集
GitHub
GitHub - pdyt/-MCMC-: 比特币作为区块链驱动的另类资产，以 2100 万枚稀缺性、与传统资产低相关性等属性成为配置标的，但其极致时变波动对收益刻画构成挑战。传统 ARCH 类模型因波动率的确定性设定，难适配其波动聚集、厚尾特征；随机…
比特币作为区块链驱动的另类资产，以 2100 万枚稀缺性、与传统资产低相关性等属性成为配置标的，但其极致时变波动对收益刻画构成挑战。传统 ARCH 类模型因波动率的确定性设定，难适配其波动聚集、厚尾特征；随机波动率（SV）模型将波动率对数设为线性随机过程，更契合信息流驱动的波动逻辑。 本文以 2015-2025 年比特币对美元日收益率为样本，采用马尔可夫链蒙特卡洛方法估计 SV 模型 —— ...
信息收集
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike aggressor script to add context-menu option for clearing beacon queue
URL：https://github.com/PN-Tester/AbortCommand

标签：#Cobalt Strike
GitHub
GitHub - PN-Tester/AbortCommand: CobaltStrike aggressor script to add context-menu option for clearing beacon queues
GitHub - PN-Tester/AbortCommand: CobaltStrike aggressor script to add context-menu option for clearing beacon queues
CobaltStrike aggressor script to add context-menu option for clearing beacon queues - PN-Tester/AbortCommand
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Poc for CVE-2025-55182
URL：https://github.com/Emiyelbarto/CVE-2025-55182-PoC

标签：#CVE-2025
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages)
URL：https://github.com/EynaExp/CVE-2025-55182-POC

标签：#CVE-2025
GitHub
GitHub - EynaExp/CVE-2025-55182-POC: Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components…
GitHub - EynaExp/CVE-2025-55182-POC: Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components…
Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages) - EynaExp/CVE-2025-55182-POC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)
URL：https://github.com/shamo0/react2shell-PoC

标签：#CVE-2025
GitHub
GitHub - shamo0/react2shell-PoC: Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)
GitHub - shamo0/react2shell-PoC: Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)
Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478) - shamo0/react2shell-PoC
CVE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.
URL：https://github.com/jctommasi/react2shellVulnApp

标签：#CVE-2025
GitHub
GitHub - jctommasi/react2shellVulnApp: Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js)…
GitHub - jctommasi/react2shellVulnApp: Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js)…
Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. - jcto...
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Not a POC. Just notes on stuff I've tried and the weird behaviors I see. Still no RCE but can detect the presence of vulnerability based on response
URL：https://github.com/acheong08/CVE-2025-55182-vite-rsc

标签：#RCE
GitHub
GitHub - acheong08/CVE-2025-55182-poc: Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.
GitHub - acheong08/CVE-2025-55182-poc: Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.
Actual CVE-2025-55182 detection and exploit. No bullshit LLMs. - acheong08/CVE-2025-55182-poc
RCE
GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-55182 POC for Next.js App Router
URL：https://github.com/deadbeesec/CVE-2025-55182-POC-for-Next.js

标签：#CVE-2025
CVE
Before
After
Back to Top