​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：反序列化
描述：一个简易的woodpecker反序列化插件
URL：https://github.com/bcvgh/deserialization_payload_generator

标签：#反序列化
GitHub
GitHub - bcvgh/deserialization_payload_generator: 一个简易的woodpecker反序列化插件
GitHub - bcvgh/deserialization_payload_generator: 一个简易的woodpecker反序列化插件
一个简易的woodpecker反序列化插件. Contribute to bcvgh/deserialization_payload_generator development by creating an account on GitHub.
反序列化
美茵曼丽 服饰合集
【89.1元】高腰显瘦加厚宽松阔腿裤
https://u.jd.com/JbLb59q
【89.1元】高腰显瘦老爹直筒牛仔裤
https://u.jd.com/JqLQtie
【99.1元】韩系温柔短款面包服
https://u.jd.com/JbLbFPy
【169.1元】中长款羽绒服
https://u.jd.com/JsLbxFe
GitHub监控消息提醒！！！

更新了：免杀
描述：记录分离免杀用到了代码
URL：https://github.com/redqx/bypass_01

标签：#免杀
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in PrestaShop E-Commerce
URL：https://github.com/nowak0x01/PrestaXSRF

标签：#RCE
GitHub
GitHub - nowak0x01/PrestaXSRF: PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote…
GitHub - nowak0x01/PrestaXSRF: PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote…
PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in PrestaShop E-Commerce - nowak0x...
RCE
GitHub监控消息提醒！！！

更新了：webshell
描述：Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell into webserver
URL：https://github.com/PadishahIII/Behinder-EDR-Bypass

标签：#webshell
GitHub
GitHub - PadishahIII/Behinder-EDR-Bypass: Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell…
GitHub - PadishahIII/Behinder-EDR-Bypass: Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell…
Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell onto webserver - PadishahIII/Behinder-EDR-Bypass
webshell
GitHub监控消息提醒！！！

更新了：内存马
描述：nginx WebShell/内存马，更优雅的nignx backdoor
URL：https://github.com/veo/nginx_shell

标签：#内存马
GitHub
GitHub - veo/nginx_shell: nginx WebShell/内存马，更优雅的nignx backdoor
GitHub - veo/nginx_shell: nginx WebShell/内存马，更优雅的nignx backdoor
nginx WebShell/内存马，更优雅的nignx backdoor. Contribute to veo/nginx_shell development by creating an account on GitHub.
内存马
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：CVE-2023-51385
URL：https://github.com/WLaoDuo/CVE-2023-51385_poc-test

标签：#CVE-2023
GitHub
GitHub - WLaoDuo/CVE-2023-51385_poc-test: CVE-2023-51385;OpenSSH ProxyCommand RCE;OpenSSH <9.6 命令注入漏洞poc
GitHub - WLaoDuo/CVE-2023-51385_poc-test: CVE-2023-51385;OpenSSH ProxyCommand RCE;OpenSSH <9.6 命令注入漏洞poc
CVE-2023-51385;OpenSSH ProxyCommand RCE;OpenSSH <9.6 命令注入漏洞poc - WLaoDuo/CVE-2023-51385_poc-test
CVE
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过官方QQ机器人的url检测
URL：https://github.com/windbullet/koishi-plugin-qqurl-bypass

标签：#绕过
GitHub
GitHub - windbullet/koishi-plugin-qqurl-bypass: 绕过官方QQ机器人的url检测
绕过官方QQ机器人的url检测. Contribute to windbullet/koishi-plugin-qqurl-bypass development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：信息收集
描述：利用Python编写的简单信息收集脚本，可以进行子域名，ip反差，cdn信息，端口信息，系统详情信息收集
URL：https://github.com/n0Sleeper/infoScan

标签：#信息收集
GitHub
GitHub - n0Sleeper/infoScan: 利用Python编写的简单信息收集脚本，可以进行子域名，ip反差，cdn信息，端口信息，系统详情信息收集
GitHub - n0Sleeper/infoScan: 利用Python编写的简单信息收集脚本，可以进行子域名，ip反差，cdn信息，端口信息，系统详情信息收集
利用Python编写的简单信息收集脚本，可以进行子域名，ip反差，cdn信息，端口信息，系统详情信息收集 - n0Sleeper/infoScan
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：Exploit Development using python for CVE-2023-38831 (POC)
URL：https://github.com/r1yaz/winDED

标签：#CVE-2023
GitHub
GitHub - r1yaz/winDED: Exploit Development using python for CVE-2023-38831 (POC)
GitHub - r1yaz/winDED: Exploit Development using python for CVE-2023-38831 (POC)
Exploit Development using python for CVE-2023-38831 (POC) - r1yaz/winDED
CVE
GitHub监控消息提醒！！！

更新了：漏洞验证
描述：集漏洞验证和任务运行的一个框架
URL：https://github.com/1c3z/ARL-NPoC

标签：#漏洞验证
漏洞验证
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：一个验证对CVE-2023-51385
URL：https://github.com/zls1793/CVE-2023-51385_test

标签：#CVE-2023
GitHub
GitHub - LtmThink/CVE-2023-51385_test: 一个验证对CVE-2023-51385
GitHub - LtmThink/CVE-2023-51385_test: 一个验证对CVE-2023-51385
一个验证对CVE-2023-51385. Contribute to LtmThink/CVE-2023-51385_test development by creating an account on GitHub.
CVE
九洲鹿双人双控水暖毯电热毯 150*180cm
https://u.jd.com/EiUxX4R
下单59.9元
真维斯 男秋冬加绒圆领卫衣
https://u.jd.com/EsUUAhJ
任选2件64.8亓，折32.4/件
GitHub监控消息提醒！！！

更新了：CVE-2023
描述：OpenSSH ProxyCommand RCE
URL：https://github.com/Le1a/CVE-2023-51385

标签：#CVE-2023
GitHub
GitHub - Le1a/CVE-2023-51385: OpenSSH ProxyCommand RCE
GitHub - Le1a/CVE-2023-51385: OpenSSH ProxyCommand RCE
OpenSSH ProxyCommand RCE. Contribute to Le1a/CVE-2023-51385 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：Hearts K-企业资产发现与脆弱性检查工具，自动化资产信息收集与漏洞扫描
URL：https://github.com/yqcs/heartsk_community

标签：#信息收集
GitHub
GitHub - yqcs/heartsk_community: Hearts K-企业资产发现与脆弱性检查工具，自动化资产信息收集与漏洞扫描
GitHub - yqcs/heartsk_community: Hearts K-企业资产发现与脆弱性检查工具，自动化资产信息收集与漏洞扫描
Hearts K-企业资产发现与脆弱性检查工具，自动化资产信息收集与漏洞扫描. Contribute to yqcs/heartsk_community development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试流程编排测试
URL：https://github.com/l3v3lFORall/Sanger

标签：#渗透测试
GitHub
GitHub - l3v3lFORall/Sanger: 渗透测试流程编排测试
GitHub - l3v3lFORall/Sanger: 渗透测试流程编排测试
渗透测试流程编排测试. Contribute to l3v3lFORall/Sanger development by creating an account on GitHub.
渗透测试
Before
After
Back to Top