​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：护网
描述：红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具
URL：https://github.com/besscroft/kamera

标签：#护网
GitHub
GitHub - besscroft/kamera: 摄影记录网站，基于 Nuxt 3 开发，支持常见的图片格式。图片存储兼容 S3 API、AList API、支持 CDN 配置。同时适配了 PC 和移动端的样式与交互。
GitHub - besscroft/kamera: 摄影记录网站，基于 Nuxt 3 开发，支持常见的图片格式。图片存储兼容 S3 API、AList API、支持 CDN 配置。同时适配了 PC 和移动端的样式与交互。
摄影记录网站，基于 Nuxt 3 开发，支持常见的图片格式。图片存储兼容 S3 API、AList API、支持 CDN 配置。同时适配了 PC 和移动端的样式与交互。 - besscroft/kamera
护网
GitHub监控消息提醒！！！

更新了：权限提升
描述：Elevate process privileges to the System or Trustedinstaller,将进程权限提升到 System 或 Trustedinstaller
URL：https://github.com/coldpon/windows-process-elevation-tool

标签：#权限提升
GitHub
GitHub - coldpon/runasSystemOrTrustedinstaller: get privilege to System or Trustedinstaller
GitHub - coldpon/runasSystemOrTrustedinstaller: get privilege to System or Trustedinstaller
get privilege to System or Trustedinstaller. Contribute to coldpon/runasSystemOrTrustedinstaller development by creating an account on GitHub.
权限提升
GitHub监控消息提醒！！！

更新了：攻防
描述：个人搭建的攻防知识库，考试结束后开始更新
URL：https://github.com/cvestone/cvestone.github.io

标签：#攻防
GitHub
GitHub - cvestone/cvestone.github.io: This repo includes all CTF-related attachments from my blog.
GitHub - cvestone/cvestone.github.io: This repo includes all CTF-related attachments from my blog.
This repo includes all CTF-related attachments from my blog. - cvestone/cvestone.github.io
攻防
GitHub监控消息提醒！！！

更新了：免杀
描述：免杀一句话木马
URL：https://github.com/Cunzn/Yi_juhua

标签：#免杀
GitHub
GitHub - Cunzn/Yi_juhua: 免杀一句话木马
GitHub - Cunzn/Yi_juhua: 免杀一句话木马
免杀一句话木马. Contribute to Cunzn/Yi_juhua development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：RCE
描述：ZenTaoPMS RCE
URL：https://github.com/l3s10n/ZenTaoPMS_RCE

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：代码审计
描述：AI-empowered intelligent code audit project / AI赋能的智能代码审计工程
URL：https://github.com/bayuncao/kelp

标签：#代码审计
代码审计
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Aggressor Scripts for Cobalt Strike
URL：https://github.com/secgroundzero/CS-Aggressor-Scripts

标签：#Cobalt Strike
GitHub
GitHub - secgroundzero/CS-Aggressor-Scripts: Aggressor Scripts for Cobalt Strike
GitHub - secgroundzero/CS-Aggressor-Scripts: Aggressor Scripts for Cobalt Strike
Aggressor Scripts for Cobalt Strike. Contribute to secgroundzero/CS-Aggressor-Scripts development by creating an account on GitHub.
Cobalt
GitHub监控消息提醒！！！

更新了：webshell
描述：Simple yet usefull PHP webshell
URL：https://github.com/20100dbg/PHPshell

标签：#webshell
GitHub
GitHub - 20100dbg/PHPshell: Simple yet useful PHP webshell
GitHub - 20100dbg/PHPshell: Simple yet useful PHP webshell
Simple yet useful PHP webshell. Contribute to 20100dbg/PHPshell development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-23199
URL：https://github.com/l00neyhacker/CVE-2024-23199

标签：#CVE-2024
GitHub
GitHub - l00neyhacker/CVE-2024-23199: CVE-2024-23199
GitHub - l00neyhacker/CVE-2024-23199: CVE-2024-23199
CVE-2024-23199. Contribute to l00neyhacker/CVE-2024-23199 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-23200
URL：https://github.com/l00neyhacker/CVE-2024-23200

标签：#CVE-2024
GitHub
GitHub - l00neyhacker/CVE-2024-23200: CVE-2024-23200
GitHub - l00neyhacker/CVE-2024-23200: CVE-2024-23200
CVE-2024-23200. Contribute to l00neyhacker/CVE-2024-23200 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：代码审计
描述：用于练习Java开发的springboot前后端分离大事件文章后台管理系统，也可以用于练习Java代码审计，里面存在常见漏洞。
URL：https://github.com/Vulner-6/BigEvent

标签：#代码审计
GitHub
GitHub - Vulner-6/BigEvent: 用于练习Java开发的springboot前后端分离大事件文章后台管理系统，也可以用于练习Java代码审计，里面存在常见漏洞。
GitHub - Vulner-6/BigEvent: 用于练习Java开发的springboot前后端分离大事件文章后台管理系统，也可以用于练习Java代码审计，里面存在常见漏洞。
用于练习Java开发的springboot前后端分离大事件文章后台管理系统，也可以用于练习Java代码审计，里面存在常见漏洞。 - Vulner-6/BigEvent
代码审计
GitHub监控消息提醒！！！

更新了：RCE
描述：Research work on implementing RCE in micro-python as proof of concept for research with Dr Sass
URL：https://github.com/Jayers0/ESP32-UART_RCE

标签：#RCE
GitHub
GitHub - Jayers0/ESP32-UART_RCE: Research work on implementing RCE in micro-python as proof of concept for research with Dr Sass
GitHub - Jayers0/ESP32-UART_RCE: Research work on implementing RCE in micro-python as proof of concept for research with Dr Sass
Research work on implementing RCE in micro-python as proof of concept for research with Dr Sass - Jayers0/ESP32-UART_RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：POC Checker for ivanti CVE-2024-21887 Command injcetion
URL：https://github.com/oways/ivanti-CVE-2024-21887

标签：#CVE-2024
GitHub
GitHub - oways/ivanti-CVE-2024-21887: POC Checker for ivanti CVE-2024-21887 Command injcetion
GitHub - oways/ivanti-CVE-2024-21887: POC Checker for ivanti CVE-2024-21887 Command injcetion
POC Checker for ivanti CVE-2024-21887 Command injcetion - oways/ivanti-CVE-2024-21887
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：兰州大学学工处管理科 无《高校学生证明表》模板信息收集 前台
URL：https://github.com/sky-eve-yang/LZU-collectAndSendEmail

标签：#信息收集
GitHub
GitHub - sky-eve-yang/LZU-collectAndSendEmail: 兰州大学学工处管理科 无《高校学生证明表》模板信息收集 前台
GitHub - sky-eve-yang/LZU-collectAndSendEmail: 兰州大学学工处管理科 无《高校学生证明表》模板信息收集 前台
兰州大学学工处管理科 无《高校学生证明表》模板信息收集 前台. Contribute to sky-eve-yang/LZU-collectAndSendEmail development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：免杀
描述：fscan免杀
URL：https://github.com/wjlin0/fscan

标签：#免杀
GitHub
GitHub - wjlin0/fscan: fscan免杀
fscan免杀. Contribute to wjlin0/fscan development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：Red Team
描述：I worked on a Red Team vs. Blue Team scenario in which I played the role of both penetration tester and SOC analyst.
URL：https://github.com/6vr/Red-Team-vs-Blue-Team

标签：#Red Team
GitHub
GitHub - 6vr/Red-Team-vs-Blue-Team: I worked on a Red Team vs Blue Team scenario in which i played the role of both penetration…
GitHub - 6vr/Red-Team-vs-Blue-Team: I worked on a Red Team vs Blue Team scenario in which i played the role of both penetration…
I worked on a Red Team vs Blue Team scenario in which i played the role of both penetration tester and SOC analyst. - 6vr/Red-Team-vs-Blue-Team
Red
GitHub监控消息提醒！！！

更新了：免杀
描述：免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus
URL：https://github.com/passwa11/Bundler-bypass

标签：#免杀
GitHub
GitHub - passwa11/Bundler-bypass: 免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus
GitHub - passwa11/Bundler-bypass: 免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus
免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus. Contribute to passwa11/Bundler-bypass development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：y4-jdk is an openjdk8u branch that is designed with a great emphasis on security features (y4-jdk是一个openjdk8u分支，重点关注安全特性，防止可能的漏洞利用，做安全方面的完善和改进)
URL：https://github.com/4ra1n/jdk-8

标签：#漏洞利用
漏洞利用
GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) Proof of Concept
URL：https://github.com/sunnyvale-it/CVE-2023-50164-PoC

标签：#RCE
GitHub
GitHub - sunnyvale-it/CVE-2023-50164-PoC: CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) - Proof of Concept
GitHub - sunnyvale-it/CVE-2023-50164-PoC: CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) - Proof of Concept
CVE-2023-50164 (Apache Struts path traversal to RCE vulnerability) - Proof of Concept - sunnyvale-it/CVE-2023-50164-PoC
RCE
GitHub监控消息提醒！！！

更新了：代码注入
描述：针对uniapp的APP、小程序可以通过配置注入全局组件，可以通过代码注入或标签的形式注入
URL：https://github.com/zuoyangs/go-devops-observability

标签：#代码注入
GitHub
GitHub - zuoyangs/go-devops-observability: go-devops-observability 是一个专注于提升DevOps流程和工作流可观测性的仓库。它提供了工具和实用程序来监控、分析和优化DevOps实践的性能…
GitHub - zuoyangs/go-devops-observability: go-devops-observability 是一个专注于提升DevOps流程和工作流可观测性的仓库。它提供了工具和实用程序来监控、分析和优化DevOps实践的性能…
go-devops-observability 是一个专注于提升DevOps流程和工作流可观测性的仓库。它提供了工具和实用程序来监控、分析和优化DevOps实践的性能和效率，使团队能够基于数据驱动做出决策，并持续改进其操作。 该仓库重点为关键的DevOps指标提供可观测性解决方案，包括但不限于持续集成、持续交付（CICD）、基础设施即代码（IaC）以及应用性能监控（APM）。通过利用此仓库...
代码注入
Before
After
Back to Top