📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：🛠️ Detect and exploit CVE-2025-55182 vulnerabilities in Next.js applications with this easy-to-use command-line scanner.
URL：https://github.com/haftomgu/CVE-2025-55182-advanced-scanner-
标签：#CVE-2025
更新了：CVE-2025
描述：🛠️ Detect and exploit CVE-2025-55182 vulnerabilities in Next.js applications with this easy-to-use command-line scanner.
URL：https://github.com/haftomgu/CVE-2025-55182-advanced-scanner-
标签：#CVE-2025
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.
URL：https://github.com/Saied25/fix-react2shell-next
标签：#CVE-2025
更新了：CVE-2025
描述：🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.
URL：https://github.com/Saied25/fix-react2shell-next
标签：#CVE-2025
GitHub
GitHub - Saied25/fix-react2shell-next: 🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against…
🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly. - Saied25/fix-react2shell-next
GitHub监控消息提醒！！！
更新了：护网
描述：本系统是一款基于Python的Web漏洞挖掘平台，采用Django框架和MySQL数据库构建。主要用途是对网站进行自动化漏洞扫描，核心功能包括SQL注入等漏洞扫描，以及漏洞报告生成，旨在帮助用户快速发现并解决网站安全漏洞，提升网络安全防护能力。
URL：https://github.com/kevinyang11102/crCwkVBzWa
标签：#护网
更新了：护网
描述：本系统是一款基于Python的Web漏洞挖掘平台，采用Django框架和MySQL数据库构建。主要用途是对网站进行自动化漏洞扫描，核心功能包括SQL注入等漏洞扫描，以及漏洞报告生成，旨在帮助用户快速发现并解决网站安全漏洞，提升网络安全防护能力。
URL：https://github.com/kevinyang11102/crCwkVBzWa
标签：#护网
GitHub监控消息提醒！！！
更新了：bypass AntiVirus
描述：A Cobalt Strike shellcode loader that bypasses mainstream domestic antivirus software.
URL：https://github.com/Herimnx/Exe-To-Base64-ShellCode-Convert
标签：#bypass AntiVirus
更新了：bypass AntiVirus
描述：A Cobalt Strike shellcode loader that bypasses mainstream domestic antivirus software.
URL：https://github.com/Herimnx/Exe-To-Base64-ShellCode-Convert
标签：#bypass AntiVirus
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：🔍 Detect and demonstrate RCE vulnerabilities in React Server Components and Next.js with this comprehensive security research toolkit.
URL：https://github.com/ahmedtouzani/CVE-2025-55182
标签：#CVE-2025
更新了：CVE-2025
描述：🔍 Detect and demonstrate RCE vulnerabilities in React Server Components and Next.js with this comprehensive security research toolkit.
URL：https://github.com/ahmedtouzani/CVE-2025-55182
标签：#CVE-2025
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：PoC para determinar si Fortinet es vulnerable a CVE-2025-59718 / CVE-2025-59719
URL：https://github.com/moften/CVE-2025-59718-Fortinet-Poc
标签：#CVE-2025
更新了：CVE-2025
描述：PoC para determinar si Fortinet es vulnerable a CVE-2025-59718 / CVE-2025-59719
URL：https://github.com/moften/CVE-2025-59718-Fortinet-Poc
标签：#CVE-2025
GitHub
GitHub - moften/CVE-2025-59718-Fortinet-Poc: PoC para determinar si Fortinet es vulnerable a CVE-2025-59718 / CVE-2025-59719
PoC para determinar si Fortinet es vulnerable a CVE-2025-59718 / CVE-2025-59719 - moften/CVE-2025-59718-Fortinet-Poc
GitHub监控消息提醒！！！
更新了：渗透测试
描述：Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。
URL：https://github.com/xgbtxy/Negentropy-Collective
标签：#渗透测试
更新了：渗透测试
描述：Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。
URL：https://github.com/xgbtxy/Negentropy-Collective
标签：#渗透测试
GitHub
GitHub - xgbtxy/Negentropy-Collective: Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。
Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。 - xgbtxy/Negentropy-Collective
GitHub监控消息提醒！！！
更新了：渗透测试
描述：Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。
URL：https://github.com/xgbtxy/Entropy
标签：#渗透测试
更新了：渗透测试
描述：Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。
URL：https://github.com/xgbtxy/Entropy
标签：#渗透测试
GitHub
GitHub - xgbtxy/Negentropy-Collective: Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。
Turn raw traffic into structured intelligence. 渗透测试流量的负熵实现与 AI 预处理组件。 - xgbtxy/Negentropy-Collective
GitHub监控消息提醒！！！
更新了：RCE
描述：🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.
URL：https://github.com/iksanwkk/CVE-2025-55182-exp
标签：#RCE
更新了：RCE
描述：🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.
URL：https://github.com/iksanwkk/CVE-2025-55182-exp
标签：#RCE
GitHub
GitHub - iksanwkk/CVE-2025-55182-exp: 🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js…
🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks. - iksanwkk/CVE-2025-55182-exp
GitHub监控消息提醒！！！
更新了：RCE
描述：⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.
URL：https://github.com/ahmed-dev-op/CVE-2025-55182
标签：#RCE
更新了：RCE
描述：⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.
URL：https://github.com/ahmed-dev-op/CVE-2025-55182
标签：#RCE
GitHub
GitHub - ahmed-dev-op/CVE-2025-55182: ⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182…
⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications. - ahmed-dev-op/CVE-2025-55182
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613 in a vulnerable n8n instance.
URL：https://github.com/LingerANR/n8n-CVE-2025-68613
标签：#CVE-2025
更新了：CVE-2025
描述：This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613 in a vulnerable n8n instance.
URL：https://github.com/LingerANR/n8n-CVE-2025-68613
标签：#CVE-2025
GitHub
GitHub - LingerANR/n8n-CVE-2025-68613: This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613…
This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613 in a vulnerable n8n instance. - LingerANR/n8n-CVE-2025-68613
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.
URL：https://github.com/9988700/CVE-2025-55182-POC-NEXTJS
标签：#CVE-2025
更新了：CVE-2025
描述：⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.
URL：https://github.com/9988700/CVE-2025-55182-POC-NEXTJS
标签：#CVE-2025
GitHub
GitHub - 9988700/CVE-2025-55182-POC-NEXTJS: ⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code…
⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js. - 9988700/CVE-2025-55182-POC-NEXTJS
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick
URL：https://github.com/Sachinart/CVE-2025-54322
标签：#CVE-2025
更新了：CVE-2025
描述：CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick
URL：https://github.com/Sachinart/CVE-2025-54322
标签：#CVE-2025
GitHub
GitHub - Sachinart/CVE-2025-54322: CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick
CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick - Sachinart/CVE-2025-54322
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：CVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips)
URL：https://github.com/Ak-cybe/CVE-2025-68613-n8n-rce-analysis
标签：#CVE-2025
更新了：CVE-2025
描述：CVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips)
URL：https://github.com/Ak-cybe/CVE-2025-68613-n8n-rce-analysis
标签：#CVE-2025
GitHub
GitHub - Ak-cybe/CVE-2025-68613-n8n-rce-analysis: CVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch…
CVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips) - Ak-cybe/CVE-2025-68613-n8n-rce-analysis
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing any problem fix it yourself.
URL：https://github.com/0xROI/CVE-2025-55182
标签：#CVE-2025
更新了：CVE-2025
描述：Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing any problem fix it yourself.
URL：https://github.com/0xROI/CVE-2025-55182
标签：#CVE-2025
GitHub
GitHub - 0xROI/CVE-2025-55182: Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing…
Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing any problem fix it yourself. - 0xROI/CVE-2025-55182
GitHub监控消息提醒！！！
更新了：渗透测试
描述：Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。
URL：https://github.com/tldro/scoop-security
标签：#渗透测试
更新了：渗透测试
描述：Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。
URL：https://github.com/tldro/scoop-security
标签：#渗透测试
GitHub
GitHub - tldrw/scoop-security: Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。
Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。 - tldrw/scoop-security
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：File upload vulnerability in machsol machpanel 8 allows attacker gain a webshell.
URL：https://github.com/aljoharasubaie/CVE-2025-57460
标签：#CVE-2025
更新了：CVE-2025
描述：File upload vulnerability in machsol machpanel 8 allows attacker gain a webshell.
URL：https://github.com/aljoharasubaie/CVE-2025-57460
标签：#CVE-2025
GitHub
GitHub - aljoharasubaie/CVE-2025-57460: File upload vulnerability in machsol machpanel 8 allows attacker gain a webshell.
File upload vulnerability in machsol machpanel 8 allows attacker gain a webshell. - aljoharasubaie/CVE-2025-57460
GitHub监控消息提醒！！！
更新了：代码审计
描述：Java代码审计入门
URL：https://github.com/BlkSword/MCPAudit
标签：#代码审计
更新了：代码审计
描述：Java代码审计入门
URL：https://github.com/BlkSword/MCPAudit
标签：#代码审计
GitHub
GitHub - BlkSword/CTX-Audit: CTX-Audit is a professional code security auditing terminal tool implemented in Rust, which integrates…
CTX-Audit is a professional code security auditing terminal tool implemented in Rust, which integrates the capabilities of traditional static analysis and AI intelligent analysis. - BlkSword/CTX-Audit
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
URL：https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit
标签：#CVE-2025
更新了：CVE-2025
描述：一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
URL：https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit
标签：#CVE-2025
GitHub
GitHub - Shaoshi17/CVE-2025-9074-Docker-Exploit: 一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。 - Shaoshi17/CVE-2025-9074-Docker-Exploit
GitHub监控消息提醒！！！
更新了：CVE-2025
描述：一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
URL：https://github.com/Shaoshi17/-CVE-2025-9074-Docker-Exploit
标签：#CVE-2025
更新了：CVE-2025
描述：一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
URL：https://github.com/Shaoshi17/-CVE-2025-9074-Docker-Exploit
标签：#CVE-2025
