​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit
URL：https://github.com/YongYe-Security/CVE-2024-28255

标签：#CVE-2024
GitHub
GitHub - YongYe-Security/CVE-2024-28255: OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit
GitHub - YongYe-Security/CVE-2024-28255: OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit
OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit - YongYe-Security/CVE-2024-28255
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：WebShell for Red Teams, just easily
URL：https://github.com/ebalo55/crabby

标签：#webshell
GitHub
GitHub - ebalo55/crabby: WebShell for Red Teams, just easily
GitHub - ebalo55/crabby: WebShell for Red Teams, just easily
WebShell for Red Teams, just easily. Contribute to ebalo55/crabby development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过瑞数waf的动态验证机制，实现请求包重放，可针对不同网站使用。
URL：https://github.com/R0A1NG/Botgate_bypass

标签：#绕过
GitHub
GitHub - R0A1NG/Botgate_bypass: 绕过瑞数waf的动态验证机制，实现请求包重放，理论支持不同网站环境使用，如网页、小程序、APP等。
GitHub - R0A1NG/Botgate_bypass: 绕过瑞数waf的动态验证机制，实现请求包重放，理论支持不同网站环境使用，如网页、小程序、APP等。
绕过瑞数waf的动态验证机制，实现请求包重放，理论支持不同网站环境使用，如网页、小程序、APP等。. Contribute to R0A1NG/Botgate_bypass development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：A helper script for consolidating Aggressor Script and Beacon Object File (BOF) repositories into a single CNA file for Cobalt Strike.
URL：https://github.com/sudonoodle/Aggressor-Aggregator

标签：#Cobalt Strike
GitHub
GitHub - sudonoodle/Aggressor-Aggregator: A helper script for consolidating Aggressor and BOF repositories into a single CNA for…
GitHub - sudonoodle/Aggressor-Aggregator: A helper script for consolidating Aggressor and BOF repositories into a single CNA for…
A helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike. - sudonoodle/Aggressor-Aggregator
Cobalt
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Cobalt Strike Aggressor script create for RTO
URL：https://github.com/rashbx1/RTO_Aggressor_Script

标签：#Cobalt Strike
GitHub
GitHub - rashbx1/RTO_Aggressor_Script: Cobalt Strike Aggressor script create for RTO
GitHub - rashbx1/RTO_Aggressor_Script: Cobalt Strike Aggressor script create for RTO
Cobalt Strike Aggressor script create for RTO. Contribute to rashbx1/RTO_Aggressor_Script development by creating an account on GitHub.
Cobalt
GitHub监控消息提醒！！！

更新了：RCE
描述：This repository contains RCE (Remote Code Execution) exploit targeting NDIS.sys .This exploit was developed By Known Oraganization and I Leak Them Out..
URL：https://github.com/AMEDFs/NDIS.sys

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：护网
描述：由于作者比较懒，于是它就诞生了（可以叫他ip138的轮子），脚本可用于ip反查归属地+域名+可批量+查询本机公网ip,HW护网查归属溯源等
URL：https://github.com/1ighttack/getAns

标签：#护网
GitHub
GitHub - 1ighttack/getAns: 由于作者比较懒，于是它就诞生了（可以叫他ip138的轮子），脚本可用于ip反查归属地+域名+可批量+查询本机公网ip,HW护网查归属溯源等
GitHub - 1ighttack/getAns: 由于作者比较懒，于是它就诞生了（可以叫他ip138的轮子），脚本可用于ip反查归属地+域名+可批量+查询本机公网ip,HW护网查归属溯源等
由于作者比较懒，于是它就诞生了（可以叫他ip138的轮子），脚本可用于ip反查归属地+域名+可批量+查询本机公网ip,HW护网查归属溯源等 - 1ighttack/getAns
护网
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-24576 PoC for Nim Lang
URL：https://github.com/foxoman/CVE-2024-24576-PoC---Nim

标签：#CVE-2024
GitHub
GitHub - foxoman/CVE-2024-24576-PoC---Nim: CVE-2024-24576 PoC for Nim Lang
GitHub - foxoman/CVE-2024-24576-PoC---Nim: CVE-2024-24576 PoC for Nim Lang
CVE-2024-24576 PoC for Nim Lang. Contribute to foxoman/CVE-2024-24576-PoC---Nim development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：B站直播间信息收集后台
URL：https://github.com/IMMORALchu/Bilibili_Live_Back

标签：#信息收集
GitHub
GitHub - IMMORALchu/Bilibili_Live_Back: B站直播间信息收集后台
GitHub - IMMORALchu/Bilibili_Live_Back: B站直播间信息收集后台
B站直播间信息收集后台. Contribute to IMMORALchu/Bilibili_Live_Back development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4
URL：https://github.com/blackmagic2023/AnyDesk-7.0.15---Unquoted-Service-Path-PoC

标签：#CVE-2024
GitHub
GitHub - blackmagic2023/AnyDesk-7.0.15---Unquoted-Service-Path-PoC: This script serves as a proof of concept (PoC) for the CVE…
This script serves as a proof of concept (PoC) for the CVE-2024-XXXX vulnerability in AnyDesk version 7.0.15. The vulnerability involves an unquoted service path, allowing an authorized but non-pri...
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal
URL：https://github.com/centerforaisafety/HarmBench

标签：#Red Team
GitHub
GitHub - centerforaisafety/HarmBench: HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal
GitHub - centerforaisafety/HarmBench: HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal
HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal - centerforaisafety/HarmBench
Red
GitHub监控消息提醒！！！

更新了：Red Team
描述：Automation framework for exploring various Red Teaming Tools
URL：https://github.com/ameyavv/REDTeaming_Automation_Framework

标签：#Red Team
Red
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-24576 Proof of Concept
URL：https://github.com/aydinnyunus/CVE-2024-24576-Exploit

标签：#CVE-2024
GitHub
GitHub - aydinnyunus/CVE-2024-24576-Exploit: CVE-2024-24576 Proof of Concept
GitHub - aydinnyunus/CVE-2024-24576-Exploit: CVE-2024-24576 Proof of Concept
CVE-2024-24576 Proof of Concept. Contribute to aydinnyunus/CVE-2024-24576-Exploit development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：这是一个基于大语言模型的源代码漏洞挖掘系统
URL：https://github.com/WaHoooooo-17/SCU_Vulnerability_Detector

标签：#漏洞挖掘
漏洞挖掘
用BTCBot，打BRC20铭文，人人都是科学家。
请尽快注册，名额有限：
👉 @BTCBOT_BRC20_BOT

脱衣换脸机器人2.0强势来袭
支持更换任意姿势
👉 @aishuazibot
👉 @aishuazi

极搜查找群组
Telegram必备的中文搜索引擎，帮你轻松找到有趣的群组/频道、视频、音乐
👉 @jisou

搜搜查找群组
👉 @soso
GitHub监控消息提醒！！！

更新了：漏洞验证
描述：Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。
URL：https://github.com/wudijun/Catcher

标签：#漏洞验证
GitHub
GitHub - wudijun/Catcher: Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。
GitHub - wudijun/Catcher: Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。
Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。. Contribute to wudijun/Catcher development by creating an account on GitHub.
漏洞验证
GitHub监控消息提醒！！！

更新了：RCE
描述：Ray OS Command Injection RCE(Unauthorized)
URL：https://github.com/FireWolfWang/CVE-2023-6019

标签：#RCE
GitHub
GitHub - FireWolfWang/CVE-2023-6019: Ray OS Command Injection RCE(Unauthorized)
GitHub - FireWolfWang/CVE-2023-6019: Ray OS Command Injection RCE(Unauthorized)
Ray OS Command Injection RCE(Unauthorized). Contribute to FireWolfWang/CVE-2023-6019 development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：免杀
描述：利用wasm静态免杀的demo
URL：https://github.com/Litch1-v/wasm-loader

标签：#免杀
GitHub
GitHub - Litch1-v/wasm-loader: 利用wasm静态免杀的demo
利用wasm静态免杀的demo. Contribute to Litch1-v/wasm-loader development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：信息收集
描述：一款好用的信息收集工具，支持域名、IP查询、ICP、注册资金查询，支持公众号查询
URL：https://github.com/jiankeguyue/Wxipsearch

标签：#信息收集
GitHub
GitHub - jiankeguyue/Wxipsearch: 一款好用的信息收集工具，支持域名、IP查询、ICP、注册资金查询，支持公众号查询
GitHub - jiankeguyue/Wxipsearch: 一款好用的信息收集工具，支持域名、IP查询、ICP、注册资金查询，支持公众号查询
一款好用的信息收集工具，支持域名、IP查询、ICP、注册资金查询，支持公众号查询. Contribute to jiankeguyue/Wxipsearch development by creating an account on GitHub.
信息收集
Before
After
Back to Top