​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：权限维持
描述：远程shellcode加载&权限维持+小功能
URL：https://github.com/LDrakura/Remote_ShellcodeLoader

标签：#权限维持
GitHub
GitHub - LDrakura/Remote_ShellcodeLoader: 远程shellcode加载&权限维持+小功能
GitHub - LDrakura/Remote_ShellcodeLoader: 远程shellcode加载&权限维持+小功能
远程shellcode加载&权限维持+小功能. Contribute to LDrakura/Remote_ShellcodeLoader development by creating an account on GitHub.
权限维持
GitHub监控消息提醒！！！

更新了：攻防
描述：快速筛选Enscan输出结果中的domain，让你在红蓝攻防中快人一步
URL：https://github.com/Abbbbbqvq/Enscan_Script

标签：#攻防
GitHub
GitHub - Abbbbbqvq/Enscan_Script: 快速筛选Enscan输出结果中的domain，让你在红蓝攻防中快人一步
GitHub - Abbbbbqvq/Enscan_Script: 快速筛选Enscan输出结果中的domain，让你在红蓝攻防中快人一步
快速筛选Enscan输出结果中的domain，让你在红蓝攻防中快人一步. Contribute to Abbbbbqvq/Enscan_Script development by creating an account on GitHub.
攻防
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：漏洞利用工具测试版
URL：https://github.com/0x801453/SpringbootGuiExploit

标签：#漏洞利用
GitHub
GitHub - MInggongK/SpringbootGuiExploit: SpringbootGuiExploit漏洞利用工具测试版
GitHub - MInggongK/SpringbootGuiExploit: SpringbootGuiExploit漏洞利用工具测试版
SpringbootGuiExploit漏洞利用工具测试版. Contribute to MInggongK/SpringbootGuiExploit development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：弱口令
描述：Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\\检测工具
URL：https://github.com/Fly-Playgroud/Boom

标签：#弱口令
GitHub
GitHub - Fly-Playgroud/Boom: Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\检测工具
Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\检测工具. Contribute to Fly-Playgroud/Boom development by creating an account on GitHub.
弱口令
GitHub监控消息提醒！！！

更新了：RCE
描述：PowerShell > NodeJS > Chrome RCE PoC Example Script
URL：https://github.com/SleepTheGod/Chrome-Remote-Code-Execution-PoC

标签：#RCE
GitHub
GitHub - SleepTheGod/Chrome-Remote-Code-Execution-PoC: PowerShell > NodeJS > Chrome RCE PoC Example Script
GitHub - SleepTheGod/Chrome-Remote-Code-Execution-PoC: PowerShell > NodeJS > Chrome RCE PoC Example Script
PowerShell > NodeJS > Chrome RCE PoC Example Script - SleepTheGod/Chrome-Remote-Code-Execution-PoC
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo.
URL：https://github.com/X5K0/Ficha

标签：#RCE
GitHub
GitHub - X5K0/Ficha: Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo.
GitHub - X5K0/Ficha: Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo.
Esta herramienta es ideal para generar cadenas de filtros en PHP y obtener un RCE sin subir un archivo. - X5K0/Ficha
RCE
GitHub监控消息提醒！！！

更新了：sql注入
描述：计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护
URL：https://github.com/pot-not-fish/sql-injection

标签：#sql注入
GitHub
GitHub - pot-not-fish/sql-injection: 计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护
GitHub - pot-not-fish/sql-injection: 计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护
计算机系统安全报告的相关代码，包括联合注入，布尔注入，报错注入，弱口令爆破，SQL注入保护. Contribute to pot-not-fish/sql-injection development by creating an account on GitHub.
sql注入
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
URL：https://github.com/fuzzlove/soplanning-1.52-exploits

标签：#CVE-2024
GitHub
GitHub - fuzzlove/soplanning-1.52-exploits: SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
GitHub - fuzzlove/soplanning-1.52-exploits: SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)
SOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724) - fuzzlove/soplanning-1.52-exploits
CVE
GitHub监控消息提醒！！！

更新了：绕过
描述：CMCC验证绕过POC
URL：https://github.com/wireless-sec/cmcc-bypass-poc

标签：#绕过
GitHub
GitHub - wireless-sec/cmcc-bypass-poc: CMCC认证绕过POC
GitHub - wireless-sec/cmcc-bypass-poc: CMCC认证绕过POC
CMCC认证绕过POC. Contribute to wireless-sec/cmcc-bypass-poc development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：RCE
描述：PPPwn - PlayStation 4 PPPoE RCE - Made into a Docker container for learning purposes.
URL：https://github.com/olokos/PPPwn-docker-olokos

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：bypass av
描述：免杀
URL：https://github.com/tadahana/BypassAV

标签：#bypass av
GitHub
GitHub - tadahana/BypassAV: 免杀
免杀. Contribute to tadahana/BypassAV development by creating an account on GitHub.
bypass
GitHub监控消息提醒！！！

更新了：burp
描述：Alternative to burp's intruder built on top of httpx
URL：https://github.com/Giardi77/IntruderX

标签：#burp
GitHub
GitHub - Giardi77/IntruderX: Alternative to burp's intruder built on top of httpx
GitHub - Giardi77/IntruderX: Alternative to burp's intruder built on top of httpx
Alternative to burp's intruder built on top of httpx - Giardi77/IntruderX
burp
GitHub监控消息提醒！！！

更新了：RCE
描述：PPPwn - PlayStation 4 PPPoE RCE
URL：https://github.com/Ruulian/wconsole_extractor

标签：#RCE
GitHub
GitHub - Ruulian/wconsole_extractor: WConsole Extractor is a python library which automatically exploits a Werkzeug development…
GitHub - Ruulian/wconsole_extractor: WConsole Extractor is a python library which automatically exploits a Werkzeug development…
WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your...
RCE
GitHub监控消息提醒！！！

更新了：反序列化
描述：仿Wireshark纯抓包工具，加了个模糊匹配字节询问GPT是否为恶意数据。入侵监测反序列化系统
URL：https://github.com/godownio/Deserialize-Fyne-detect-GPTanwser

标签：#反序列化
反序列化
GitHub监控消息提醒！！！

更新了：webshell
描述：php webshell bypass D盾、safedog、360、火绒等
URL：https://github.com/Inull-Studio/php_webshell

标签：#webshell
GitHub
GitHub - Inull-Studio/php_jsp_asp_webshell: php webshell bypass D盾、safedog、360、火绒等，仅支持php7
GitHub - Inull-Studio/php_jsp_asp_webshell: php webshell bypass D盾、safedog、360、火绒等，仅支持php7
php webshell bypass D盾、safedog、360、火绒等，仅支持php7. Contribute to Inull-Studio/php_jsp_asp_webshell development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.5.1.
URL：https://github.com/d0rb/CVE-2024-4439

标签：#CVE-2024
GitHub
GitHub - d0rb/CVE-2024-4439: The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439)…
GitHub - d0rb/CVE-2024-4439: The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439)…
The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.5.1. - d0rb/CVE-2024-4439
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-4439 PoC
URL：https://github.com/MielPopsssssss/CVE-2024-4439

标签：#CVE-2024
GitHub
GitHub - MielPopsssssss/CVE-2024-4439: CVE-2024-4439 PoC
CVE-2024-4439 PoC. Contribute to MielPopsssssss/CVE-2024-4439 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：内存马
描述：proof-of-concept for generating Java deserialization payload | Proxy MemShell 反序列化概念验证工具 | 动态代理实现内存马
URL：https://github.com/Whoopsunix/PPPYSO

标签：#内存马
GitHub
GitHub - Whoopsunix/PPPYSO: proof-of-concept for generating Java deserialization payload | Proxy MemShell
GitHub - Whoopsunix/PPPYSO: proof-of-concept for generating Java deserialization payload | Proxy MemShell
proof-of-concept for generating Java deserialization payload | Proxy MemShell - Whoopsunix/PPPYSO
内存马
GitHub监控消息提醒！！！

更新了：RCE
描述：Automatic thesauri backups from RCE PoolParty
URL：https://github.com/dragonked2/Egyscan

标签：#RCE
GitHub
GitHub - dragonked2/Egyscan: Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify…
GitHub - dragonked2/Egyscan: Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify…
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks a...
RCE
GitHub监控消息提醒！！！

更新了：免杀
描述：PHP404页面伪装可以配合免杀马配合使用
URL：https://github.com/madin876/PHP404-

标签：#免杀
GitHub
madin876/PHP404-
madin876/PHP404-
PHP404页面伪装可以配合免杀马配合使用. Contribute to madin876/PHP404- development by creating an account on GitHub.
免杀
Before
After
Back to Top