​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：bypass av
描述：一个手动或自动patch shellcode到二进制文件的免杀工具/A tool for manual or automatic patch shellcode into binary file oder to bypass AV.
URL：https://github.com/yj94/BinarySpy

标签：#bypass av
GitHub
GitHub - yj94/BinarySpy: A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具
GitHub - yj94/BinarySpy: A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具
A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具 - yj94/BinarySpy
bypass
GitHub监控消息提醒！！！

更新了：红队
描述：红队中自动化获取网页页面标注归属和ICP
URL：https://github.com/bambooqj/Find_URL_Copyright

标签：#红队
GitHub
GitHub - bambooqj/Find_URL_Copyright: 红队中自动化获取网页页面标注归属和ICP
GitHub - bambooqj/Find_URL_Copyright: 红队中自动化获取网页页面标注归属和ICP
红队中自动化获取网页页面标注归属和ICP. Contribute to bambooqj/Find_URL_Copyright development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：webshell
描述：内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......
URL：https://github.com/yaoyao-cool/MemShellTool

标签：#webshell
GitHub
GitHub - yaoyao-cool/MemShellTool: 内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......
内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5...... - yaoyao-cool/MemShellTool
webshell
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-34693: Server Arbitrary File Read in Apache Superset
URL：https://github.com/mbadanoiu/CVE-2024-34693

标签：#CVE-2024
GitHub
GitHub - mbadanoiu/CVE-2024-34693: CVE-2024-34693: Server Arbitrary File Read in Apache Superset
GitHub - mbadanoiu/CVE-2024-34693: CVE-2024-34693: Server Arbitrary File Read in Apache Superset
CVE-2024-34693: Server Arbitrary File Read in Apache Superset - mbadanoiu/CVE-2024-34693
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：1-Click RCE via WhatsApp For Windows
URL：https://github.com/SaumyajeetDas/WhatsApp-Exploit

标签：#RCE
GitHub
GitHub - SaumyajeetDas/WhatsApp-Exploit: 1-Click RCE via WhatsApp For Windows
1-Click RCE via WhatsApp For Windows. Contribute to SaumyajeetDas/WhatsApp-Exploit development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Automation of the process of downloading RCE prices from www.pse.pl (via public API) to local storage in CSV files.
URL：https://github.com/yuuichirou/fetch_RCE

标签：#RCE
GitHub
GitHub - yuuichirou/fetch_RCE: Automation of the process of downloading RCE prices from www.pse.pl (via public API) to local storage…
GitHub - yuuichirou/fetch_RCE: Automation of the process of downloading RCE prices from www.pse.pl (via public API) to local storage…
Automation of the process of downloading RCE prices from www.pse.pl (via public API) to local storage in CSV files. - GitHub - yuuichirou/fetch_RCE: Automation of the process of downloading RCE pr...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：How to Check And fix 0x80070643 windows update error That Leads To CVE-2024-20666.
URL：https://github.com/HYZ3K/cve-2024-20666

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：How to Check And fix 0x80070643 windows update error That Leads To CVE-2024-20666.
URL：https://github.com/HYZ3K/CVE-2024-20666

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088.
URL：https://github.com/Admin9961/CVE-2024-30088

标签：#CVE-2024
GitHub
GitHub - Admin9961/CVE-2024-30088: Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024…
GitHub - Admin9961/CVE-2024-30088: Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024…
Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088. - Admin9961/CVE-2024-30088
CVE
GitHub监控消息提醒！！！

更新了：sql注入
描述：专为安服小白定制的SQL注入靶场，上手简单，练习sql注入的不二之选
URL：https://github.com/xiaogang000/XG_JLGJ

标签：#sql注入
GitHub
GitHub - xiaogang000/XG_JLGJ: 专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选
GitHub - xiaogang000/XG_JLGJ: 专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选
专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选. Contribute to xiaogang000/XG_JLGJ development by creating an account on GitHub.
sql注入
GitHub监控消息提醒！！！

更新了：bypass AntiVirus
描述：This project is about how we can bypass AntiVirus by using Obfuscated PowerShell Scripts
URL：https://github.com/Decentralized3/C-Language-payload-encoder

标签：#bypass AntiVirus
GitHub
GitHub - Decentralized3/C-Language-payload-encoder: Below, I'll outline a general approach for creating an encoded payload that…
GitHub - Decentralized3/C-Language-payload-encoder: Below, I'll outline a general approach for creating an encoded payload that…
Below, I'll outline a general approach for creating an encoded payload that can bypass antivirus software and how to integrate it into common file formats (e.g., .exe, .pdf) for penetration...
bypass
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-41110 docker AuthZ exploit
URL：https://github.com/secsaburo/CVE-2024-41110-

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：致远OA ajax.do 任意文件上传漏洞检测 CNVD-2021-01627
URL：https://github.com/youxox/SeeYouOA-POC

标签：#漏洞检测
GitHub
GitHub - youxox/SeeYouOA-POC: 致远OA ajax.do 任意文件上传漏洞检测 CNVD-2021-01627
GitHub - youxox/SeeYouOA-POC: 致远OA ajax.do 任意文件上传漏洞检测 CNVD-2021-01627
致远OA ajax.do 任意文件上传漏洞检测 CNVD-2021-01627 . Contribute to youxox/SeeYouOA-POC development by creating an account on GitHub.
漏洞检测
GitHub监控消息提醒！！！

更新了：RCE
描述：RCE for Searchor 2.4.0
URL：https://github.com/b0ySie7e/Exploit_Searchor_2.4.0_RCE

标签：#RCE
GitHub
GitHub - b0ySie7e/Exploit_Searchor_2.4.0_RCE: RCE for Searchor 2.4.0
GitHub - b0ySie7e/Exploit_Searchor_2.4.0_RCE: RCE for Searchor 2.4.0
RCE for Searchor 2.4.0. Contribute to b0ySie7e/Exploit_Searchor_2.4.0_RCE development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：漏洞挖掘
描述：这是漏洞挖掘使用的工具，有收集的也有自己写的
URL：https://github.com/Plonkloving/SRC-

标签：#漏洞挖掘
漏洞挖掘
GitHub监控消息提醒！！！

更新了：越权
描述：一个难用（好用）的越权扫描服务。
URL：https://github.com/Ed1s0nZ/InfiltrateX

标签：#越权
GitHub
GitHub - Ed1s0nZ/InfiltrateX: 一个好用的越权扫描工具。越权漏洞自动化检测难、易发生且危害严重，但我们仍可以尽力自动化检测一部分越权漏洞。
一个好用的越权扫描工具。越权漏洞自动化检测难、易发生且危害严重，但我们仍可以尽力自动化检测一部分越权漏洞。 - Ed1s0nZ/InfiltrateX
越权
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试-信息收集-子域名
URL：https://github.com/en0th/ElectricRat

标签：#渗透测试
GitHub
GitHub - en0th/ElectricRat: 电气鼠靶场系统是一种带有漏洞的Web应用程序，旨在为Web安全渗透测试学习者提供学习和实践的机会。The Electrical Mouse Target Range System is a web…
GitHub - en0th/ElectricRat: 电气鼠靶场系统是一种带有漏洞的Web应用程序，旨在为Web安全渗透测试学习者提供学习和实践的机会。The Electrical Mouse Target Range System is a web…
电气鼠靶场系统是一种带有漏洞的Web应用程序，旨在为Web安全渗透测试学习者提供学习和实践的机会。The Electrical Mouse Target Range System is a web application with vulnerabilities designed to provide learning and practice opportunities for web s...
渗透测试
GitHub监控消息提醒！！！

更新了：内存马
描述：Java反序列化/JNDI注入利用工具，支持多种高版本bypass，支持回显/内存马等多种扩展利用。
URL：https://github.com/H4cking2theGate/ysogate

标签：#内存马
GitHub
GitHub - H4cking2theGate/ysogate: Java反序列化/JNDI注入/恶意类生成工具，支持多种高版本bypass，支持回显/内存马等多种扩展利用。
Java反序列化/JNDI注入/恶意类生成工具，支持多种高版本bypass，支持回显/内存马等多种扩展利用。 - H4cking2theGate/ysogate
内存马
GitHub监控消息提醒！！！

更新了：RCE
描述：TryHack3M: Bricks Heist: Crack the code, command the exploit! Dive into the heart of the system with just an RCE CVE as your key.
URL：https://github.com/not-a-hacker-128/Bricks_Heist

标签：#RCE
GitHub
GitHub - not-a-hacker-128/Bricks_Heist: TryHack3M: Bricks Heist: Crack the code, command the exploit! Dive into the heart of the…
TryHack3M: Bricks Heist: Crack the code, command the exploit! Dive into the heart of the system with just an RCE CVE as your key. - not-a-hacker-128/Bricks_Heist
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：The most advanced software for CVE-2024 exploits and WordPress vulnerabilities with the latest version/method.
URL：https://github.com/codeb0ss/CVEploiterv2

标签：#CVE-2024
CVE
Before
After
Back to Top