​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF

📦 项目名称： web-app-pentest-lab
👤 项目作者： otto-youds
🛠 开发语言： None
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 22:59:30

📝 项目描述：
Web app pentest against OWASP Juice Shop. SQLi authentication bypass, XSS, IDOR, Blind SSRF and file exfiltration. Recon to full compromise.

🔗 点击访问项目地址
GitHub
GitHub - otto-youds/web-app-pentest-lab: Web app pentest against OWASP Juice Shop. SQLi authentication bypass, XSS, IDOR, Blind…
GitHub - otto-youds/web-app-pentest-lab: Web app pentest against OWASP Juice Shop. SQLi authentication bypass, XSS, IDOR, Blind…
Web app pentest against OWASP Juice Shop. SQLi authentication bypass, XSS, IDOR, Blind SSRF and file exfiltration. Recon to full compromise. - otto-youds/web-app-pentest-lab
SSRF
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Bypass #AV

📦 项目名称： proxy-list
👤 项目作者： yourworstnightmare1
🛠 开发语言： Python
⭐ Star数量： 2 | 🍴 Fork数量： 1
📅 更新时间： 2026-05-01 23:01:30

📝 项目描述：
List of sites to bypass internet censorship

🔗 点击访问项目地址
GitHub
GitHub - yourworstnightmare1/proxy-list: List of sites to bypass internet censorship
List of sites to bypass internet censorship. Contribute to yourworstnightmare1/proxy-list development by creating an account on GitHub.
Bypass AV
🚨 GitHub 监控消息提醒

🚨 发现关键词： #应急响应

📦 项目名称： windows_events
👤 项目作者： Lufei-d
🛠 开发语言： Batchfile
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 21:48:57

📝 项目描述：
bat自动化应急响应

🔗 点击访问项目地址
GitHub
GitHub - Lufei-d/windows_events: bat自动化应急响应
GitHub - Lufei-d/windows_events: bat自动化应急响应
bat自动化应急响应. Contribute to Lufei-d/windows_events development by creating an account on GitHub.
应急响应
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Payload #Attack

📦 项目名称： portswigger-labs-writeups
👤 项目作者： makhansingh2026
🛠 开发语言： None
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 20:02:32

📝 项目描述：
Writeups for 13 PortSwigger Web Security Academy labs — XSS, SQLi, JWT, OAuth, GraphQL, SSTI, and more.

🔗 点击访问项目地址
GitHub
GitHub - makhansingh2026/portswigger-labs-writeups: Writeups for 13 PortSwigger Web Security Academy labs — XSS, SQLi, JWT, OAuth…
Writeups for 13 PortSwigger Web Security Academy labs — XSS, SQLi, JWT, OAuth, GraphQL, SSTI, and more. - makhansingh2026/portswigger-labs-writeups
XSS Payload Attack
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF

📦 项目名称： mtender-mcp-server
👤 项目作者： nalyk
🛠 开发语言： TypeScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 19:34:12

📝 项目描述：
Modern MCP server for Moldova's MTender public procurement data (OCDS 1.1.5). Protocol revision 2025-11-25. Tools, resources, prompts, vision-OCR for scanned PDFs, SSRF-hardened.

🔗 点击访问项目地址
GitHub
GitHub - nalyk/mtender-mcp-server: Modern MCP server for Moldova's MTender public procurement data (OCDS 1.1.5). Protocol revision…
Modern MCP server for Moldova's MTender public procurement data (OCDS 1.1.5). Protocol revision 2025-11-25. Tools, resources, prompts, vision-OCR for scanned PDFs, SSRF-hardened. - nalyk/mt...
SSRF
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： c2cgeoform
👤 项目作者： camptocamp
🛠 开发语言： Python
⭐ Star数量： 4 | 🍴 Fork数量： 8
📅 更新时间： 2026-05-01 19:02:28

📝 项目描述：
Camptocamp GeoForm project

🔗 点击访问项目地址
GitHub
GitHub - camptocamp/c2cgeoform: Camptocamp GeoForm project
GitHub - camptocamp/c2cgeoform: Camptocamp GeoForm project
Camptocamp GeoForm project. Contribute to camptocamp/c2cgeoform development by creating an account on GitHub.
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CSRF

📦 项目名称： EthicalHacking
👤 项目作者： mnadeem2074
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 19:00:26

📝 项目描述：
Ethical Hacking & Exploiting Vulnerabilities - SQL Injection, CSRF Protection

🔗 点击访问项目地址
GitHub
GitHub - mnadeem2074/EthicalHacking: Ethical Hacking & Exploiting Vulnerabilities - SQL Injection, CSRF Protection
Ethical Hacking & Exploiting Vulnerabilities - SQL Injection, CSRF Protection - mnadeem2074/EthicalHacking
CSRF
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RedTeam #Tools

📦 项目名称： redteam-enterprise
👤 项目作者： striketm98
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 19:00:50

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - striketm98/redteam-enterprise
Contribute to striketm98/redteam-enterprise development by creating an account on GitHub.
RedTeam Tools
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026

📦 项目名称： copyfail-deconstructed
👤 项目作者： bootsareme
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 18:59:25

📝 项目描述：
Easy-to-understand version of CVE-2026-31431

🔗 点击访问项目地址
GitHub
GitHub - bootsareme/copyfail-deconstructed: Easy to understand version of CVE-2026-31431
GitHub - bootsareme/copyfail-deconstructed: Easy to understand version of CVE-2026-31431
Easy to understand version of CVE-2026-31431. Contribute to bootsareme/copyfail-deconstructed development by creating an account on GitHub.
CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： paramcollector-gateway
👤 项目作者： macEar
🛠 开发语言： Java
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 17:55:45

📝 项目描述：
Paramcollector is Burp Suite extension to collect analytics info on parameter frequency of occurrence. Gateway is in between the extension app and DBMS.

🔗 点击访问项目地址
GitHub
GitHub - macEar/paramcollector-gateway: Paramcollector is Burp Suite extension to collect analytics info on parameter frequency…
GitHub - macEar/paramcollector-gateway: Paramcollector is Burp Suite extension to collect analytics info on parameter frequency…
Paramcollector is Burp Suite extension to collect analytics info on parameter frequency of occurrence. Gateway is in between the extension app and DBMS. - macEar/paramcollector-gateway
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework #Command #Control

📦 项目名称： foojank
👤 项目作者： fooHQ
🛠 开发语言： Go
⭐ Star数量： 3 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 18:02:52

📝 项目描述：
C2 framework for ethical hackers conducting red team and purple team engagements. Extensible. Observable. Scalable.

🔗 点击访问项目地址
GitHub
GitHub - fooHQ/foojank: C2 framework for ethical hackers conducting red team and purple team engagements. Extensible. Observable.…
C2 framework for ethical hackers conducting red team and purple team engagements. Extensible. Observable. Scalable. - fooHQ/foojank
C2 Framework Command Control
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CSRF

📦 项目名称： vulnerable-php-code-examples
👤 项目作者： rubennati
🛠 开发语言： PHP
⭐ Star数量： 12 | 🍴 Fork数量： 36
📅 更新时间： 2026-05-01 17:33:12

📝 项目描述：
Deliberately vulnerable PHP code examples for testing static analysis tools and security training, covering common vulnerabilities such as SQL Injection, XSS, CSRF, and more.

🔗 点击访问项目地址
GitHub
GitHub - rubennati/vulnerable-php-code-examples: Deliberately vulnerable PHP code examples for testing static analysis tools and…
Deliberately vulnerable PHP code examples for testing static analysis tools and security training, covering common vulnerabilities such as SQL Injection, XSS, CSRF, and more. - rubennati/vulnerable...
CSRF
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026

📦 项目名称： cpanel-sessionscribe
👤 项目作者： rfxn
🛠 开发语言： Shell
⭐ Star数量： 4 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 17:56:30

📝 项目描述：
Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.

🔗 点击访问项目地址
GitHub
GitHub - rfxn/cpanel-sessionscribe: Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe):…
GitHub - rfxn/cpanel-sessionscribe: Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe):…
Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active...
CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CSRF

📦 项目名称： cspt_research
👤 项目作者： marcomackenberg01
🛠 开发语言： None
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 17:02:19

📝 项目描述：
Analyze Client-Side Path Traversal vulnerabilities in frontend frameworks with proof-of-concept labs and detection tools.

🔗 点击访问项目地址
GitHub
GitHub - marcomackenberg01/cspt_research: Analyze Client-Side Path Traversal vulnerabilities in frontend frameworks with proof…
Analyze Client-Side Path Traversal vulnerabilities in frontend frameworks with proof-of-concept labs and detection tools. - marcomackenberg01/cspt_research
CSRF
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Bypass #Patch

📦 项目名称： Bypasser
👤 项目作者： LRFP-Team
🛠 开发语言： C++
⭐ Star数量： 63 | 🍴 Fork数量： 9
📅 更新时间： 2026-05-01 17:00:24

📝 项目描述：
This is a developing rooting-layer system module for systematically bypassing environment detection related to LRFP for Android devices, where the abbreviation "LRFP" stands for Low-level, Rooting, Frameworks, and Plugins.

🔗 点击访问项目地址
GitHub
GitHub - LRFP-Team/Bypasser: This is a developing rooting-layer system module for systematically bypassing environment detection…
GitHub - LRFP-Team/Bypasser: This is a developing rooting-layer system module for systematically bypassing environment detection…
This is a developing rooting-layer system module for systematically bypassing environment detection related to LRFP for Android devices, where the abbreviation "LRFP" stands for L...
Bypass Patch
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026

📦 项目名称： CVE
👤 项目作者： Stalin-143
🛠 开发语言： None
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 16:57:18

📝 项目描述：
CVE-2026-29905

🔗 点击访问项目地址
GitHub
GitHub - Stalin-143/CVE: CVE-2026-29905
GitHub - Stalin-143/CVE: CVE-2026-29905
CVE-2026-29905. Contribute to Stalin-143/CVE development by creating an account on GitHub.
CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026

📦 项目名称： CVE-2026-31431
👤 项目作者： ExploitEoom
🛠 开发语言： None
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 15:59:02

📝 项目描述：
CopyFail

🔗 点击访问项目地址
GitHub
GitHub - ExploitEoom/CVE-2026-31431: CopyFail
GitHub - ExploitEoom/CVE-2026-31431: CopyFail
CopyFail. Contribute to ExploitEoom/CVE-2026-31431 development by creating an account on GitHub.
CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： burp-mcp-plus
👤 项目作者： titaniumtushar
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 15:00:08

📝 项目描述：
MCP wrapper for Burp Suite that builds complete, well-formed HTTP requests from structured input + ingests dedup/JS exports for token-thrifty AI-assisted pentesting. Bundles a fixed Burp extension.

🔗 点击访问项目地址
GitHub
GitHub - titaniumtushar/burp-mcp-plus: MCP wrapper for Burp Suite that builds complete, well-formed HTTP requests from structured…
MCP wrapper for Burp Suite that builds complete, well-formed HTTP requests from structured input + ingests dedup/JS exports for token-thrifty AI-assisted pentesting. Bundles a fixed Burp extension....
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Payload #Scanner

📦 项目名称： XSSSlayer
👤 项目作者： alisalive
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 15:01:30

📝 项目描述：
Real-browser XSS scanner with WAF bypass and AI payload generation

🔗 点击访问项目地址
GitHub
GitHub - alisalive/XSSSlayer: Real-browser XSS scanner with WAF bypass and AI payload generation
GitHub - alisalive/XSSSlayer: Real-browser XSS scanner with WAF bypass and AI payload generation
Real-browser XSS scanner with WAF bypass and AI payload generation - alisalive/XSSSlayer
XSS Payload Scanner
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Bypass #Filter

📦 项目名称： CleanNet
👤 项目作者： digaxie
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-01 15:01:35

📝 项目描述：
Lightweight DPI bypass engine — fragments TLS ClientHello to circumvent ISP-level SNI filtering. Single-file Python proxy with web dashboard.

🔗 点击访问项目地址
GitHub
GitHub - digaxie/CleanNet: Lightweight DPI bypass engine — fragments TLS ClientHello to circumvent ISP-level SNI filtering. Single…
GitHub - digaxie/CleanNet: Lightweight DPI bypass engine — fragments TLS ClientHello to circumvent ISP-level SNI filtering. Single…
Lightweight DPI bypass engine — fragments TLS ClientHello to circumvent ISP-level SNI filtering. Single-file Python proxy with web dashboard. - digaxie/CleanNet
Bypass Filter
Before
After
Back to Top