​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：0Day CVE-2024-28000 Auto Exploiter on WordPress LiteSpeed Cache plugin
URL：https://github.com/realbotnet/CVE-2024-28000

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：批量扫描页面中可能存在的sql注入、log4j、可能存在的rce漏洞，让你在红蓝攻防中快人一步。
URL：https://github.com/Abbbbbqvq/EZ_Script

标签：#RCE
GitHub
GitHub - Abbbbbqvq/EZ_Script: burp联动ez批量扫描页面中可能存在的sql注入、log4j、可能存在的rce漏洞，让你在红蓝攻防中快人一步。
GitHub - Abbbbbqvq/EZ_Script: burp联动ez批量扫描页面中可能存在的sql注入、log4j、可能存在的rce漏洞，让你在红蓝攻防中快人一步。
burp联动ez批量扫描页面中可能存在的sql注入、log4j、可能存在的rce漏洞，让你在红蓝攻防中快人一步。 - Abbbbbqvq/EZ_Script
RCE
GitHub监控消息提醒！！！

更新了：免杀
描述：快速Go建你的免杀项目
URL：https://github.com/ImCoriander/Go-Packer-Loaders

标签：#免杀
GitHub
GitHub - ImCoriander/Go-Packer-Loaders: 快速Go建你的免杀项目
GitHub - ImCoriander/Go-Packer-Loaders: 快速Go建你的免杀项目
快速Go建你的免杀项目. Contribute to ImCoriander/Go-Packer-Loaders development by creating an account on GitHub.
免杀
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-38077检测工具
URL：https://github.com/Destiny0991/check_38077

标签：#CVE-2024
GitHub
GitHub - Destiny0991/check_38077: Windows远程桌面授权服务CVE-2024-38077检测工具
GitHub - Destiny0991/check_38077: Windows远程桌面授权服务CVE-2024-38077检测工具
Windows远程桌面授权服务CVE-2024-38077检测工具. Contribute to Destiny0991/check_38077 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-38063 research so you don't have to.
URL：https://github.com/Th3Tr1ckst3r/CVE-2024-38063

标签：#CVE-2024
GitHub
GitHub - Th3Tr1ckst3r/CVE-2024-38063: CVE-2024-38063 research so you don't have to.
GitHub - Th3Tr1ckst3r/CVE-2024-38063: CVE-2024-38063 research so you don't have to.
CVE-2024-38063 research so you don't have to. Contribute to Th3Tr1ckst3r/CVE-2024-38063 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：信息收集
描述：A small tool for collecting sensitive information of internal network hosts \\n用于内网敏感信息收集的小工具
URL：https://github.com/dwfcasq/Finding

标签：#信息收集
GitHub
GitHub - dwfcasq/Finding: 用于windows主机敏感信息收集
GitHub - dwfcasq/Finding: 用于windows主机敏感信息收集
用于windows主机敏感信息收集. Contribute to dwfcasq/Finding development by creating an account on GitHub.
信息收集
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Nuclei template to detect Apache servers vulnerable to CVE-2024-38473
URL：https://github.com/juanschallibaum/Prueba-Repo

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：PoC for a full exploitation of NextJS SSRF (CVE-2024-34351)
URL：https://github.com/God4n/nextjs-CVE-2024-34351-_exploit

标签：#CVE-2024
GitHub
GitHub - God4n/nextjs-CVE-2024-34351-_exploit: PoC for a full exploitation of NextJS SSRF (CVE-2024-34351)
GitHub - God4n/nextjs-CVE-2024-34351-_exploit: PoC for a full exploitation of NextJS SSRF (CVE-2024-34351)
PoC for a full exploitation of NextJS SSRF (CVE-2024-34351) - God4n/nextjs-CVE-2024-34351-_exploit
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：Stage 1: Malicious Email/Chat Classification for Red Team Operations. This project is meant to extend Red Reaper v1 which was presented at RSA San Francisco 2024.
URL：https://github.com/AI-Voodoo/Red_Reaper_v2

标签：#Red Team
GitHub
GitHub - AI-Voodoo/Red_Reaper_v2: Stage 1: Sensitive Email/Chat Classification for Adversary Agent Emulation (espionage). This…
Stage 1: Sensitive Email/Chat Classification for Adversary Agent Emulation (espionage). This project is meant to extend Red Reaper v1 which was presented at RSA San Francisco 2024. - AI-Voodoo/Red_...
Red
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：（CVE-2024-7928）FastAdmin < V1.3.4.20220530
URL：https://github.com/wh6amiGit/CVE-2024-7928

标签：#CVE-2024
GitHub
GitHub - wh6amiGit/CVE-2024-7928: CVE-2024-7928 FastAdmin < V1.3.4.20220530 exploit
GitHub - wh6amiGit/CVE-2024-7928: CVE-2024-7928 FastAdmin < V1.3.4.20220530 exploit
CVE-2024-7928 FastAdmin < V1.3.4.20220530 exploit. Contribute to wh6amiGit/CVE-2024-7928 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：攻防
描述：FTP lnk调用pythonw程序，用于攻防钓鱼场景下免杀运行捆绑木马文件
URL：https://github.com/Pizz33/FTPlnk_phishing

标签：#攻防
GitHub
GitHub - Pizz33/FTPlnk_phishing: FTP lnk调用pythonw程序，用于攻防钓鱼场景下免杀运行捆绑木马文件
GitHub - Pizz33/FTPlnk_phishing: FTP lnk调用pythonw程序，用于攻防钓鱼场景下免杀运行捆绑木马文件
FTP lnk调用pythonw程序，用于攻防钓鱼场景下免杀运行捆绑木马文件. Contribute to Pizz33/FTPlnk_phishing development by creating an account on GitHub.
攻防
GitHub监控消息提醒！！！

更新了：水坑
描述：项目用于实现水坑钓鱼收杆&CS上线提醒&自动权限维持
URL：https://github.com/shine798/CSFish

标签：#水坑
GitHub
GitHub - shine798/CSFish: 项目用于实现水坑钓鱼收杆&CS上线提醒&自动权限维持
项目用于实现水坑钓鱼收杆&CS上线提醒&自动权限维持. Contribute to shine798/CSFish development by creating an account on GitHub.
水坑
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-42992
URL：https://github.com/juwenyi/CVE-2024-42992

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-38856 Exploit
URL：https://github.com/0x20c/CVE-2024-38856-EXP

标签：#CVE-2024
GitHub
GitHub - 0x20c/CVE-2024-38856-EXP: CVE-2024-38856 Exploit
GitHub - 0x20c/CVE-2024-38856-EXP: CVE-2024-38856 Exploit
CVE-2024-38856 Exploit. Contribute to 0x20c/CVE-2024-38856-EXP development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：(CVE-2024-22263) Spring Cloud Dataflow Arbitrary File Writing Scanner
URL：https://github.com/securelayer7/CVE-2024-22263_Scanner

标签：#CVE-2024
GitHub
GitHub - securelayer7/CVE-2024-22263_Scanner: (CVE-2024-22263) Spring Cloud Dataflow Arbitrary File Writing Scanner
GitHub - securelayer7/CVE-2024-22263_Scanner: (CVE-2024-22263) Spring Cloud Dataflow Arbitrary File Writing Scanner
(CVE-2024-22263) Spring Cloud Dataflow Arbitrary File Writing Scanner - securelayer7/CVE-2024-22263_Scanner
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893
URL：https://github.com/xen0bit/fwbt

标签：#CVE-2024
GitHub
GitHub - xen0bit/fwbt: Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024…
GitHub - xen0bit/fwbt: Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024…
Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893 - xen0bit/fwbt
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team Arsenal are my personal docs which document everything I learn down the path of my career in cybersecurity.
URL：https://github.com/Acuyti/redteamarsenal

标签：#Red Team
GitHub
GitHub - Acuyti/redteamarsenal: Red Team Arsenal are my personal docs which document everything I learn down the path of my career…
GitHub - Acuyti/redteamarsenal: Red Team Arsenal are my personal docs which document everything I learn down the path of my career…
Red Team Arsenal are my personal docs which document everything I learn down the path of my career in cybersecurity. - Acuyti/redteamarsenal
Red
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Proof-of-Concept for CVE-2024-5932 GiveWP PHP Object Injection
URL：https://github.com/0xb0mb3r/CVE-2024-5932-PoC

标签：#CVE-2024
GitHub
GitHub - 0xb0mb3r/CVE-2024-5932-PoC: Proof-of-Concept for CVE-2024-5932 GiveWP PHP Object Injection
GitHub - 0xb0mb3r/CVE-2024-5932-PoC: Proof-of-Concept for CVE-2024-5932 GiveWP PHP Object Injection
Proof-of-Concept for CVE-2024-5932 GiveWP PHP Object Injection - GitHub - 0xb0mb3r/CVE-2024-5932-PoC: Proof-of-Concept for CVE-2024-5932 GiveWP PHP Object Injection
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：用友U8+CRM前台RCE
URL：https://github.com/PumpkinBridge/-

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Reproducing the following CVEs with dockerfile:CVE-2024-33644 CVE-2024-34370 CVE-2024-22120
URL：https://github.com/Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally

标签：#CVE-2024
GitHub
GitHub - Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally: Reproducing the following CVEs with dockerfile:CVE-2024-33644…
GitHub - Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally: Reproducing the following CVEs with dockerfile:CVE-2024-33644…
Reproducing the following CVEs with dockerfile:CVE-2024-33644 CVE-2024-34370 CVE-2024-22120 - Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally
CVE
Before
After
Back to Top