​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： Redline-Vidar-NJRat-Raccoon-C2-Panel
👤 项目作者： dohoangtungduong24
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 22:01:21

📝 项目描述：
Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon 2026

🔗 点击访问项目地址
GitHub
GitHub - dohoangtungduong24/Redline-Vidar-NJRat-Raccoon-C2-Panel: Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon…
GitHub - dohoangtungduong24/Redline-Vidar-NJRat-Raccoon-C2-Panel: Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon…
Advanced Malware Panel Redline Lumma Vidar NJRat DCrat Raccoon 2026 - dohoangtungduong24/Redline-Vidar-NJRat-Raccoon-C2-Panel
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-53753-Crawl4AI-RCE
👤 项目作者： BiiTts
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 21:09:01

📝 项目描述：
CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e.

🔗 点击访问项目地址
GitHub
GitHub - BiiTts/CVE-2026-53753-Crawl4AI-RCE: CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back).…
CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e. - BiiTts/CVE-2026-53753-Crawl4AI-RCE
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit #RCE

📦 项目名称： CVE-2026-48907
👤 项目作者： K3ysTr0K3R
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 21:36:25

📝 项目描述：
CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execution (RCE)

🔗 点击访问项目地址
GitHub
GitHub - K3ysTr0K3R/CVE-2026-48907: CVE-2026
GitHub - K3ysTr0K3R/CVE-2026-48907: CVE-2026
CVE-2026 . Contribute to K3ysTr0K3R/CVE-2026-48907 development by creating an account on GitHub.
CVE POC Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： NetProbe
👤 项目作者： Asad2liaqat
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 20:38:03

📝 项目描述：
IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting & watch mode. Python | Scapy | CustomTkinter | SQLite | Flask | FYP 2026

🔗 点击访问项目地址
GitHub
GitHub - Asad2liaqat/NetProbe: IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting…
GitHub - Asad2liaqat/NetProbe: IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting…
IoT vulnerability scanner with device discovery, CVE scoring, red team simulation, PDF reporting & watch mode. Python | Scapy | CustomTkinter | SQLite | Flask | FYP 2026 - Asad2liaqat/NetProbe
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Xray #POC

📦 项目名称： em-cl-xray-poc
👤 项目作者： thnguyenvn
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 21:01:54

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - thnguyenvn/em-cl-xray-poc
GitHub - thnguyenvn/em-cl-xray-poc
Contribute to thnguyenvn/em-cl-xray-poc development by creating an account on GitHub.
Xray POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #GitLab #EXP

📦 项目名称： simplon-azure-OCID-tp
👤 项目作者： WhiteMuush
🛠 开发语言： Shell
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 19:59:18

📝 项目描述：
TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure Container Apps via GitLab CI, avec authentification OIDC (sans secrets).

🔗 点击访问项目地址
GitHub
GitHub - WhiteMuush/simplon-azure-OCID-tp: TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure…
GitHub - WhiteMuush/simplon-azure-OCID-tp: TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure…
TP Simplon ~ ( Miroir de GitLab ) Déploiement continu d'une application Flask vers Azure Container Apps via GitLab CI, avec authentification OIDC (sans secrets). - WhiteMuush/simplon-azure-OCID-tp
GitLab EXP
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Inject

📦 项目名称： SeDebugPriv
👤 项目作者： stillbigjosh
🛠 开发语言： PowerShell
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 19:59:54

📝 项目描述：
SeDebugPrivileged shellcode injector

🔗 点击访问项目地址
GitHub
GitHub - stillbigjosh/SeDebugPriv: SeDebugPrivileged shellcode injector
GitHub - stillbigjosh/SeDebugPriv: SeDebugPrivileged shellcode injector
SeDebugPrivileged shellcode injector. Contribute to stillbigjosh/SeDebugPriv development by creating an account on GitHub.
Shellcode Inject
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： sentinel-py
👤 项目作者： Baylox
🛠 开发语言： Python
⭐ Star数量： 3 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 19:58:56

📝 项目描述：
SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security checks such as port scanning, SSL certificate analysis, and HTTP header inspection. Designed for learning, auditing, and internal testing.

🔗 点击访问项目地址
GitHub
GitHub - Baylox/sentinel-py: SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security…
GitHub - Baylox/sentinel-py: SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security…
SentinelPy is a lightweight, modular vulnerability scanner built in Python. It performs local security checks such as port scanning, SSL certificate analysis, and HTTP header inspection. Designed f...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #malware

📦 项目名称： YameenSec
👤 项目作者： YameenShaikh07
🛠 开发语言： Rich Text Format
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 18:27:41

📝 项目描述：
A collection of my cybersecurity work — pentest write-ups, malware analysis, Sigma & YARA rules.

🔗 点击访问项目地址
GitHub
GitHub - YameenShaikh07/YameenSec: A collection of my cybersecurity work — pentest write-ups, malware analysis, Sigma & YARA rules.
A collection of my cybersecurity work — pentest write-ups, malware analysis, Sigma & YARA rules. - YameenShaikh07/YameenSec
YARA rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE #POC

📦 项目名称： exploitrank
👤 项目作者： rinz0x0cruz
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 18:59:51

📝 项目描述：
Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions, offline dashboard. Go, key-free.

🔗 点击访问项目地址
GitHub
GitHub - rinz0x0cruz/exploitrank: Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions…
GitHub - rinz0x0cruz/exploitrank: Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions…
Exploitability-aware CVE/threat-intel prioritizer: CVSS+EPSS+CISA KEV+PoC scoring, SSVC actions, offline dashboard. Go, key-free. - rinz0x0cruz/exploitrank
Exploit CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： 2B-remote-agent
👤 项目作者： 2B-Systems
🛠 开发语言： Python
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 17:51:03

📝 项目描述：
Advanced remote system management framework featuring an asynchronous C agent and scalable Python C2 listener.

🔗 点击访问项目地址
GitHub
GitHub - 2B-Systems/2B-remote-agent: Advanced remote system management framework featuring an asynchronous C agent and scalable…
Advanced remote system management framework featuring an asynchronous C agent and scalable Python C2 listener. - 2B-Systems/2B-remote-agent
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Evasion #EDR

📦 项目名称： Advanced-Syscall-And-EDR-Evasion-Research
👤 项目作者： WhyzperMe
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 17:23:25

📝 项目描述：
Advanced Windows EDR evasion research project combining Halo's Gate, Tartarus Gate, Indirect Syscalls, Module Stomping, and APC Injection for stealthy shellcode execution.

🔗 点击访问项目地址
GitHub
GitHub - WhyzperMe/Advanced-Syscall-And-EDR-Evasion-Research: Advanced Windows EDR evasion research project combining Halo's Gate…
GitHub - WhyzperMe/Advanced-Syscall-And-EDR-Evasion-Research: Advanced Windows EDR evasion research project combining Halo's Gate…
Advanced Windows EDR evasion research project combining Halo's Gate, Tartarus Gate, Indirect Syscalls, Module Stomping, and APC Injection for stealthy shellcode execution. - WhyzperMe/Advan...
Shellcode Evasion EDR
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： qualys-scanner-vm-
👤 项目作者： markorji
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 16:56:24

📝 项目描述：
Screenshots and notes from my Qualys vulnerability scanner VM setup

🔗 点击访问项目地址
GitHub
GitHub - markorji/qualys-scanner-vm-: Screenshots and notes from my Qualys vulnerability scanner VM setup
Screenshots and notes from my Qualys vulnerability scanner VM setup - markorji/qualys-scanner-vm-
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #rules #malware

📦 项目名称： ClamShield
👤 项目作者： orloxgr
🛠 开发语言： TypeScript
⭐ Star数量： 7 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 16:54:29

📝 项目描述：
Windows security UI for ClamAV/YARA with real-time shield, scheduled scans, SecuriteInfo/SaneSecurity signatures, DNS protection, quarantine, VirusTotal checks, and auto-updates.

🔗 点击访问项目地址
GitHub
GitHub - orloxgr/ClamShield: Windows security UI for ClamAV/YARA with real-time shield, scheduled scans, SecuriteInfo/SaneSecurity…
GitHub - orloxgr/ClamShield: Windows security UI for ClamAV/YARA with real-time shield, scheduled scans, SecuriteInfo/SaneSecurity…
Windows security UI for ClamAV/YARA with real-time shield, scheduled scans, SecuriteInfo/SaneSecurity signatures, DNS protection, quarantine, VirusTotal checks, and auto-updates. - orloxgr/ClamShield
YARA rule rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #POC #Reflected

📦 项目名称： Web-Application-Penetration-Testing-
👤 项目作者： syedghulamm50
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 16:41:00

📝 项目描述：
A web penetration testing lab documenting manual exploitation of SQL Injection, Reflected XSS, and CSRF flaws. Showcases attack surface mapping and traffic interception using Burp Suite against an isolated OWASP Juice Shop environment, complete with step-by-step methodologies and real proof-of-concept (PoC) evidence.

🔗 点击访问项目地址
GitHub
GitHub - syedghulamm50/Web-Application-Penetration-Testing-: A web penetration testing lab documenting manual exploitation of SQL…
A web penetration testing lab documenting manual exploitation of SQL Injection, Reflected XSS, and CSRF flaws. Showcases attack surface mapping and traffic interception using Burp Suite against an ...
XSS POC Reflected
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exchange #POC

📦 项目名称： Rag-green-exchange
👤 项目作者： ankit-1999
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 16:05:20

📝 项目描述：
Rag Poc for green exchange

🔗 点击访问项目地址
GitHub
ankit-1999/Rag-green-exchange
Rag Poc for green exchange. Contribute to ankit-1999/Rag-green-exchange development by creating an account on GitHub.
Exchange POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #CVE #DOM

📦 项目名称： DOM-Based-XSS-in-Pocket-Mobile-Android-iOS-Unsanitized-WebView-HTML-Injection-since-13-Year
👤 项目作者： FUNFACTOR1
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 15:44:58

📝 项目描述：
0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Java bridge exposed. Reported to Mozilla Security 2024-07-10. Won't Fix. CVE pending.

🔗 点击访问项目地址
GitHub
GitHub - FUNFACTOR1/DOM-Based-XSS-in-Pocket-Mobile-Android-iOS-Unsanitized-WebView-HTML-Injection-since-13-Year: 0-click XSS (CWE…
0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...
XSS CVE DOM
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Loader

📦 项目名称： linux-shellcode-loaders
👤 项目作者： Fadouse
🛠 开发语言： C
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 15:28:40

📝 项目描述：
Educational Linux x86_64 userland shellcode loader PoCs

🔗 点击访问项目地址
GitHub
GitHub - Fadouse/linux-shellcode-loaders: Educational Linux x86_64 userland shellcode loader PoCs
GitHub - Fadouse/linux-shellcode-loaders: Educational Linux x86_64 userland shellcode loader PoCs
Educational Linux x86_64 userland shellcode loader PoCs - Fadouse/linux-shellcode-loaders
Shellcode Loader
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #RCE

📦 项目名称： cve-2026-9082-drupal
👤 项目作者： evidencebasedvulnerability
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 15:23:23

📝 项目描述：
drupal-postgresql-rce

🔗 点击访问项目地址
GitHub
evidencebasedvulnerability/cve-2026-9082-drupal
evidencebasedvulnerability/cve-2026-9082-drupal
drupal-postgresql-rce. Contribute to evidencebasedvulnerability/cve-2026-9082-drupal development by creating an account on GitHub.
CVE RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： CVE-2026-36848
👤 项目作者： calligraf0
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-29 15:01:13

📝 项目描述：
Gigamon Unauth RCE (CVE-2026-36848)

🔗 点击访问项目地址
GitHub
GitHub - calligraf0/CVE-2026-36848: Gigamon Unauth RCE (CVE-2026-36848)
GitHub - calligraf0/CVE-2026-36848: Gigamon Unauth RCE (CVE-2026-36848)
Gigamon Unauth RCE (CVE-2026-36848). Contribute to calligraf0/CVE-2026-36848 development by creating an account on GitHub.
RCE CVE
Before
After
Back to Top