​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-47575是Fortinet的FortiManager和FortiManager Cloud产品中的一个严重漏洞，源于fgfmsd守护进程缺乏对关键功能的身份验证。
URL：https://github.com/XiaomingX/cve-2024-47575-poc

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Nacos Derby命令执行漏洞利用脚本
URL：https://github.com/XiaomingX/Nacos-Derby-rce-exp

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)
URL：https://github.com/ns989/CVE-2024-48990

标签：#CVE-2024
GitHub
GitHub - ns989/CVE-2024-48990: Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)
GitHub - ns989/CVE-2024-48990: Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8)
Exploit for CVE-2024-48990 (Local Privilege Escalation in needrestart < 3.8) - ns989/CVE-2024-48990
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Exploit for CVE-2024-10924 -> Really Simple Security < 9.1.2 authentication bypass
URL：https://github.com/dua1337/Exploit-for-CVE-2024-10924

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：LFI to RCE via curl
URL：https://github.com/DaddyBigFish/curlfi

标签：#RCE
GitHub
GitHub - DaddyBigFish/curlfi: 𝗰𝘂𝗿𝗹𝗳𝗶 is an alias that simplifies the execution of the well renown Local File Inclusion into Remote…
𝗰𝘂𝗿𝗹𝗳𝗶 is an alias that simplifies the execution of the well renown Local File Inclusion into Remote Code Execution via PHP Filters. It enables the Penetration Tester or Bug Bounty Hunter to easily...
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-4439 docker and poc
URL：https://github.com/w0r1i0g1ht/CVE-2024-4439

标签：#CVE-2024
GitHub
GitHub - w0r1i0g1ht/CVE-2024-4439: CVE-2024-4439 docker and poc
GitHub - w0r1i0g1ht/CVE-2024-4439: CVE-2024-4439 docker and poc
CVE-2024-4439 docker and poc. Contribute to w0r1i0g1ht/CVE-2024-4439 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：A fast, reliable and lightweight PHP code scanner for detecting XSS, SQLi, Path Traversal, and RCE vulnerabilities.
URL：https://github.com/j4k0m/PHPTickler

标签：#RCE
GitHub
GitHub - j4k0m/PHPTickler: A fast, reliable and lightweight PHP code scanner for detecting XSS, SQLi, Path Traversal, and RCE…
GitHub - j4k0m/PHPTickler: A fast, reliable and lightweight PHP code scanner for detecting XSS, SQLi, Path Traversal, and RCE…
A fast, reliable and lightweight PHP code scanner for detecting XSS, SQLi, Path Traversal, and RCE vulnerabilities. - j4k0m/PHPTickler
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：This is POC of CVE-2024-29671 POC
URL：https://github.com/laskdjlaskdj12/CVE-2024-29671-POC

标签：#CVE-2024
GitHub
GitHub - laskdjlaskdj12/CVE-2024-29671-POC: This is POC of CVE-2024-29671
GitHub - laskdjlaskdj12/CVE-2024-29671-POC: This is POC of CVE-2024-29671
This is POC of CVE-2024-29671. Contribute to laskdjlaskdj12/CVE-2024-29671-POC development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：代码审计
描述：PHP代码审计手册
URL：https://github.com/ReAbout/audit-php

标签：#代码审计
GitHub
GitHub - ReAbout/audit-php: PHP代码审计手册
GitHub - ReAbout/audit-php: PHP代码审计手册
PHP代码审计手册. Contribute to ReAbout/audit-php development by creating an account on GitHub.
代码审计
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-10220 Test repo
URL：https://github.com/mochizuki875/CVE-2024-10220-githooks

标签：#CVE-2024
GitHub
GitHub - mochizuki875/CVE-2024-10220-githooks: CVE-2024-10220 Test repo
GitHub - mochizuki875/CVE-2024-10220-githooks: CVE-2024-10220 Test repo
CVE-2024-10220 Test repo. Contribute to mochizuki875/CVE-2024-10220-githooks development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability
URL：https://github.com/TAM-K592/CVE-2024-52317

标签：#CVE-2024
GitHub
GitHub - TAM-K592/CVE-2024-52317: CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability
GitHub - TAM-K592/CVE-2024-52317: CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability
CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability - TAM-K592/CVE-2024-52317
CVE
GitHub监控消息提醒！！！

更新了：绕过
描述：Snell 协议是一种用于网络代理的加密协议，主要应用于科学上网和数据传输，专门为绕过防火墙和网络审查设计。
URL：https://github.com/passeway/Snell

标签：#绕过
GitHub
GitHub - passeway/Snell: Snell v6 一键安装脚本，Snell是由 Surge 团队设计的高性能加密代理协议。通过创新的 Deployment-Level Protocol Diversity（部署级协议多样性）技术，每个…
GitHub - passeway/Snell: Snell v6 一键安装脚本，Snell是由 Surge 团队设计的高性能加密代理协议。通过创新的 Deployment-Level Protocol Diversity（部署级协议多样性）技术，每个…
Snell v6 一键安装脚本，Snell是由 Surge 团队设计的高性能加密代理协议。通过创新的 Deployment-Level Protocol Diversity（部署级协议多样性）技术，每个部署实例均拥有独立协议特征，在保持极致性能与简单部署的同时，显著提升流量特征多样性。 - passeway/Snell
绕过
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：PANW NGFW CVE-2024-0012
URL：https://github.com/Jenderal92/CVE-2024-10508

标签：#CVE-2024
GitHub
GitHub - Jenderal92/CVE-2024-10508: This tool scans WordPress sites for vulnerabilities in the
GitHub - Jenderal92/CVE-2024-10508: This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE…
This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the ...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：PANW NGFW CVE-2024-0012
URL：https://github.com/Jenderal92/CVE-2024-8856

标签：#CVE-2024
GitHub
GitHub - Jenderal92/CVE-2024-8856: This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related…
GitHub - Jenderal92/CVE-2024-8856: This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related…
This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt...
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Palo Alto CVE-2024-0012 Exploit POC
URL：https://github.com/VegetableLasagne/CVE-2024-0012

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：PoC & detailed explanations of 2 CVEs (RCE) in RestrictedPython
URL：https://github.com/laysakura/RestrictedPython-CVE-PoC

标签：#RCE
GitHub
GitHub - laysakura/RestrictedPython-CVE-PoC: PoC & detailed explanations of 2 CVEs (RCE) in RestrictedPython
GitHub - laysakura/RestrictedPython-CVE-PoC: PoC & detailed explanations of 2 CVEs (RCE) in RestrictedPython
PoC & detailed explanations of 2 CVEs (RCE) in RestrictedPython - laysakura/RestrictedPython-CVE-PoC
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Palo Alto CVE-2024-9474
URL：https://github.com/VegetableLasagne/CVE-2024-9474

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)
URL：https://github.com/NketiahGodfred/Apache-2.4.49-RCE

标签：#RCE
GitHub
GitHub - NketiahGodfred/Apache-2.4.49-RCE: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)
GitHub - NketiahGodfred/Apache-2.4.49-RCE: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE)
Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE) - NketiahGodfred/Apache-2.4.49-RCE
RCE
GitHub监控消息提醒！！！

更新了：Cobalt Strike
描述：Tool for checking and get metrics for your Cobalt Strike teamserver
URL：https://github.com/3ayazaya/cscheck

标签：#Cobalt Strike
GitHub
GitHub - 3ayazaya/cscheck: Tool for checking and get metrics for your Cobalt Strike teamserver
GitHub - 3ayazaya/cscheck: Tool for checking and get metrics for your Cobalt Strike teamserver
Tool for checking and get metrics for your Cobalt Strike teamserver - 3ayazaya/cscheck
Cobalt
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：PoC for CVE-2024-48990
URL：https://github.com/makuga01/CVE-2024-48990-PoC

标签：#CVE-2024
GitHub
GitHub - makuga01/CVE-2024-48990-PoC: PoC for CVE-2024-48990
GitHub - makuga01/CVE-2024-48990-PoC: PoC for CVE-2024-48990
PoC for CVE-2024-48990. Contribute to makuga01/CVE-2024-48990-PoC development by creating an account on GitHub.
CVE
Before
After
Back to Top