📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE

📦 项目名称: CVE-2026-13768
👤 项目作者: MichaelAdamGroberman
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 20:50:18

📝 项目描述:
CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)

🔗 点击访问项目地址 GitHub - MichaelAdamGroberman/CVE-2026-13768: CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #malware

📦 项目名称: hacksguard
👤 项目作者: Rhacknarok
🛠 开发语言: YARA
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 19:24:49

📝 项目描述:
A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.

🔗 点击访问项目地址 GitHub - Rhacknarok/hacksguard: A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules

📦 项目名称: yara-studio
👤 项目作者: platinum2high
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 19:40:22

📝 项目描述:
Offline desktop studio for writing, testing and managing YARA rules — Tauri 2 + YARA-X, 100% local

🔗 点击访问项目地址 GitHub - platinum2high/yara-studio: Offline desktop studio for writing, testing and managing YARA rules — Tauri 2 + YARA-X, 100%…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #Remote Code Execution

📦 项目名称: BLOODFANG
👤 项目作者: Talyx66
🛠 开发语言: Python
Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 18:38:04

📝 项目描述:
BLOODFANG is my second cutting-edge red team offensive toolkit, crafted for rapid reconnaissance, exploitation, and post-exploitation operations. Packed with advanced modules like password spraying, brute forcing, and API endpoint discovery, it empowers penetration testers to own engagements with unmatched precision and speed.

🔗 点击访问项目地址 GitHub - Talyx66/BLOODFANG: BLOODFANG is my second cutting-edge red team offensive toolkit, crafted for rapid reconnaissance, exploitation…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE #POC #Remote Code Execution

📦 项目名称: CVE-2025-57819
👤 项目作者: K3ysTr0K3R
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 19:20:31

📝 项目描述:
CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE)

🔗 点击访问项目地址 GitHub - K3ysTr0K3R/CVE-2025-57819
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #Exploit #RCE

📦 项目名称: CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC
👤 项目作者: Mkps
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 19:47:25

📝 项目描述:
This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via the module update functionality, leading to arbitrary file upload and remote code execution (RCE).

🔗 点击访问项目地址 GitHub - Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC: This repository contains a proof-of-concept (PoC) exploit…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: iot-sentinel
👤 项目作者: Rajveersoni9
🛠 开发语言: C
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 18:48:24

📝 项目描述:
ESP32-based iot vulnerability scanner

🔗 点击访问项目地址 GitHub - Rajveersoni9/iot-sentinel: ESP32-based iot vulnerability scanner
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: SCRIPTFANG
👤 项目作者: Talyx66
🛠 开发语言: Python
Star数量: 2 | 🍴 Fork数量: 1
📅 更新时间: 2026-07-02 18:50:44

📝 项目描述:
ScriptFang is a weaponized payload generation and fuzzing toolkit I built for Red Teamers, Bug Bounty hunters, and offensive security professionals. ScriptFang crafts advanced XSS payloads, tests reflections, and fuzzes endpoints for weaknesses.

🔗 点击访问项目地址 GitHub - Talyx66/SCRIPTFANG: ScriptFang is a weaponized payload generation and fuzzing toolkit I built for Red Teamers, Bug Bounty…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules

📦 项目名称: Dr.octopus
👤 项目作者: asphynx-research
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 17:57:30

📝 项目描述:
Multi-vector DevOps attack surface analysis — 18 CVEs across 12 tools mapped into a 9-layer kill chain. Includes deep-dive docs, attack chain simulations, and 56 detection rules (YARA, Sigma, Snort). NGINX → Argo CD → Grafana → Docker → Jenkins → Kubernetes → Prometheus → Ansible → Linux → GitHub

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Burp #Extension

📦 项目名称: burp-poc
👤 项目作者: jpg2368-RIT
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 17:55:32

📝 项目描述:
A proof-of-concept extension for Burp Suite to get the hang of how to write one.

🔗 点击访问项目地址 GitHub - jpg2368-RIT/burp-poc: A proof-of-concept extension for Burp Suite to get the hang of how to write one.
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: cr-vdp-xss
👤 项目作者: AmrMohammed07
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 17:24:00

📝 项目描述:
authorized VDP stored-xss test

🔗 点击访问项目地址 GitHub - AmrMohammed07/cr-vdp-xss: authorized VDP stored-xss test
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Reflected

📦 项目名称: web-vuln-scanner
👤 项目作者: Vicsar71
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 17:57:09

📝 项目描述:
Async web vulnerability scanner — detects SQL injection, reflected XSS and LFI/path traversal by auto-crawling forms and links. Ships with a deliberately vulnerable Flask app for local demos.

🔗 点击访问项目地址 GitHub - Vicsar71/web-vuln-scanner: Async web vulnerability scanner — detects SQL injection, reflected XSS and LFI/path traversal…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #红蓝对抗 #演练

📦 项目名称: PageGuardVEH
👤 项目作者: Niama78
🛠 开发语言: C++
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 14:20:51

📝 项目描述:
基于 Windows VEH 的高级动态内存保护与按需执行引擎。实现“按需解密,用后即焚”,支持多线程并发与动态工作集管理,专为高级安全研究与红蓝对抗设计。

🔗 点击访问项目地址 GitHub - Niama78/PageGuardVEH: 基于 Windows VEH 的高级动态内存保护与按需执行引擎。实现“按需解密,用后即焚”,支持多线程并发与动态工作集管理,专为高级安全研究与红蓝对抗设计。
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: cve-vulnerability-scanner
👤 项目作者: panda12332145
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 16:54:26

📝 项目描述:
O CVE Vulnerability Scanner é uma ferramenta profissional e modular para varredura automática de vulnerabilidades CVE em ambientes de rede. A ferramenta detecta serviços em execução usando Nmap, identifica versões de software e consulta múltiplas fontes de dados (NVD e CIRCL) para encontrar vulnerabilidades conhecidas.

🔗 点击访问项目地址 GitHub - panda12332145/cve-vulnerability-scanner: O CVE Vulnerability Scanner é uma ferramenta profissional e modular para varredura…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: argus-vulnerability-scanner
👤 项目作者: aiagentmackenzie-lang
🛠 开发语言: JavaScript
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 17:01:32

📝 项目描述:
Production-grade vulnerability scanner - TCP port scanning, TLS analysis, OWASP headers audit, CVE lookup

🔗 点击访问项目地址 GitHub - aiagentmackenzie-lang/argus-vulnerability-scanner: Production-grade vulnerability scanner - TCP port scanning, TLS analysis…
TG必备的搜索引擎,快搜kuai帮你发现有趣群组、频道、视频、音乐、电影、新闻 | Find cool stuff all in one bot!

机器人:@kuai @kuaia @kuaiaa

👉 https://t.me/kuai?start=a_3URZVD0
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules #malware

📦 项目名称: malware-analysis-notes
👤 项目作者: CyrielleGe
🛠 开发语言: YARA
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 16:45:26

📝 项目描述:
Personal notes and YARA rules on malware analysis: VBA macro analysis workflow with oletools/CyberChef, x86-64 reverse engineering essentials, memory vulnerabilities (buffer overflow, format string, UAF...). L3 SSI academic project.

🔗 点击访问项目地址 GitHub - CyrielleGe/malware-analysis-notes: Personal notes and YARA rules on malware analysis: VBA macro analysis workflow with…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-48558
👤 项目作者: J4ck3LSyN-Gen2
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 16:47:53

📝 项目描述:
SimpleHelp OIDC Authentication Bypass PoC

🔗 点击访问项目地址 GitHub - J4ck3LSyN-Gen2/CVE-2026-48558: SimpleHelp OIDC Authentication Bypass PoC
🚨 GitHub 监控消息提醒

🚨 发现关键词: #漏洞 #POC

📦 项目名称: poc
👤 项目作者: NaiLuo003
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 15:49:05

📝 项目描述:
(批量)漏洞poc仓库

🔗 点击访问项目地址 GitHub - NaiLuo003/poc: (批量)漏洞poc仓库
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: WebVulnerabilityScanner
👤 项目作者: Abhigiri77
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-02 15:36:49

📝 项目描述:
Python-based Web Vulnerability Scanner

🔗 点击访问项目地址
Back to Top