📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #POC

📦 项目名称: Real-Time-Bidding-POC
👤 项目作者: KChakritha143
🛠 开发语言: JavaScript
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 07:26:50

📝 项目描述:
Real-Time Bidding POC built with React, Node.js, Express, and Socket.IO. Supports live bid updates via WebSockets, real-time synchronization across users, input validation, loading and empty states, accessibility features, analytics logging, XSS protection, and auction reset functionality with a clean responsive interface.

🔗 点击访问项目地址 GitHub - KChakritha143/Real-Time-Bidding-POC: Real-Time Bidding POC built with React, Node.js, Express, and Socket.IO. Supports…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Confluence #POC

📦 项目名称: confluence-rag-ingestor
👤 项目作者: pradeep2Tech
🛠 开发语言: Java
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 06:48:17

📝 项目描述:
RAG ingestor written in Java, Spring AI

🔗 点击访问项目地址 GitHub - pradeep2Tech/confluence-rag-ingestor: RAG ingestor written in Java, Spring AI
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Docker #Exploit

📦 项目名称: SNEK_Blue-War-Hammer
👤 项目作者: kupfferscellwatchnight301
🛠 开发语言: C
Star数量: 0 | 🍴 Fork数量: 1
📅 更新时间: 2026-07-06 07:04:54

📝 项目描述:
Analyze Windows Defender update mechanisms and file access controls through secure, technical proof-of-concept research.

🔗 点击访问项目地址 GitHub - kupfferscellwatchnight301/SNEK_Blue-War-Hammer: Analyze Windows Defender update mechanisms and file access controls through…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Fortinet #CVE

📦 项目名称: Fortinet-Certified-Fundamentals-Cybersecurity
👤 项目作者: Deepanshumittal1006
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 06:49:38

📝 项目描述:
无描述

🔗 点击访问项目地址 GitHub - Deepanshumittal1006/Fortinet-Certified-Fundamentals-Cybersecurity
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Nuclei #template

📦 项目名称: nuclei-template
👤 项目作者: sudouday
🛠 开发语言: Unknown
Star数量: 2 | 🍴 Fork数量: 1
📅 更新时间: 2026-07-06 06:51:25

📝 项目描述:
Nuclei Templete for Fuzzing Webapplications

🔗 点击访问项目地址 GitHub - sudouday/nuclei-template: Nuclei Templete for Fuzzing Webapplications
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #DOM

📦 项目名称: flask-web-security-lab
👤 项目作者: Chanindhu
🛠 开发语言: HTML
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 05:49:05

📝 项目描述:
Flask web security lab demonstrating CSRF and DOM-based XSS vulnerabilities, exploitation demos, and mitigation techniques.

🔗 点击访问项目地址 GitHub - Chanindhu/flask-web-security-lab: Flask web security lab demonstrating CSRF and DOM-based XSS vulnerabilities, exploitation…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #BlueTeam #Response

📦 项目名称: bnb-table
👤 项目作者: xD4O
🛠 开发语言: JavaScript
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 05:59:05

📝 项目描述:
Local LAN-multiplayer + solo-with-AI table for Backdoors & Breaches (incident-response card game). Node + WebSockets, hidden GM objectives, Ollama narrator.

🔗 点击访问项目地址 GitHub - xD4O/bnb-table: Local LAN-multiplayer + solo-with-AI table for Backdoors & Breaches (incident-response card game). Node…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules

📦 项目名称: nhei-yara-rules
👤 项目作者: dtaoOfficial
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 06:03:44

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rule

📦 项目名称: forerunner
👤 项目作者: im-tyler
🛠 开发语言: Go
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 04:04:10

📝 项目描述:
Enterprise EDR — multi-platform agents (Win/Linux/macOS) with YARA/Sigma/behavioral/ML detection, automated response, mTLS, React SOC portal.

🔗 点击访问项目地址 GitHub - im-tyler/forerunner: Enterprise EDR — multi-platform agents (Win/Linux/macOS) with YARA/Sigma/behavioral/ML detection…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Shiro #CVE

📦 项目名称: shiro
👤 项目作者: AlaudaDevops
🛠 开发语言: Java
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 03:41:19

📝 项目描述:
Apache Shiro fork with CVE backports for Nexus

🔗 点击访问项目地址 GitHub - AlaudaDevops/shiro: Apache Shiro fork with CVE backports for Nexus
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Burp #Extension

📦 项目名称: burpsuite-ai-scanner
👤 项目作者: Sdeveandteam
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 02:55:32

📝 项目描述:
Burp Suite Full Feature Extension with AI SQL Injection Scanner by sdev.

🔗 点击访问项目地址 GitHub - Sdeveandteam/burpsuite-ai-scanner: Burp Suite Full Feature Extension with AI SQL Injection Scanner by sdev.
🚨 GitHub 监控消息提醒

🚨 发现关键词: #C2 #Framework

📦 项目名称: LatAD
👤 项目作者: ApartsinProjects
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 01:51:04

📝 项目描述:
Physically-grounded anomaly detection for massively-multimodal CPS normal data (MIIM). Joint VaDE + 3 components (C1 generation, C2 basin, C3 ensemble). Paper + PoC.

🔗 点击访问项目地址 GitHub - ApartsinProjects/LatAD: Physically-grounded anomaly detection for massively-multimodal CPS normal data (MIIM). Joint VaDE…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: New-Magento-PoC
👤 项目作者: thecodeb0ss
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 01:46:43

📝 项目描述:
The new vuln of Magento has a Arbitary file upload/Remote code execution conditions.

🔗 点击访问项目地址 GitHub - thecodeb0ss/New-Magento-PoC: The new vuln of Magento has a Arbitary file upload/Remote code execution conditions.
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-25555
👤 项目作者: thecodeb0ss
🛠 开发语言: Unknown
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 01:48:51

📝 项目描述:
OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value.

🔗 点击访问项目地址 GitHub - thecodeb0ss/CVE-2026-25555: OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Fortinet #POC

📦 项目名称: fortideceptor-attack-simulator
👤 项目作者: fatihpurtas
🛠 开发语言: Shell
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-06 01:03:32

📝 项目描述:
Generic attack-simulation toolkit that validates FortiDeceptor and other deception/honeypot solutions by triggering decoys and correlating the alerts they raise. Purple-team PoC.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rule

📦 项目名称: yara-c-holloman3
👤 项目作者: wessorh
🛠 开发语言: C
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-05 23:41:54

📝 项目描述:
YARA 4.5.7 with in-tree holloman fingerprinting module

🔗 点击访问项目地址 GitHub - wessorh/yara-c-holloman3: YARA 4.5.7 with in-tree holloman fingerprinting module
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Reflected

📦 项目名称: SECR4483-medichain-remediation
👤 项目作者: danialnur
🛠 开发语言: PHP
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-05 23:52:41

📝 项目描述:
Post-incident remediation of SQL injection, reflected XSS, weak hashing, and unauthenticated encryption in a PHP/MySQL EHR case study (SECR4483 Secure Programming).

🔗 点击访问项目地址 danialnur/SECR4483-medichain-remediation
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: CVE-2026-9290
👤 项目作者: shinthink
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-05 23:18:38

📝 项目描述:
Pre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5)

🔗 点击访问项目地址 GitHub - shinthink/CVE-2026-9290: Pre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Docker #EXP

📦 项目名称: imagens
👤 项目作者: salnart
🛠 开发语言: JavaScript
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-05 23:05:02

📝 项目描述:
A self-hosted AI image generation platform with multi-provider failover, user management, and admin panel. Deploy with Docker.

🔗 点击访问项目地址 GitHub - salnart/imagens: A self-hosted AI image generation platform with multi-provider failover, user management, and admin panel.…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #C2 #Framework

📦 项目名称: Apex-C2
👤 项目作者: MichaelFowler1
🛠 开发语言: Python
Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-07-05 22:53:26

📝 项目描述:
A Software-in-the-Loop (SITL) simulation framework for autonomous satellite self-healing. Features local-first Flight Software (FSW) with ML-based anomaly detection to autonomously recover from adversarial C2 command injections in a physics-accurate orbital environment.

🔗 点击访问项目地址 GitHub - MichaelFowler1/Apex-C2: A Software-in-the-Loop (SITL) simulation framework for autonomous satellite self-healing. Features…
Back to Top