​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE #POC

📦 项目名称： Ch4120N-CVE-Pulse
👤 项目作者： Ch4120N
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 21:06:40

📝 项目描述：
A powerful automated CVE PoC aggregator that discovers, scores, and indexes exploit Proof-of-Concepts from GitHub. Generates a static searchable website with KEV/EPSS integration, daily snapshots, and diffs.

🔗 点击访问项目地址
GitHub
GitHub - Ch4120N/Ch4120N-CVE-Pulse: A powerful automated CVE PoC aggregator that discovers, scores, and indexes exploit Proof-of…
GitHub - Ch4120N/Ch4120N-CVE-Pulse: A powerful automated CVE PoC aggregator that discovers, scores, and indexes exploit Proof-of…
A powerful automated CVE PoC aggregator that discovers, scores, and indexes exploit Proof-of-Concepts from GitHub. Generates a static searchable website with KEV/EPSS integration, daily snapshots, ...
Exploit CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： freewvs
👤 项目作者： schokokeksorg
🛠 开发语言： Python
⭐ Star数量： 41 | 🍴 Fork数量： 2
📅 更新时间： 2026-07-06 21:02:31

📝 项目描述：
A local scanner for vulnerable web applications

🔗 点击访问项目地址
GitHub
GitHub - schokokeksorg/freewvs: A local scanner for vulnerable web applications
GitHub - schokokeksorg/freewvs: A local scanner for vulnerable web applications
A local scanner for vulnerable web applications. Contribute to schokokeksorg/freewvs development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules

📦 项目名称： Sentinel-YARA
👤 项目作者： ArmSec7
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 20:55:04

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - ArmSec7/Sentinel-YARA
GitHub - ArmSec7/Sentinel-YARA
Contribute to ArmSec7/Sentinel-YARA development by creating an account on GitHub.
YARA rules
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： burpctl
👤 项目作者： momomuchu
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 1
📅 更新时间： 2026-07-06 20:21:30

📝 项目描述：
A fast CLI for Burp Suite (bp / burpctl): mark any byte range and run multi-position fuzzing through Burp's Repeater — unthrottled on Community — plus scanner, scope, decoder and IDOR/CORS/auth checks. Fully-typed Python + a Kotlin REST extension. Scriptable, exit-code-driven, built for bug bounty & pentest.

🔗 点击访问项目地址
GitHub
GitHub - momomuchu/burpctl: Drive Burp Suite from the command line: a fast, fully-typed CLI + Kotlin REST extension. Capture, fuzz…
Drive Burp Suite from the command line: a fast, fully-typed CLI + Kotlin REST extension. Capture, fuzz, scan, decode — with a secret-safe Run Ledger. For bug-bounty hunters & AI agents. - m...
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSTI #RCE #POC

📦 项目名称： ssti-rce-poc-1783365195
👤 项目作者： philbalog13
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 19:13:43

📝 项目描述：
SSTI RCE PoC - Mergify security research

🔗 点击访问项目地址
GitHub
GitHub - philbalog13/ssti-rce-poc-1783365195: SSTI RCE PoC - Mergify security research
GitHub - philbalog13/ssti-rce-poc-1783365195: SSTI RCE PoC - Mergify security research
SSTI RCE PoC - Mergify security research. Contribute to philbalog13/ssti-rce-poc-1783365195 development by creating an account on GitHub.
SSTI RCE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： NextSec
👤 项目作者： krasimirboyukov77
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 19:40:51

📝 项目描述：
NextJS Vulnerability scanner

🔗 点击访问项目地址
GitHub
krasimirboyukov77/NextSec
krasimirboyukov77/NextSec
NextJS Vulnerability scanner. Contribute to krasimirboyukov77/NextSec development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Loader

📦 项目名称： zigzag
👤 项目作者： essn
🛠 开发语言： Zig
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 19:47:53

📝 项目描述：
Minimal Zig shellcode loader/stager

🔗 点击访问项目地址
GitHub
GitHub - essn/zigzag: Minimal Zig shellcode loader/stager
GitHub - essn/zigzag: Minimal Zig shellcode loader/stager
Minimal Zig shellcode loader/stager. Contribute to essn/zigzag development by creating an account on GitHub.
Shellcode Loader
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Reflected

📦 项目名称： websec-waf-notes
👤 项目作者： Armhell
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 18:22:56

📝 项目描述：
qryflux9271 — newline-split WAF signature bypass for reflected XSS (field notes)

🔗 点击访问项目地址
GitHub
GitHub - Armhell/websec-waf-notes: qryflux9271 — newline-split WAF signature bypass for reflected XSS (field notes)
GitHub - Armhell/websec-waf-notes: qryflux9271 — newline-split WAF signature bypass for reflected XSS (field notes)
qryflux9271 — newline-split WAF signature bypass for reflected XSS (field notes) - Armhell/websec-waf-notes
XSS Reflected
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： secureinspect
👤 项目作者： mahesh70953
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 18:37:47

📝 项目描述：
SecureInspect: open-source offline Python tool for static malware detection (PE/PDF/Office/APK), YARA scanning, IOC/hash/entropy analysis, and image/audio steganography detection via signature and LSB analysis. Published on GitHub

🔗 点击访问项目地址
GitHub
GitHub - mahesh70953/secureinspect: SecureInspect: open-source offline Python tool for static malware detection (PE/PDF/Office/APK)…
GitHub - mahesh70953/secureinspect: SecureInspect: open-source offline Python tool for static malware detection (PE/PDF/Office/APK)…
SecureInspect: open-source offline Python tool for static malware detection (PE/PDF/Office/APK), YARA scanning, IOC/hash/entropy analysis, and image/audio steganography detection via signature and ...
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #rules #malware

📦 项目名称： yara-forge-ci
👤 项目作者： ChristianPresley
🛠 开发语言： YARA
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 18:46:54

📝 项目描述：
YARA rule repository with a rules-as-code CI harness: metadata policy, positive/negative corpus tests, and per-rule performance budgets.

🔗 点击访问项目地址
GitHub
GitHub - ChristianPresley/yara-forge-ci: YARA rule repository with a rules-as-code CI harness: metadata policy, positive/negative…
YARA rule repository with a rules-as-code CI harness: metadata policy, positive/negative corpus tests, and per-rule performance budgets. - ChristianPresley/yara-forge-ci
YARA rule rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #NTLM Relay #AD

📦 项目名称： Pirate-HTB-Hard-Windows
👤 项目作者： Cosm3No1de
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 18:33:55

📝 项目描述：
Máquina Pirate de @HackTheBox — Dificultad Hard. Cadena completa de ataque Active Directory: Pre-Windows 2000 accounts con passwords predecibles, gMSA extraction, Ligolo-ng pivoting, PetitPotam coercion, NTLM relay a LDAPS, RBCD delegation, WriteSPN abuse con S4U2Proxy + altservice, y finalmente DCSync para Domain Admin. 14 pasos de puro AD attack.

🔗 点击访问项目地址
GitHub
GitHub - Cosm3No1de/Pirate-HTB-Hard-Windows: Máquina Pirate de @HackTheBox — Dificultad Hard. Cadena completa de ataque Active…
GitHub - Cosm3No1de/Pirate-HTB-Hard-Windows: Máquina Pirate de @HackTheBox — Dificultad Hard. Cadena completa de ataque Active…
Máquina Pirate de @HackTheBox — Dificultad Hard. Cadena completa de ataque Active Directory: Pre-Windows 2000 accounts con passwords predecibles, gMSA extraction, Ligolo-ng pivoting, PetitPotam coe...
NTLM AD
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： copyas-burp
👤 项目作者： aancw
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 17:37:54

📝 项目描述：
Right-click any HTTP request in Burp Suite and instantly copy it as ready-to-run code. No more manually rewriting requests.

🔗 点击访问项目地址
GitHub
GitHub - aancw/copyas-burp: Right-click any HTTP request in Burp Suite and instantly copy it as ready-to-run code. No more manually…
GitHub - aancw/copyas-burp: Right-click any HTTP request in Burp Suite and instantly copy it as ready-to-run code. No more manually…
Right-click any HTTP request in Burp Suite and instantly copy it as ready-to-run code. No more manually rewriting requests. - aancw/copyas-burp
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #POC

📦 项目名称： real-time-bidding-poc
👤 项目作者： muskan2862
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 17:56:57

📝 项目描述：
Real-Time Bidding POC built with React, Vite, Node.js, Express, and Socket.IO. Features live bid updates via WebSockets, bid validation, XSS protection with DOMPurify, loading and empty states, responsive UI, accessibility support, and real-time synchronization across multiple clients for a charity auction system.

🔗 点击访问项目地址
GitHub
muskan2862/real-time-bidding-poc
muskan2862/real-time-bidding-poc
Real-Time Bidding POC built with React, Vite, Node.js, Express, and Socket.IO. Features live bid updates via WebSockets, bid validation, XSS protection with DOMPurify, loading and empty states, res...
XSS POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： cve-2026-49352-poc
👤 项目作者： covepseng
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 17:51:59

📝 项目描述：
Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)

🔗 点击访问项目地址
GitHub
covepseng/cve-2026-49352-poc
Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass) - covepseng/cve-2026-49352-poc
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-24061
👤 项目作者： harygovind
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 17:58:56

📝 项目描述：
CVE-2026-24061-PoC

🔗 点击访问项目地址
GitHub
GitHub - harygovind/CVE-2026-24061: CVE-2026-24061-PoC
CVE-2026-24061-PoC. Contribute to harygovind/CVE-2026-24061 development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework #Beacon

📦 项目名称： monolith-test
👤 项目作者： ITherso
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 16:52:28

📝 项目描述：
Elite Red Team Adversary Simulation & C2 Framework | Heavy Evasion | Encrypted Beacon | Production Ready

🔗 点击访问项目地址
GitHub
GitHub - ITherso/monolith-test: Elite Red Team Adversary Simulation & C2 Framework | Heavy Evasion | Encrypted Beacon | Production…
Elite Red Team Adversary Simulation & C2 Framework | Heavy Evasion | Encrypted Beacon | Production Ready - ITherso/monolith-test
C2 Framework Beacon
TG必备的搜索引擎，快搜kuai帮你发现有趣群组、频道、视频、音乐、电影、新闻 | Find cool stuff all in one bot!

机器人：@kuai @kuaia @kuaiaa

👉 https://t.me/kuai?start=a_3URZVD0
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE

📦 项目名称： CVE-exploit-prediction
👤 项目作者： Al-Vt
🛠 开发语言： Jupyter Notebook
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 17:01:46

📝 项目描述：
Every day, thousands of security vulnerabilities are detected and published. However, only a tiny fraction of these vulnerabilities will be exploited by malicious actors. The goal of this project is to predict which vulnerabilities are likely to be exploited within the next 30 days.

🔗 点击访问项目地址
GitHub
GitHub - Al-Vt/CVE-exploit-prediction: Every day, thousands of security vulnerabilities are detected and published. However, only…
GitHub - Al-Vt/CVE-exploit-prediction: Every day, thousands of security vulnerabilities are detected and published. However, only…
Every day, thousands of security vulnerabilities are detected and published. However, only a tiny fraction of these vulnerabilities will be exploited by malicious actors. The goal of this project ...
Exploit CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE

📦 项目名称： search_vulns
👤 项目作者： ra1nb0rn
🛠 开发语言： Python
⭐ Star数量： 92 | 🍴 Fork数量： 15
📅 更新时间： 2026-07-06 17:03:19

📝 项目描述：
A modular tool to search for known vulnerabilities, exploits and more across various data sources

🔗 点击访问项目地址
GitHub
GitHub - ra1nb0rn/search_vulns: A modular tool to search for known vulnerabilities, exploits and more across various data sources
A modular tool to search for known vulnerabilities, exploits and more across various data sources - ra1nb0rn/search_vulns
Exploit CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule

📦 项目名称： YARAI
👤 项目作者： babo0221
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-06 16:59:45

📝 项目描述：
WHS 3기 YARAI AI 기반 악성코드 정적·동적 분석 및 YARA Rule 생성 자동화 플랫폼 구축

🔗 点击访问项目地址
GitHub
GitHub - babo0221/YARAI: WHS 3기 YARAI AI 기반 악성코드 정적·동적 분석 및 YARA Rule 생성 자동화 플랫폼 구축
GitHub - babo0221/YARAI: WHS 3기 YARAI AI 기반 악성코드 정적·동적 분석 및 YARA Rule 생성 자동화 플랫폼 구축
WHS 3기 YARAI AI 기반 악성코드 정적·동적 분석 및 YARA Rule 생성 자동화 플랫폼 구축 - babo0221/YARAI
YARA rule
Before
After
Back to Top