​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF #metadata

📦 项目名称： SSRF
👤 项目作者： 22salmanaliuet
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 14:33:53

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - 22salmanaliuet/SSRF
Contribute to 22salmanaliuet/SSRF development by creating an account on GitHub.
SSRF metadata
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnerability-scanner
👤 项目作者： Charulatha0804
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 14:49:26

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - Charulatha0804/vulnerability-scanner
Contribute to Charulatha0804/vulnerability-scanner development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： playnexus-dependency-check
👤 项目作者： PhantomTape
🛠 开发语言： TypeScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 14:56:09

📝 项目描述：
Play Nexus Enhanced Dependency-Check - Dependency Vulnerability Scanner with Cyan Galaxy UI.

🔗 点击访问项目地址
GitHub
GitHub - PhantomTape/playnexus-dependency-check: Play Nexus Enhanced Dependency-Check - Dependency Vulnerability Scanner with Cyan…
Play Nexus Enhanced Dependency-Check - Dependency Vulnerability Scanner with Cyan Galaxy UI. - PhantomTape/playnexus-dependency-check
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit

📦 项目名称： almalinux-januscape-mitigation
👤 项目作者： x024n
🛠 开发语言： Shell
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 14:47:39

📝 项目描述：
Panduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts

🔗 点击访问项目地址
GitHub
GitHub - x024n/almalinux-januscape-mitigation: Panduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts
Panduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts - x024n/almalinux-januscape-mitigation
CVE POC Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit #RCE

📦 项目名称： CVE-2026-52199
👤 项目作者： lamaper
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 14:50:57

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - lamaper/CVE-2026-52199
Contribute to lamaper/CVE-2026-52199 development by creating an account on GitHub.
CVE POC Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： ShadowScan
👤 项目作者： amirfarssoo-max
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 13:51:35

📝 项目描述：
Advanced web vulnerability scanner with 50+ detectors, async architecture, plugin system, optimized for Termux and Linux

🔗 点击访问项目地址
GitHub
GitHub - amirfarssoo-max/ShadowScan: Advanced web vulnerability scanner with 50+ detectors, async architecture, plugin system,…
GitHub - amirfarssoo-max/ShadowScan: Advanced web vulnerability scanner with 50+ detectors, async architecture, plugin system,…
Advanced web vulnerability scanner with 50+ detectors, async architecture, plugin system, optimized for Termux and Linux - amirfarssoo-max/ShadowScan
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： magento-polyshell
👤 项目作者： shinthink
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 13:53:51

📝 项目描述：
PolyShell (APSB25-94) — Magento 2 Unauthenticated File Upload RCE Exploit | GIF89a polyglot bypass | guest-cart REST API | CVSS 9.8

🔗 点击访问项目地址
GitHub
GitHub - shinthink/magento-polyshell: PolyShell (APSB25-94) — Magento 2 Unauthenticated File Upload RCE Exploit | GIF89a polyglot…
PolyShell (APSB25-94) — Magento 2 Unauthenticated File Upload RCE Exploit | GIF89a polyglot bypass | guest-cart REST API | CVSS 9.8 - shinthink/magento-polyshell
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Reflected

📦 项目名称： mini-burp-web-scanner
👤 项目作者： ahmedbelaih11
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 13:53:45

📝 项目描述：
A Python web vulnerability scanner that crawls authorized targets and detects SQL injection, reflected XSS, missing security headers, and open redirects with automatic HTML and JSON reports.

🔗 点击访问项目地址
GitHub
GitHub - ahmedbelaih11/mini-burp-web-scanner: A Python web vulnerability scanner that crawls authorized targets and detects SQL…
A Python web vulnerability scanner that crawls authorized targets and detects SQL injection, reflected XSS, missing security headers, and open redirects with automatic HTML and JSON reports. - ahme...
XSS Reflected
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit #RCE

📦 项目名称： CVE-2026-46590
👤 项目作者： oscerd
🛠 开发语言： Java
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 13:16:43

📝 项目描述：
Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via ObjectInputStream), incomplete remediation of CVE-2026-40048 (fixed in 4.18.3/4.21.0)

🔗 点击访问项目地址
GitHub
GitHub - oscerd/CVE-2026-46590: Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (Fi…
GitHub - oscerd/CVE-2026-46590: Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (Fi…
Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via ObjectInputStream), incomplete remediation of CVE-...
CVE POC Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #文件上传 #漏洞

📦 项目名称： Upload_Auto_Fuzz
👤 项目作者： fewftybet
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 12:16:35

📝 项目描述：
文件上传漏洞自动化 Fuzz 测试工具 | Automated File Upload Vulnerability Fuzzing & Bypass Tool

🔗 点击访问项目地址
GitHub
GitHub - fewftybet/Upload_Auto_Fuzz: 文件上传漏洞自动化 Fuzz 测试工具 | Automated File Upload Vulnerability Fuzzing & Bypass Tool
GitHub - fewftybet/Upload_Auto_Fuzz: 文件上传漏洞自动化 Fuzz 测试工具 | Automated File Upload Vulnerability Fuzzing & Bypass Tool
文件上传漏洞自动化 Fuzz 测试工具 | Automated File Upload Vulnerability Fuzzing & Bypass Tool - fewftybet/Upload_Auto_Fuzz
文件上传 漏洞
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE #POC

📦 项目名称： CVE-2024-5082
👤 项目作者： h4mr3r
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 12:57:00

📝 项目描述：
Sonatype Nexus 2 - Authorized RCE POC

🔗 点击访问项目地址
GitHub
h4mr3r/CVE-2024-5082
Sonatype Nexus 2 - Authorized RCE POC. Contribute to h4mr3r/CVE-2024-5082 development by creating an account on GitHub.
RCE CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit

📦 项目名称： CVE-2026-46588
👤 项目作者： oscerd
🛠 开发语言： Java
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 12:14:41

📝 项目描述：
Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8/4.18.3/4.21.0)

🔗 点击访问项目地址
GitHub
GitHub - oscerd/CVE-2026-46588: Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation…
Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8...
CVE POC Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-58635-PoC
👤 项目作者： DavidCarliez
🛠 开发语言： C++
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 12:54:01

📝 项目描述：
Proof of concept for CVE-2026-58635

🔗 点击访问项目地址
GitHub
GitHub - DavidCarliez/CVE-2026-58635-PoC: Proof of concept for CVE-2026-58635
Proof of concept for CVE-2026-58635. Contribute to DavidCarliez/CVE-2026-58635-PoC development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： Obscura
👤 项目作者： shamillshaanuh
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 11:39:30

📝 项目描述：
Designed and engineered "Obscura," a multi-stage vulnerable Linux CTF lab simulating realistic corporate exploit chains. Developed a complete attack path featuring steganographic metadata exposure, an arbitrary file upload bypass leading to Remote Code Execution (RCE), lateral movement, and root privilege escalation via sudoers misconfiguration.

🔗 点击访问项目地址
GitHub
GitHub - shamillshaanuh/Obscura: Designed and engineered
GitHub - shamillshaanuh/Obscura: Designed and engineered "Obscura," a multi-stage vulnerable Linux CTF lab simulating realistic…
Designed and engineered "Obscura," a multi-stage vulnerable Linux CTF lab simulating realistic corporate exploit chains. Developed a complete attack path featuring steganographic ...
RCE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #POC

📦 项目名称： yaml-rce-poc-jar
👤 项目作者： s1nc3ju1y
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 11:58:48

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - s1nc3ju1y/yaml-rce-poc-jar
GitHub - s1nc3ju1y/yaml-rce-poc-jar
Contribute to s1nc3ju1y/yaml-rce-poc-jar development by creating an account on GitHub.
RCE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnshield
👤 项目作者： sahil-khohari
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 11:52:35

📝 项目描述：
VulnShield - Vulnerability Scanner and Reporting Dashboard

🔗 点击访问项目地址
GitHub
GitHub - sahil-khohari/vulnshield: VulnShield - Vulnerability Scanner and Reporting Dashboard
VulnShield - Vulnerability Scanner and Reporting Dashboard - sahil-khohari/vulnshield
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： VulnRadar
👤 项目作者： roze05
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 11:57:37

📝 项目描述：
A basic web vulnerability scanner that checks open ports, missing security headers, server version disclosure, and reflected XSS — with a Python CLI and browser-based UI.

🔗 点击访问项目地址
GitHub
GitHub - roze05/VulnRadar: A basic web vulnerability scanner that checks open ports, missing security headers, server version disclosure…
A basic web vulnerability scanner that checks open ports, missing security headers, server version disclosure, and reflected XSS — with a Python CLI and browser-based UI. - roze05/VulnRadar
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #Exploit

📦 项目名称： CVE-2026-53359
👤 项目作者： ndouglas-cloudsmith
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 11:46:45

📝 项目描述：
A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.

🔗 点击访问项目地址
GitHub
GitHub - ndouglas-cloudsmith/CVE-2026-53359: A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host…
GitHub - ndouglas-cloudsmith/CVE-2026-53359: A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host…
A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitti...
CVE Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Nuclei #templates

📦 项目名称： ghsec-nuclei-dast
👤 项目作者： ghsec
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-15 11:06:44

📝 项目描述：
Nuclei DAST templates based https://github.com/reewardius/nuclei-dast-templates

🔗 点击访问项目地址
GitHub
GitHub - ghsec/ghsec-nuclei-dast: Nuclei DAST templates based https://github.com/reewardius/nuclei-dast-templates
GitHub - ghsec/ghsec-nuclei-dast: Nuclei DAST templates based https://github.com/reewardius/nuclei-dast-templates
Nuclei DAST templates based https://github.com/reewardius/nuclei-dast-templates - ghsec/ghsec-nuclei-dast
Nuclei templates
🚨 GitHub 监控消息提醒

🚨 发现关键词： #漏洞 #扫描

📦 项目名称： SkillSemgrep
👤 项目作者： KimYx0207
🛠 开发语言： PowerShell
⭐ Star数量： 33 | 🍴 Fork数量： 9
📅 更新时间： 2026-07-15 10:17:59

📝 项目描述：
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by Semgrep

🔗 点击访问项目地址
GitHub
GitHub - KimYx0207/SkillSemgrep: Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by…
GitHub - KimYx0207/SkillSemgrep: Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by…
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by Semgrep - KimYx0207/SkillSemgrep
漏洞 扫描
Before
After
Back to Top