​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Vulnerability scanner for Log4j2 CVE-2021-44228
URL：https://github.com/logpresso/CVE-2021-44228-Scanner
GitHub
GitHub - logpresso/CVE-2021-44228-Scanner: Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228 - logpresso/CVE-2021-44228-Scanner
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Patch Pulsar Docker images with Log4J 2.15.0 update to mitigate CVE-2021-44228
URL：https://github.com/lhotari/pulsar-docker-images-patch-CVE-2021-44228
GitHub
GitHub - lhotari/pulsar-docker-images-patch-CVE-2021-44228: Patch Pulsar Docker images with Log4J 2.17.1 update to mitigate Apache…
GitHub - lhotari/pulsar-docker-images-patch-CVE-2021-44228: Patch Pulsar Docker images with Log4J 2.17.1 update to mitigate Apache…
Patch Pulsar Docker images with Log4J 2.17.1 update to mitigate Apache Log4J Security Vulnerabilities including Log4Shell - lhotari/pulsar-docker-images-patch-CVE-2021-44228
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：A Nuclei Template for Apache Log4j RCE (CVE-2021-44228) Detection with WAF Bypass Payloads
URL：https://github.com/toramanemre/log4j-rce-detect-waf-bypass
GitHub
GitHub - toramanemre/log4j-rce-detect-waf-bypass: A Nuclei Template for Apache Log4j RCE (CVE-2021-44228) Detection with WAF Bypass…
GitHub - toramanemre/log4j-rce-detect-waf-bypass: A Nuclei Template for Apache Log4j RCE (CVE-2021-44228) Detection with WAF Bypass…
A Nuclei Template for Apache Log4j RCE (CVE-2021-44228) Detection with WAF Bypass Payloads - toramanemre/log4j-rce-detect-waf-bypass
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Log4Shell CVE-2021-44228 mitigation tester
URL：https://github.com/lhotari/log4shell-mitigation-tester
GitHub
GitHub - lhotari/log4shell-mitigation-tester: Log4Shell CVE-2021-44228 mitigation tester
GitHub - lhotari/log4shell-mitigation-tester: Log4Shell CVE-2021-44228 mitigation tester
Log4Shell CVE-2021-44228 mitigation tester. Contribute to lhotari/log4shell-mitigation-tester development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches
URL：https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
GitHub
GitHub - Puliczek/CVE-2021-44228-PoC-log4j-bypass-words: 🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
GitHub - Puliczek/CVE-2021-44228-PoC-log4j-bypass-words: 🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks - Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
GitHub监控消息提醒！！！

更新了：红队
描述：LOG4J批量检测工具 -- 红队工具 -- 护网必备 -- Redteam --
URL：https://github.com/XiaoBai-12138/LOG4J-POC
GitHub
GitHub - XiaoBai-12138/LOG4J-POC: LOG4J漏洞批量检测工具 -- 红队工具 -- 护网必备 -- Redteam --
GitHub - XiaoBai-12138/LOG4J-POC: LOG4J漏洞批量检测工具 -- 红队工具 -- 护网必备 -- Redteam --
LOG4J漏洞批量检测工具 -- 红队工具 -- 护网必备 -- Redteam --. Contribute to XiaoBai-12138/LOG4J-POC development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：CVE-2021-44228 DFIR Notes
URL：https://github.com/Azeemering/CVE-2021-44228-DFIR-Notes
GitHub
GitHub - Azeemering/CVE-2021-44228-DFIR-Notes: CVE-2021-44228 DFIR Notes
CVE-2021-44228 DFIR Notes. Contribute to Azeemering/CVE-2021-44228-DFIR-Notes development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Scans files for .jars potentially vulnerable to Log4Shell (CVE-2021-44228) by inspecting the class paths inside the .jar.
URL：https://github.com/1lann/log4shelldetect
GitHub
GitHub - 1lann/log4shelldetect: Rapidly scan filesystems for Java programs potentially vulnerable to Log4Shell (CVE-2021-44228)…
GitHub - 1lann/log4shelldetect: Rapidly scan filesystems for Java programs potentially vulnerable to Log4Shell (CVE-2021-44228)…
Rapidly scan filesystems for Java programs potentially vulnerable to Log4Shell (CVE-2021-44228) or "that Log4j JNDI exploit" by inspecting the class paths inside files - 1lann/log...
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Fixes CVE-2021-44228 in log4j by patching JndiLookup class
URL：https://github.com/saharNooby/log4j-vulnerability-patcher-agent
GitHub
GitHub - saharNooby/log4j-vulnerability-patcher-agent: Fixes CVE-2021-44228 in log4j by patching JndiLookup class
GitHub - saharNooby/log4j-vulnerability-patcher-agent: Fixes CVE-2021-44228 in log4j by patching JndiLookup class
Fixes CVE-2021-44228 in log4j by patching JndiLookup class - saharNooby/log4j-vulnerability-patcher-agent
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Fixes CVE-2021-44228 in log4j by patching JndiLookup class
URL：https://github.com/jacobtread/L4J-Vuln-Patch
GitHub
GitHub - jacobtread/L4J-Vuln-Patch: This tool patches the CVE-2021-44228 Log4J vulnerability present in all minecraft versions…
GitHub - jacobtread/L4J-Vuln-Patch: This tool patches the CVE-2021-44228 Log4J vulnerability present in all minecraft versions…
This tool patches the CVE-2021-44228 Log4J vulnerability present in all minecraft versions NOTE THIS TOOL MUST BE RE-RUN after downloading or updating versions of minecraft as its not a perminent p...
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：CVE-2021-44228，log4j2 burp插件 Java版本，dnslog选取了非dnslog.cn域名
URL：https://github.com/f0ng/log4j2burpscanner
GitHub
GitHub - f0ng/log4j2burpscanner: CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal…
CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks - f0ng/log4j2burpscanner
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.
URL：https://github.com/rakutentech/jndi-ldap-test-server
GitHub
GitHub - rakutentech/jndi-ldap-test-server: A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection…
GitHub - rakutentech/jndi-ldap-test-server: A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection…
A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. - rakutentech/jndi-ldap-test-server
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Log4j2 CVE-2021-44228 复现和回显利用
URL：https://github.com/binganao/Log4j2-RCE
GitHub
GitHub - binganao/Log4j2-RCE: Log4j2 CVE-2021-44228 复现和回显利用
GitHub - binganao/Log4j2-RCE: Log4j2 CVE-2021-44228 复现和回显利用
Log4j2 CVE-2021-44228 复现和回显利用. Contribute to binganao/Log4j2-RCE development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam
URL：https://github.com/Adikso/minecraft-log4j-honeypot
GitHub
GitHub - Adikso/minecraft-log4j-honeypot: Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam
GitHub - Adikso/minecraft-log4j-honeypot: Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam
Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam - Adikso/minecraft-log4j-honeypot
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.
URL：https://github.com/boundaryx/cloudrasp-log4j2
GitHub
GitHub - boundaryx/cloudrasp-log4j2: 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically…
GitHub - boundaryx/cloudrasp-log4j2: 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically…
一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense. - boundaryx/cloudrasp-log4j2
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：A short demo of CVE-2021-44228
URL：https://github.com/phoswald/sample-ldap-exploit
GitHub
GitHub - phoswald/sample-ldap-exploit: A short demo of CVE-2021-44228
GitHub - phoswald/sample-ldap-exploit: A short demo of CVE-2021-44228
A short demo of CVE-2021-44228. Contribute to phoswald/sample-ldap-exploit development by creating an account on GitHub.
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.
URL：https://github.com/kozmer/log4j-shell-poc
GitHub
GitHub - kozmer/log4j-shell-poc: A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
GitHub - kozmer/log4j-shell-poc: A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
A Proof-Of-Concept for the CVE-2021-44228 vulnerability. - kozmer/log4j-shell-poc
GitHub监控消息提醒！！！

更新了：CVE-2021
描述：Java Agent that disables Apache Log4J's JNDI Lookup. Quick-fix for CVE-2021-44228
URL：https://github.com/alerithe/log4j-patcher
GitHub
GitHub - winnpixie/log4noshell: Java agent that disables Apache Log4J's JNDI Lookup. Fixes CVE-2021-44228, aka
GitHub - winnpixie/log4noshell: Java agent that disables Apache Log4J's JNDI Lookup. Fixes CVE-2021-44228, aka "Log4Shell."
Java agent that disables Apache Log4J's JNDI Lookup. Fixes CVE-2021-44228, aka "Log4Shell." - GitHub - winnpixie/log4noshell: Java agent that disables Apache Log4J&#39...
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出data_sourrce信息。
URL：https://github.com/kenuosec/grafanaExp
GitHub
GitHub - kenuosec/grafanaExp: 利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出data_sourrce信息。
GitHub - kenuosec/grafanaExp: 利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出data_sourrce信息。
利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出data_sourrce信息。 - GitHub - kenuosec/grafanaExp: 利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出dat...
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：利用grafan CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出data_sourrce信息。
URL：https://github.com/A-D-Team/grafanaExp
GitHub
GitHub - A-D-Team/grafanaExp: A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it…
GitHub - A-D-Team/grafanaExp: A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it…
A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source info automatic. - A-D-Team/grafanaExp
Before
After
Back to Top