​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
TG必备的搜索引擎，快搜kuai帮你发现有趣群组、频道、视频、音乐、电影、新闻 | Find cool stuff all in one bot!

机器人：@kuai @kuaia @kuaiaa

👉 https://t.me/kuai?start=a_3URZVD0
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE

📦 项目名称： CTFs
👤 项目作者： sudo-su-ayan-ali
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 10:01:52

📝 项目描述：
Active on HackTheBox & TryHackMe focusing on AD exploitation, reverse engineering, and privilege escalation

🔗 点击访问项目地址
GitHub
GitHub - sudo-su-ayan-ali/CTFs: Active on HackTheBox & TryHackMe focusing on AD exploitation, reverse engineering, and privilege…
GitHub - sudo-su-ayan-ali/CTFs: Active on HackTheBox & TryHackMe focusing on AD exploitation, reverse engineering, and privilege…
Active on HackTheBox & TryHackMe focusing on AD exploitation, reverse engineering, and privilege escalation - sudo-su-ayan-ali/CTFs
Exploit CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： Agentic_AMaaS
👤 项目作者： cloudstrykkeace
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 09:04:22

📝 项目描述：
"Enterprise-grade Ruby-based AMaaS prototype for autonomous malware detection, threat scoring, and controlled remediation using ClamAV, YARA, and an agentic decision engine."

🔗 点击访问项目地址
GitHub
GitHub - cloudstrykkeace/Agentic_AMaaS:
GitHub - cloudstrykkeace/Agentic_AMaaS: "Enterprise-grade Ruby-based AMaaS prototype for autonomous malware detection, threat scoring…
"Enterprise-grade Ruby-based AMaaS prototype for autonomous malware detection, threat scoring, and controlled remediation using ClamAV, YARA, and an agentic decision engine." - cl...
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Awesome-RedTeam-Tools-ID
👤 项目作者： HudzaifahArrantisi
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 09:34:45

📝 项目描述：
RedTeam-Tools Automated vulnerability scanner with CVE matching, port scanning, banner grabbing, SQLi detection, directory enumeration, and database exploitation. Supports Kali Linux binaries with pure-Python fallback.

🔗 点击访问项目地址
GitHub
GitHub - HudzaifahArrantisi/Awesome-RedTeam-Tools-ID: RedTeam-Tools Automated vulnerability scanner with CVE matching, port scanning…
RedTeam-Tools Automated vulnerability scanner with CVE matching, port scanning, banner grabbing, SQLi detection, directory enumeration, and database exploitation. Supports Kali Linux binaries with...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： auto-vulnerability-scanner
👤 项目作者： CGdevil
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 09:50:19

📝 项目描述：
🛡️ Automated vulnerability scanner with real-time Kali Linux integration, React dashboard, WebSocket streaming & bug bounty management.

🔗 点击访问项目地址
GitHub
GitHub - CGdevil/auto-vulnerability-scanner: 🛡️ Automated vulnerability scanner with real-time Kali Linux integration, React dashboard…
🛡️ Automated vulnerability scanner with real-time Kali Linux integration, React dashboard, WebSocket streaming & bug bounty management. - CGdevil/auto-vulnerability-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： secure_scan_pro
👤 项目作者： Ekamjott
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 09:03:21

📝 项目描述：
Flask-based website vulnerability scanner with SSL, security checks, scan history, and PDF/CSV reports.

🔗 点击访问项目地址
GitHub
GitHub - Ekamjott/secure_scan_pro: Flask-based website vulnerability scanner with SSL, security checks, scan history, and PDF/CSV…
GitHub - Ekamjott/secure_scan_pro: Flask-based website vulnerability scanner with SSL, security checks, scan history, and PDF/CSV…
Flask-based website vulnerability scanner with SSL, security checks, scan history, and PDF/CSV reports. - Ekamjott/secure_scan_pro
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #DOM

📦 项目名称： Blind-XSS
👤 项目作者： Thilakesh
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 08:42:01

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - Thilakesh/Blind-XSS
GitHub - Thilakesh/Blind-XSS
Contribute to Thilakesh/Blind-XSS development by creating an account on GitHub.
XSS DOM
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Nuclei #template #templates #POC

📦 项目名称： nuclei-governance
👤 项目作者： CDNA-Technologies
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 08:46:39

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - CDNA-Technologies/nuclei-governance
GitHub - CDNA-Technologies/nuclei-governance
Contribute to CDNA-Technologies/nuclei-governance development by creating an account on GitHub.
Nuclei template templates POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Nuclei #template

📦 项目名称： cpu-feature-selector
👤 项目作者： vibeagi
🛠 开发语言： TypeScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 08:51:05

📝 项目描述：
Nuclei RISC-V CPU 扩展选择器 — 生成 GCC -march/-mabi 编译参数

🔗 点击访问项目地址
GitHub
GitHub - vibeagi/cpu-feature-selector: Nuclei RISC-V CPU 扩展选择器 — 生成 GCC -march/-mabi 编译参数
GitHub - vibeagi/cpu-feature-selector: Nuclei RISC-V CPU 扩展选择器 — 生成 GCC -march/-mabi 编译参数
Nuclei RISC-V CPU 扩展选择器 — 生成 GCC -march/-mabi 编译参数 - vibeagi/cpu-feature-selector
Nuclei template
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE

📦 项目名称： VulnCast
👤 项目作者： vulnersCom
🛠 开发语言： C
⭐ Star数量： 14 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 08:05:07

📝 项目描述：
Feels like 9.8. The internet's security forecast on your desk — a ~$40 ESP32-S3 e-paper gadget for live Vulners CVE / exploit / bug-bounty / news feeds.

🔗 点击访问项目地址
GitHub
GitHub - vulnersCom/VulnCast: Feels like 9.8. The internet's security forecast on your desk — a ~$40 ESP32-S3 e-paper gadget for…
Feels like 9.8. The internet's security forecast on your desk — a ~$40 ESP32-S3 e-paper gadget for live Vulners CVE / exploit / bug-bounty / news feeds. - vulnersCom/VulnCast
Exploit CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： CVE-2026-47323
👤 项目作者： oscerd
🛠 开发语言： Java
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 08:01:56

📝 项目描述：
Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-exec) through CXF-RS/CXF-SOAP/Knative endpoints (fixed in 4.14.6/4.18.2/4.19.0)

🔗 点击访问项目地址
GitHub
GitHub - oscerd/CVE-2026-47323: Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering…
GitHub - oscerd/CVE-2026-47323: Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering…
Reproducer for CVE-2026-47323: Apache Camel CXF/Knative HeaderFilterStrategy missing inbound filtering, enabling Camel control-header injection (RCE via camel-exec) through CXF-RS/CXF-SOAP/Knative ...
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF #metadata

📦 项目名称： damn-vulnerable-rust-app
👤 项目作者： scadastrangelove
🛠 开发语言： Rust
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 07:28:31

📝 项目描述：
Damn Vulnerable Rust Application labs and Docker workflows

🔗 点击访问项目地址
GitHub
GitHub - scadastrangelove/damn-vulnerable-rust-app: Damn Vulnerable Rust Application labs and Docker workflows
Damn Vulnerable Rust Application labs and Docker workflows - scadastrangelove/damn-vulnerable-rust-app
SSRF metadata
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules

📦 项目名称： defensive-toolkit
👤 项目作者： SecurityScriptographer
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 07:55:26

📝 项目描述：
Scripts and detection rules from securityscriptographer.com — Sigma rules, KQL hunting queries, YARA rules, and PowerShell/Python tools for threat hunting and endpoint triage. Each file links to its full write-up.

🔗 点击访问项目地址
GitHub
GitHub - SecurityScriptographer/defensive-toolkit: Scripts and detection rules from securityscriptographer.com — Sigma rules, KQL…
Scripts and detection rules from securityscriptographer.com — Sigma rules, KQL hunting queries, YARA rules, and PowerShell/Python tools for threat hunting and endpoint triage. Each file links to it...
YARA rules
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Vulnerability-Scanner
👤 项目作者： shreeya2611
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 07:45:55

📝 项目描述：
To detect open ports ,Outdated Software Versions and Weak Configurations

🔗 点击访问项目地址
GitHub
GitHub - shreeya2611/Vulnerability-Scanner: To detect open ports ,Outdated Software Versions and Weak Configurations
To detect open ports ,Outdated Software Versions and Weak Configurations - shreeya2611/Vulnerability-Scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Web-Vulnerability-Scanner
👤 项目作者： Deepanshu2118-spec
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 08:02:14

📝 项目描述：
A lightweight, fast web vulnerability scanner with a premium dark-mode dashboard. It automatically detects SQL injections, cross-site scripting (XSS), and insecure security headers. Includes a built-in vulnerable test server for safe demonstrations and generates detailed HTML/JSON reports.

🔗 点击访问项目地址
GitHub
GitHub - Deepanshu2118-spec/Web-Vulnerability-Scanner: A lightweight, fast web vulnerability scanner with a premium dark-mode dashboard.…
GitHub - Deepanshu2118-spec/Web-Vulnerability-Scanner: A lightweight, fast web vulnerability scanner with a premium dark-mode dashboard.…
A lightweight, fast web vulnerability scanner with a premium dark-mode dashboard. It automatically detects SQL injections, cross-site scripting (XSS), and insecure security headers. Includes a buil...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XXE #漏洞

📦 项目名称： xxe-security
👤 项目作者： 2007-ygp
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 07:48:39

📝 项目描述：
XXE漏洞安全专项 - XML外部实体注入检测与修复

🔗 点击访问项目地址
GitHub
GitHub - 2007-ygp/xxe-security: XXE漏洞安全专项 - XML外部实体注入检测与修复
XXE漏洞安全专项 - XML外部实体注入检测与修复. Contribute to 2007-ygp/xxe-security development by creating an account on GitHub.
XXE 漏洞
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： serpens-scout
👤 项目作者： SkeinLLC
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 06:48:26

📝 项目描述：
Passive Screening Serpens IOC research and value-aware AppDomainManager detection

🔗 点击访问项目地址
GitHub
GitHub - SkeinLLC/serpens-scout: Passive Screening Serpens IOC research and value-aware AppDomainManager detection
GitHub - SkeinLLC/serpens-scout: Passive Screening Serpens IOC research and value-aware AppDomainManager detection
Passive Screening Serpens IOC research and value-aware AppDomainManager detection - SkeinLLC/serpens-scout
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： trueseeing
👤 项目作者： alterakey
🛠 开发语言： Python
⭐ Star数量： 71 | 🍴 Fork数量： 15
📅 更新时间： 2026-07-17 06:44:48

📝 项目描述：
Non-decompiling iOS/Android app vulnerability scanner (DC25 demo lab, CB17)

🔗 点击访问项目地址
GitHub
GitHub - alterakey/trueseeing: Non-decompiling iOS/Android app vulnerability scanner (DC25 demo lab, CB17)
Non-decompiling iOS/Android app vulnerability scanner (DC25 demo lab, CB17) - alterakey/trueseeing
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： VYALA
👤 项目作者： somegg90-blip
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 07:01:30

📝 项目描述：
Post-quantum cryptography vulnerability scanner for developers. Runs in CI, scans only what changed, comments findings on PRs. CLI + GitHub Action. Free, open core.

🔗 点击访问项目地址
GitHub
GitHub - somegg90-blip/VYALA: Post-quantum cryptography vulnerability scanner for developers. Runs in CI, scans only what changed…
GitHub - somegg90-blip/VYALA: Post-quantum cryptography vulnerability scanner for developers. Runs in CI, scans only what changed…
Post-quantum cryptography vulnerability scanner for developers. Runs in CI, scans only what changed, comments findings on PRs. CLI + GitHub Action. Free, open core. - somegg90-blip/VYALA
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSRF #metadata

📦 项目名称： url-guard
👤 项目作者： andrewpopov
🛠 开发语言： TypeScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-17 03:39:24

📝 项目描述：
SSRF guard for server-side fetches of user-supplied URLs: blocks non-http(s)/credentialed/disallowed-port URLs, localhost + internal-suffix hosts, and IP literals or DNS resolutions in private/reserved ranges (IPv4 + rigorous IPv6).

🔗 点击访问项目地址
GitHub
GitHub - andrewpopov/url-guard
GitHub - andrewpopov/url-guard
Contribute to andrewpopov/url-guard development by creating an account on GitHub.
SSRF metadata
Before
After
Back to Top