​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：钓鱼
描述：魔兽世界自动钓鱼
URL：https://github.com/zhougz520/WowAutoFishing

标签：#钓鱼
GitHub
GitHub - zhougz520/WowAutoFishing: 魔兽世界自动钓鱼
GitHub - zhougz520/WowAutoFishing: 魔兽世界自动钓鱼
魔兽世界自动钓鱼. Contribute to zhougz520/WowAutoFishing development by creating an account on GitHub.
钓鱼
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Exploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthorized Plugin Installation
URL：https://github.com/JunTakemura/exploit-CVE-2024-11972

标签：#CVE-2024
GitHub
GitHub - NoxPenguin/exploit-CVE-2024-11972: Exploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthenticated Plugin Installation
GitHub - NoxPenguin/exploit-CVE-2024-11972: Exploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthenticated Plugin Installation
Exploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthenticated Plugin Installation - NoxPenguin/exploit-CVE-2024-11972
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CyberPanel authenticated RCE < 2.3.8
URL：https://github.com/ThottySploity/CVE-2024-53376

标签：#CVE-2024
GitHub
GitHub - ThottySploity/CVE-2024-53376: CyberPanel authenticated RCE < 2.3.8
GitHub - ThottySploity/CVE-2024-53376: CyberPanel authenticated RCE < 2.3.8
CyberPanel authenticated RCE < 2.3.8. Contribute to ThottySploity/CVE-2024-53376 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：A data-only attack based on CVE-2024-0582
URL：https://github.com/101010zyl/CVE-2024-0582

标签：#CVE-2024
GitHub
GitHub - 101010zyl/CVE-2024-0582-dataonly: A data-only attack based on CVE-2024-0582
GitHub - 101010zyl/CVE-2024-0582-dataonly: A data-only attack based on CVE-2024-0582
A data-only attack based on CVE-2024-0582. Contribute to 101010zyl/CVE-2024-0582-dataonly development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过MDM
URL：https://github.com/xiajiajun516/proxy.pac

标签：#绕过
绕过
GitHub监控消息提醒！！！

更新了：红队
描述：红队渗透中js文件批量信息提取器，待优化完善
URL：https://github.com/cvestone/JsExtractor

标签：#红队
GitHub
GitHub - cvestone/JsExtractor: 红队渗透中js文件批量信息提取器，待优化完善
GitHub - cvestone/JsExtractor: 红队渗透中js文件批量信息提取器，待优化完善
红队渗透中js文件批量信息提取器，待优化完善. Contribute to cvestone/JsExtractor development by creating an account on GitHub.
红队
GitHub监控消息提醒！！！

更新了：绕过
描述：一个通过 Nginx 反向代理实现绕过 SNI 阻断的工具。
URL：https://github.com/racpast/SNIBypassGUI

标签：#绕过
GitHub
GitHub - racpast/SNIBypassGUI: 无需魔法，直连 GitHub、Pixiv、Telegram、Discord、GreasyFork 和 YouTube 等常用网站 | 一个通过 Nginx 反向代理实现绕过 SNI 阻断的工具
GitHub - racpast/SNIBypassGUI: 无需魔法，直连 GitHub、Pixiv、Telegram、Discord、GreasyFork 和 YouTube 等常用网站 | 一个通过 Nginx 反向代理实现绕过 SNI 阻断的工具
无需魔法，直连 GitHub、Pixiv、Telegram、Discord、GreasyFork 和 YouTube 等常用网站 | 一个通过 Nginx 反向代理实现绕过 SNI 阻断的工具 - racpast/SNIBypassGUI
绕过
GitHub监控消息提醒！！！

更新了：RCE
描述：🐍 SQL Injection (SQLi) 🚨 Cross-Site Scripting (XSS) 🔐 Remote Code Execution (RCE) 🔍 And more!
URL：https://github.com/pr1nav/Pentest-Cheats

标签：#RCE
GitHub
GitHub - pr1nav/Pentest-Cheats: 🐍 SQL Injection (SQLi) 🚨 Cross-Site Scripting (XSS) 🔐 Remote Code Execution (RCE) 🔍 And more!
GitHub - pr1nav/Pentest-Cheats: 🐍 SQL Injection (SQLi) 🚨 Cross-Site Scripting (XSS) 🔐 Remote Code Execution (RCE) 🔍 And more!
🐍 SQL Injection (SQLi) 🚨 Cross-Site Scripting (XSS) 🔐 Remote Code Execution (RCE) 🔍 And more! - pr1nav/Pentest-Cheats
RCE
GitHub监控消息提醒！！！

更新了：应急响应
描述：Linux Emergency Response：Linux应急响应
URL：https://github.com/l1uty/LER

标签：#应急响应
GitHub
GitHub - l1uty/LER: Linux Emergency Response：Linux应急响应
GitHub - l1uty/LER: Linux Emergency Response：Linux应急响应
Linux Emergency Response：Linux应急响应. Contribute to l1uty/LER development by creating an account on GitHub.
应急响应
GitHub监控消息提醒！！！

更新了：RCE
描述：Prepare the RCE gadget in Java to exploit insecure deserialization
URL：https://github.com/greyshell/java_rce_gadget

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)
URL：https://github.com/Danyw24/blueXploit

标签：#CVE-2024
GitHub
GitHub - Danyw24/blueXploit: Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)
GitHub - Danyw24/blueXploit: Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)
Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306) - Danyw24/blueXploit
CVE
GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试必备神器SQLMAP绕WAF脚本合集分享
URL：https://github.com/chaos198800/shen-tou-ce-shi-bi-bei-shen-qi-SQLMAP-rao-WAF-jiao-ben-he-ji-fen-xiang

标签：#渗透测试
渗透测试
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-1086_binary
URL：https://github.com/ArchEnjoyer/CVE-2024-1086_binary

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：文件包含漏洞利用工具
URL：https://github.com/userTX1/File_Inclusion

标签：#漏洞利用
GitHub
GitHub - userTX1/File_Inclusion: 文件包含漏洞利用工具
GitHub - userTX1/File_Inclusion: 文件包含漏洞利用工具
文件包含漏洞利用工具. Contribute to userTX1/File_Inclusion development by creating an account on GitHub.
漏洞利用
GitHub监控消息提醒！！！

更新了：CVE-2024
描述： The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image
URL：https://github.com/CodePontiff/next_js_poisoning

标签：#CVE-2024
GitHub
GitHub - CodePontiff/next_js_poisoning: The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image
GitHub - CodePontiff/next_js_poisoning: The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image
The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image - CodePontiff/next_js_poisoning
CVE
GitHub监控消息提醒！！！

更新了：RCE
描述：Este projeto é uma ferramenta para scannear vulnerabilidades de Execução Remota de Código (RCE) em sites
URL：https://github.com/Israelxyzz/Poison

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：RCE
描述：Este projeto é uma ferramenta para scannear vulnerabilidades de Execução Remota de Código (RCE) em sites
URL：https://github.com/Israelxyzz/RCE

标签：#RCE
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Proof-of-Concept for CVE-2024-5932 GiveWP PHP Object Injection
URL：https://github.com/TAM-K592/CVE-2024-53677-S2-067

标签：#CVE-2024
GitHub
GitHub - TAM-K592/CVE-2024-53677-S2-067: A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts…
GitHub - TAM-K592/CVE-2024-53677-S2-067: A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts…
A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises fr...
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：Participation kit for the SATML 2025 DocVQA Red Team Competition
URL：https://github.com/andreybarsky/pdocvqa_satml

标签：#Red Team
GitHub
GitHub - andreybarsky/pdocvqa_satml: Participation kit for the SATML 2025 DocVQA Red Team Competition
GitHub - andreybarsky/pdocvqa_satml: Participation kit for the SATML 2025 DocVQA Red Team Competition
Participation kit for the SATML 2025 DocVQA Red Team Competition - andreybarsky/pdocvqa_satml
Red
GitHub监控消息提醒！！！

更新了：漏洞利用
描述：文件包含漏洞利用工具
URL：https://github.com/userTX1/poc-tool

标签：#漏洞利用
GitHub
GitHub - userTX1/File_Inclusion: 文件包含漏洞利用工具
GitHub - userTX1/File_Inclusion: 文件包含漏洞利用工具
文件包含漏洞利用工具. Contribute to userTX1/File_Inclusion development by creating an account on GitHub.
漏洞利用
Before
After
Back to Top