​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
GitHub监控消息提醒！！！

更新了：钓鱼
描述：一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境
URL：https://github.com/nu0l/Send_Email

标签：#钓鱼
GitHub
GitHub - nu0l/Send_Email: 一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境
GitHub - nu0l/Send_Email: 一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境
一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境 - nu0l/Send_Email
钓鱼
GitHub监控消息提醒！！！

更新了：漏洞POC
描述：XETUX 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞POC
URL：https://github.com/NingXin2002/XETUX-POC

标签：#漏洞POC
GitHub
GitHub - NingXin2002/XETUX-POC: XETUX 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞POC
GitHub - NingXin2002/XETUX-POC: XETUX 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞POC
XETUX 系统 dynamiccontent.properties.xhtml 远程代码执行漏洞POC - NingXin2002/XETUX-POC
漏洞POC
GitHub监控消息提醒！！！

更新了：RCE
描述：华为Auth-Http Server⽂件读取漏洞验证脚本
URL：https://github.com/206568/NUUO_RCE_POC

标签：#RCE
GitHub
GitHub - 206568/NUUO_RCE_POC: 华为Auth-Http Server⽂件读取漏洞验证脚本
GitHub - 206568/NUUO_RCE_POC: 华为Auth-Http Server⽂件读取漏洞验证脚本
华为Auth-Http Server⽂件读取漏洞验证脚本. Contribute to 206568/NUUO_RCE_POC development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：内存马
描述：用来快速生成Jinja2 SSTI Payload、绕过部分WAF和小部分内存马注入
URL：https://github.com/Ec3o/Jinia2-Exploit

标签：#内存马
内存马
GitHub监控消息提醒！！！

更新了：绕过
描述：绕过头歌禁止粘贴，模拟键盘输入程序。
URL：https://github.com/ColorCard/AutoInputTool

标签：#绕过
GitHub
GitHub - colorcard/AutoInputTool: 绕过头歌禁止粘贴，模拟键盘输入程序。
绕过头歌禁止粘贴，模拟键盘输入程序。. Contribute to colorcard/AutoInputTool development by creating an account on GitHub.
绕过
GitHub监控消息提醒！！！

更新了：RCE
描述：webmin or minisever RCE
URL：https://github.com/MasterCode112/CVE-2019-15107

标签：#RCE
GitHub
GitHub - MasterCode112/CVE-2019-15107: webmin or minisever RCE
GitHub - MasterCode112/CVE-2019-15107: webmin or minisever RCE
webmin or minisever RCE. Contribute to MasterCode112/CVE-2019-15107 development by creating an account on GitHub.
RCE
GitHub监控消息提醒！！！

更新了：护网
描述：网络安全等级保护各种检查、加固、应急响应脚本
URL：https://github.com/lancer-tianyu/dengbao-shell

标签：#护网
GitHub
GitHub - lancer-tianyu/dengbao-shell: 网络安全等级保护各种检查、加固、应急响应脚本
GitHub - lancer-tianyu/dengbao-shell: 网络安全等级保护各种检查、加固、应急响应脚本
网络安全等级保护各种检查、加固、应急响应脚本. Contribute to lancer-tianyu/dengbao-shell development by creating an account on GitHub.
护网
GitHub监控消息提醒！！！

更新了：RCE
描述：Adobe ColdFusion 8 - Remote Command Execution (RCE)
URL：https://github.com/0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265

标签：#RCE
GitHub
GitHub - 0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265: Adobe ColdFusion 8 - Remote Command Execution (RCE)
GitHub - 0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265: Adobe ColdFusion 8 - Remote Command Execution (RCE)
Adobe ColdFusion 8 - Remote Command Execution (RCE) - 0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265
RCE
GitHub监控消息提醒！！！

更新了：漏洞检测
描述：Log4j2漏洞检测工具
URL：https://github.com/chaos198800/Log4j2-lou-dong-jian-ce-gong-ju

标签：#漏洞检测
GitHub
GitHub - chaos198800/Log4j2-lou-dong-jian-ce-gong-ju: Log4j2漏洞检测工具
GitHub - chaos198800/Log4j2-lou-dong-jian-ce-gong-ju: Log4j2漏洞检测工具
Log4j2漏洞检测工具. Contribute to chaos198800/Log4j2-lou-dong-jian-ce-gong-ju development by creating an account on GitHub.
漏洞检测
GitHub监控消息提醒！！！

更新了：RCE
描述：Adobe ColdFusion 8 - Remote Command Execution (RCE)
URL：https://github.com/0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265-

标签：#RCE
GitHub
GitHub - 0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265: Adobe ColdFusion 8 - Remote Command Execution (RCE)
GitHub - 0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265: Adobe ColdFusion 8 - Remote Command Execution (RCE)
Adobe ColdFusion 8 - Remote Command Execution (RCE) - 0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265
RCE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：PoC for CVE-2024-23298
URL：https://github.com/p1tsi/CVE-2024-23298.app

标签：#CVE-2024
GitHub
GitHub - p1tsi/CVE-2024-23298.app: PoC for CVE-2024-23298
PoC for CVE-2024-23298. Contribute to p1tsi/CVE-2024-23298.app development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：exploit CVE-2024-40725 (Apache httpd) with
URL：https://github.com/soltanali0/CVE-2024-40725

标签：#CVE-2024
GitHub
GitHub - soltanali0/CVE-2024-40725: exploit CVE-2024-40725 (Apache httpd) with
GitHub - soltanali0/CVE-2024-40725: exploit CVE-2024-40725 (Apache httpd) with
exploit CVE-2024-40725 (Apache httpd) with . Contribute to soltanali0/CVE-2024-40725 development by creating an account on GitHub.
CVE
GitHub监控消息提醒！！！

更新了：webshell
描述：通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。
URL：https://github.com/intbjw/webshell-decryptor

标签：#webshell
GitHub
GitHub - intbjw/webshell-decryptor: 通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。
GitHub - intbjw/webshell-decryptor: 通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。
通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。. Contribute to intbjw/webshell-decryptor development by creating an account on GitHub.
webshell
GitHub监控消息提醒！！！

更新了：应急响应
描述：帮助windows应急响应能够更快定位及处置
URL：https://github.com/YuanBenSir/windows-emergencyresponse

标签：#应急响应
GitHub
GitHub - YuanBenSir/windows-emergencyresponse: 帮助windows应急响应能够更快定位及处置
GitHub - YuanBenSir/windows-emergencyresponse: 帮助windows应急响应能够更快定位及处置
帮助windows应急响应能够更快定位及处置. Contribute to YuanBenSir/windows-emergencyresponse development by creating an account on GitHub.
应急响应
GitHub监控消息提醒！！！

更新了：应急响应
描述：帮助windows应急响应能够更快定位及处置
URL：https://github.com/YuanBenSir/windows-

标签：#应急响应
GitHub
GitHub - YuanBenSir/windows-emergencyresponse: 帮助windows应急响应能够更快定位及处置
GitHub - YuanBenSir/windows-emergencyresponse: 帮助windows应急响应能够更快定位及处置
帮助windows应急响应能够更快定位及处置. Contribute to YuanBenSir/windows-emergencyresponse development by creating an account on GitHub.
应急响应
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4
URL：https://github.com/XiaomingX/CVE-2024-53677-S2-067

标签：#CVE-2024
GitHub
GitHub - XiaomingX/CVE-2024-53677-S2-067: A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts…
GitHub - XiaomingX/CVE-2024-53677-S2-067: A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts…
A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises fr...
CVE
GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team Tactics, Techniques, and Procedures
URL：https://github.com/sneakerhax/TTPs

标签：#Red Team
GitHub
GitHub - sneakerhax/TTPs: Red Team Tactics, Techniques, and Procedures
Red Team Tactics, Techniques, and Procedures. Contribute to sneakerhax/TTPs development by creating an account on GitHub.
Red
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：CVE-2024-49112 LDAP RCE PoC and Metasploit Module
URL：https://github.com/b0l1o/CVE-2024-49112-PoC

标签：#CVE-2024
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：An example project that showcases golang code vulnerable to CVE-2024-45337
URL：https://github.com/NHAS/VULNERABLE-CVE-2024-45337

标签：#CVE-2024
GitHub
GitHub - NHAS/VULNERABLE-CVE-2024-45337: An example project that showcases golang code vulnerable to CVE-2024-45337
GitHub - NHAS/VULNERABLE-CVE-2024-45337: An example project that showcases golang code vulnerable to CVE-2024-45337
An example project that showcases golang code vulnerable to CVE-2024-45337 - NHAS/VULNERABLE-CVE-2024-45337
CVE
GitHub监控消息提醒！！！

更新了：CVE-2024
描述：Proof of concept (POC) for CVE-2024-45337
URL：https://github.com/NHAS/CVE-2024-45337-POC

标签：#CVE-2024
GitHub
GitHub - NHAS/CVE-2024-45337-POC: Proof of concept (POC) for CVE-2024-45337
GitHub - NHAS/CVE-2024-45337-POC: Proof of concept (POC) for CVE-2024-45337
Proof of concept (POC) for CVE-2024-45337 . Contribute to NHAS/CVE-2024-45337-POC development by creating an account on GitHub.
CVE
Before
After
Back to Top