​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： PDF-Malware-Analysis-Toolkit
👤 项目作者： Tannu9211
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 12:46:42

📝 项目描述：
A Python-based toolkit for static PDF malware analysis using metadata extraction, YARA scanning, IOC detection, JavaScript analysis, risk assessment, and automated report generation.

🔗 点击访问项目地址
GitHub
GitHub - Tannu9211/PDF-Malware-Analysis-Toolkit: A Python-based toolkit for static PDF malware analysis using metadata extraction…
GitHub - Tannu9211/PDF-Malware-Analysis-Toolkit: A Python-based toolkit for static PDF malware analysis using metadata extraction…
A Python-based toolkit for static PDF malware analysis using metadata extraction, YARA scanning, IOC detection, JavaScript analysis, risk assessment, and automated report generation. - Tannu9211/PD...
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnerability-scanner
👤 项目作者： giftyvarughese
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 12:28:32

📝 项目描述：
Python-based vulnerability scanner that analyzes HTTP security headers, response time, server information, and generates a security assessment report.

🔗 点击访问项目地址
GitHub
GitHub - giftyvarughese/vulnerability-scanner: Python-based vulnerability scanner that analyzes HTTP security headers, response…
Python-based vulnerability scanner that analyzes HTTP security headers, response time, server information, and generates a security assessment report. - giftyvarughese/vulnerability-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： justscan
👤 项目作者： JustLABv1
🛠 开发语言： TypeScript
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 12:51:32

📝 项目描述：
JustScan is a self-hosted container image vulnerability scanner powered by Trivy and Grype or Artifactory Xray

🔗 点击访问项目地址
GitHub
GitHub - JustLABv1/justscan: JustScan is a self-hosted container image vulnerability scanner powered by Trivy and Grype or Artifactory…
GitHub - JustLABv1/justscan: JustScan is a self-hosted container image vulnerability scanner powered by Trivy and Grype or Artifactory…
JustScan is a self-hosted container image vulnerability scanner powered by Trivy and Grype or Artifactory Xray - JustLABv1/justscan
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Fastjson #RCE #POC #EXP

📦 项目名称： fastjson2_exp
👤 项目作者： lufeirider
🛠 开发语言： Java
⭐ Star数量： 1 | 🍴 Fork数量： 1
📅 更新时间： 2026-07-29 07:49:04

📝 项目描述：
fastjson2_exp

🔗 点击访问项目地址
GitHub
GitHub - lufeirider/fastjson2_exp: fastjson2_exp
GitHub - lufeirider/fastjson2_exp: fastjson2_exp
fastjson2_exp. Contribute to lufeirider/fastjson2_exp development by creating an account on GitHub.
Fastjson RCE POC EXP
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： objdump-Out-Of-Bounds-write
👤 项目作者： 4D4J
🛠 开发语言： Python
⭐ Star数量： 74 | 🍴 Fork数量： 18
📅 更新时间： 2026-07-29 12:20:43

📝 项目描述：
Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write vulnerability in the DLX ELF backend of GNU binutils (specifically triggered via `objdump -g`)

🔗 点击访问项目地址
GitHub
GitHub - 4D4J/objdump-Out-Of-Bounds-write: Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write…
GitHub - 4D4J/objdump-Out-Of-Bounds-write: Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write…
Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write vulnerability in the DLX ELF backend of GNU binutils (specifically triggered via `objdump -g`) - 4D4J/objdump-O...
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-61511-POC
👤 项目作者： webshellseo8
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 12:40:11

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - webshellseo8/CVE-2026-61511-POC
GitHub - webshellseo8/CVE-2026-61511-POC
Contribute to webshellseo8/CVE-2026-61511-POC development by creating an account on GitHub.
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #malware

📦 项目名称： malwarefind
👤 项目作者： a7medy10
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 11:47:55

📝 项目描述：
File upload malware triage tool: static analysis, YARA, VirusTotal reputation, and an isolated Docker dynamic sandbox

🔗 点击访问项目地址
GitHub
GitHub - a7medy10/malwarefind: File upload malware triage tool: static analysis, YARA, VirusTotal reputation, and an isolated Docker…
File upload malware triage tool: static analysis, YARA, VirusTotal reputation, and an isolated Docker dynamic sandbox - a7medy10/malwarefind
YARA malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #NTLM Relay #SMB

📦 项目名称： Printerbug-Pro
👤 项目作者： RedteamNotes
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 10:47:02

📝 项目描述：
Windows SMB NTLM authentication coercion tool, triggers target to connect to your listener via MS-RPRN/MS-EFSR/MS-FSRVP/MS-DFSNM RPC protocols for NTLM relay.

🔗 点击访问项目地址
GitHub
GitHub - RedteamNotes/Printerbug-Pro: Windows SMB NTLM authentication coercion tool, triggers target to connect to your listener…
GitHub - RedteamNotes/Printerbug-Pro: Windows SMB NTLM authentication coercion tool, triggers target to connect to your listener…
Windows SMB NTLM authentication coercion tool, triggers target to connect to your listener via MS-RPRN/MS-EFSR/MS-FSRVP/MS-DFSNM RPC protocols for NTLM relay. - RedteamNotes/Printerbug-Pro
NTLM SMB
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE #POC

📦 项目名称： CVE-2026-61511-PoC-Exploit
👤 项目作者： tc4dy
🛠 开发语言： Python
⭐ Star数量： 3 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 10:21:29

📝 项目描述：
CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. 🔒

🔗 点击访问项目地址
GitHub
GitHub - tc4dy/CVE-2026-61511-PoC-Exploit: CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi…
GitHub - tc4dy/CVE-2026-61511-PoC-Exploit: CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi…
CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, d...
RCE CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： SecureScope
👤 项目作者： skull0363
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 10:56:12

📝 项目描述：
AI augmented security vulnerability scanner for GitHub repositories

🔗 点击访问项目地址
GitHub
GitHub - skull0363/SecureScope: AI augmented security vulnerability scanner for GitHub repositories
AI augmented security vulnerability scanner for GitHub repositories - skull0363/SecureScope
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exchange #CVE

📦 项目名称： mex-admin
👤 项目作者： robert-koch-institut
🛠 开发语言： Python
⭐ Star数量： 3 | 🍴 Fork数量： 1
📅 更新时间： 2026-07-29 11:01:41

📝 项目描述：
RKI Metadata Exchange | Browser application that allows creating and editing rules to non-destructively manipulate metadata even as it automatically updates.

🔗 点击访问项目地址
GitHub
GitHub - robert-koch-institut/mex-admin: RKI Metadata Exchange | Browser application that allows creating and editing rules to…
GitHub - robert-koch-institut/mex-admin: RKI Metadata Exchange | Browser application that allows creating and editing rules to…
RKI Metadata Exchange | Browser application that allows creating and editing rules to non-destructively manipulate metadata even as it automatically updates. - robert-koch-institut/mex-admin
Exchange CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit

📦 项目名称： CVE-2026-52832-PoC-exploit-nuclio-dashboard
👤 项目作者： mdvpat
🛠 开发语言： Shell
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 10:43:05

📝 项目描述：
Nuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, ≤1.15.27)

🔗 点击访问项目地址
GitHub
GitHub - mdvpat/CVE-2026-52832-PoC-exploit-nuclio-dashboard: Nuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions.…
Nuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Joi...
CVE POC Exploit
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： CVE-2026-16475-PoC
👤 项目作者： afertar
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 10:56:12

📝 项目描述：
This is the official repo with the PoC of the CVE-2026-16475, LFI in OCSinventory 2.12.4.

🔗 点击访问项目地址
GitHub
afertar/CVE-2026-16475-PoC
afertar/CVE-2026-16475-PoC
This is the official repo with the PoC of the CVE-2026-16475, LFI in OCSinventory 2.12.4. - afertar/CVE-2026-16475-PoC
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #渗透测试 #漏洞

📦 项目名称： vulnsight
👤 项目作者： skxrg
🛠 开发语言： HTML
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 09:58:07

📝 项目描述：
面向安全运营与渗透测试团队的轻量级漏洞工单平台，支持 API/人工录入、项目级权限、SLA、修复证据、飞 书通知与全程审计。

🔗 点击访问项目地址
GitHub
GitHub - skxrg/vulnsight: 面向安全运营与渗透测试团队的轻量级漏洞工单平台，支持 API/人工录入、项目级权限、SLA、修复证据、飞 书通知与全程审计。
面向安全运营与渗透测试团队的轻量级漏洞工单平台，支持 API/人工录入、项目级权限、SLA、修复证据、飞 书通知与全程审计。 - skxrg/vulnsight
渗透测试 漏洞
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Extension

📦 项目名称： BurpJSONTableViewer
👤 项目作者： Rajnish-me
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 09:59:04

📝 项目描述：
A Burp Suite extension that displays JSON API responses in a searchable table with copy and CSV export features. Available across Repeater, Proxy, Intruder, and other Burp tools.

🔗 点击访问项目地址
GitHub
GitHub - Rajnish-me/BurpJSONTableViewer: A Burp Suite extension that displays JSON API responses in a searchable table with copy…
A Burp Suite extension that displays JSON API responses in a searchable table with copy and CSV export features. Available across Repeater, Proxy, Intruder, and other Burp tools. - Rajnish-me/BurpJ...
Burp Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Vulnerability-Scanner
👤 项目作者： sindhuja4457
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 09:55:00

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - sindhuja4457/Vulnerability-Scanner
GitHub - sindhuja4457/Vulnerability-Scanner
Contribute to sindhuja4457/Vulnerability-Scanner development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Intrusion-Eye
👤 项目作者： Muhammad-Abubakar18
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 09:55:42

📝 项目描述：
AI-powered web vulnerability scanner that detects SQL Injection, XSS, and CSRF vulnerabilities using intelligent payload generation, automated crawling, and comprehensive security reporting.

🔗 点击访问项目地址
GitHub
GitHub - Muhammad-Abubakar18/Intrusion-Eye: AI-powered web vulnerability scanner that detects SQL Injection, XSS, and CSRF vulnerabilities…
GitHub - Muhammad-Abubakar18/Intrusion-Eye: AI-powered web vulnerability scanner that detects SQL Injection, XSS, and CSRF vulnerabilities…
AI-powered web vulnerability scanner that detects SQL Injection, XSS, and CSRF vulnerabilities using intelligent payload generation, automated crawling, and comprehensive security reporting. - Muha...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shiro #EXP

📦 项目名称： hnsw-shiro-ef
👤 项目作者： RyawSzn
🛠 开发语言： C++
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 09:29:40

📝 项目描述：
Spatial-based Hardness Indicators for Recall Optimization via Dynamic Efficiency Level in HNSW.

🔗 点击访问项目地址
GitHub
GitHub - RyawSzn/hnsw-shiro-ef: Spatial-based Hardness Indicators for Recall Optimization via Dynamic Efficiency Level in HNSW.
Spatial-based Hardness Indicators for Recall Optimization via Dynamic Efficiency Level in HNSW. - RyawSzn/hnsw-shiro-ef
Shiro EXP
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnerability-scanner
👤 项目作者： abhyyyy0990
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 08:44:10

📝 项目描述：
Python CLI vulnerability scanner for detecting open ports, outdated software, weak configurations, and generating security reports.

🔗 点击访问项目地址
GitHub
GitHub - abhyyyy0990/vulnerability-scanner: Python CLI vulnerability scanner for detecting open ports, outdated software, weak…
GitHub - abhyyyy0990/vulnerability-scanner: Python CLI vulnerability scanner for detecting open ports, outdated software, weak…
Python CLI vulnerability scanner for detecting open ports, outdated software, weak configurations, and generating security reports. - abhyyyy0990/vulnerability-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #应急响应 #取证

📦 项目名称： ir-forensic-analysis
👤 项目作者： wushulin111
🛠 开发语言： PowerShell
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-29 08:58:59

📝 项目描述：
应急响应取证分析 — 11维检测 + 6源威胁情报

🔗 点击访问项目地址
GitHub
GitHub - wushulin111/ir-forensic-analysis: 应急响应取证分析 — 11维检测 + 6源威胁情报
GitHub - wushulin111/ir-forensic-analysis: 应急响应取证分析 — 11维检测 + 6源威胁情报
应急响应取证分析 — 11维检测 + 6源威胁情报. Contribute to wushulin111/ir-forensic-analysis development by creating an account on GitHub.
应急响应 取证
Before
After
Back to Top