​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CIMCown
👤 项目作者： NSIDE-ATTACK-LOGIC
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 15:59:30

📝 项目描述：
PoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200

🔗 点击访问项目地址
GitHub
GitHub - NSIDE-ATTACK-LOGIC/CIMCown: PoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200
PoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200 - NSIDE-ATTACK-LOGIC/CIMCown
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Reflected

📦 项目名称： XSSion
👤 项目作者： alham-rizvi
🛠 开发语言： Python
⭐ Star数量： 33 | 🍴 Fork数量： 2
📅 更新时间： 2026-08-05 14:29:02

📝 项目描述：
Fastest Reflected XSS Finder v1

🔗 点击访问项目地址
GitHub
GitHub - alham-rizvi/XSSion: Fastest Reflected XSS Finder v1
GitHub - alham-rizvi/XSSion: Fastest Reflected XSS Finder v1
Fastest Reflected XSS Finder v1. Contribute to alham-rizvi/XSSion development by creating an account on GitHub.
XSS Reflected
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： craftcms-cve-2025-32432-rce
👤 项目作者： PsyGuy007-sys
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 14:04:05

📝 项目描述：
Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research

🔗 点击访问项目地址
GitHub
GitHub - PsyGuy007-sys/craftcms-cve-2025-32432-rce: Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange…
GitHub - PsyGuy007-sys/craftcms-cve-2025-32432-rce: Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange…
Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research - PsyGuy007-sys/craftcms-cve-2025-32432-rce
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vuln-agent
👤 项目作者： HitamLegit6777
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 13:52:24

📝 项目描述：
AI-powered Telegram vulnerability scanner: pure discovery, real PoC exploit verification, 14 vuln sources, vuln monitor, model switching

🔗 点击访问项目地址
GitHub
GitHub - HitamLegit6777/vuln-agent: AI-powered Telegram vulnerability scanner: pure discovery, real PoC exploit verification, 14…
GitHub - HitamLegit6777/vuln-agent: AI-powered Telegram vulnerability scanner: pure discovery, real PoC exploit verification, 14…
AI-powered Telegram vulnerability scanner: pure discovery, real PoC exploit verification, 14 vuln sources, vuln monitor, model switching - HitamLegit6777/vuln-agent
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnerability-scanner
👤 项目作者： AdityaKapse001
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 13:57:04

📝 项目描述：
Professional Network Vulnerability Scanner with automated reporting

🔗 点击访问项目地址
GitHub
GitHub - AdityaKapse001/vulnerability-scanner: Professional Network Vulnerability Scanner with automated reporting
GitHub - AdityaKapse001/vulnerability-scanner: Professional Network Vulnerability Scanner with automated reporting
Professional Network Vulnerability Scanner with automated reporting - AdityaKapse001/vulnerability-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC

📦 项目名称： poc-CVE-2026-23489
👤 项目作者： eorll-lgtm
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 13:21:35

📝 项目描述：
Proof of concept (POC) for CVE-2026-23489 GLPI "Fields" plugin <= 1.23.2

🔗 点击访问项目地址
GitHub
GitHub - eorll-lgtm/poc-CVE-2026-23489: Proof of concept (POC) for CVE-2026-23489 GLPI
GitHub - eorll-lgtm/poc-CVE-2026-23489: Proof of concept (POC) for CVE-2026-23489 GLPI "Fields" plugin <= 1.23.2
Proof of concept (POC) for CVE-2026-23489 GLPI "Fields" plugin <= 1.23.2 - eorll-lgtm/poc-CVE-2026-23489
CVE POC
🚨 GitHub 监控消息提醒

🚨 发现关键词： #GitLab #CVE

📦 项目名称： drift-detector
👤 项目作者： laxit-patel
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 13:02:29

📝 项目描述：
A scheduled DevSecOps scanner that finds dying third-party API integrations, known CVEs, and end-of-life software across a fleet of repos — dated, sourced, down to file:line.

🔗 点击访问项目地址
GitHub
GitHub - laxit-patel/drift-detector: A scheduled DevSecOps scanner that finds dying third-party API integrations, known CVEs, and…
GitHub - laxit-patel/drift-detector: A scheduled DevSecOps scanner that finds dying third-party API integrations, known CVEs, and…
A scheduled DevSecOps scanner that finds dying third-party API integrations, known CVEs, and end-of-life software across a fleet of repos — dated, sourced, down to file:line. - laxit-patel/drift-de...
GitLab CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #漏洞 #复现 #CVE

📦 项目名称： CVE-Vuln-Records
👤 项目作者： yomymy
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 13:04:19

📝 项目描述：
我的 CVE 漏洞复现实战笔记

🔗 点击访问项目地址
GitHub
GitHub - yomymy/CVE-Vuln-Records: 我的 CVE 漏洞复现实战笔记
我的 CVE 漏洞复现实战笔记. Contribute to yomymy/CVE-Vuln-Records development by creating an account on GitHub.
漏洞 复现 CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： rce_sandbox
👤 项目作者： MineshShaw
🛠 开发语言： TypeScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 12:07:13

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - MineshShaw/rce_sandbox
Contribute to MineshShaw/rce_sandbox development by creating an account on GitHub.
RCE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Vulnerability
👤 项目作者： itsjustthej
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 12:54:06

📝 项目描述：
Vulnerability Scanner(Mini Project)

🔗 点击访问项目地址
GitHub
GitHub - itsjustthej/Vulnerability: Vulnerability Scanner(Mini Project)
GitHub - itsjustthej/Vulnerability: Vulnerability Scanner(Mini Project)
Vulnerability Scanner(Mini Project). Contribute to itsjustthej/Vulnerability development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vuln-auditor
👤 项目作者： Phanidhar007
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 12:59:59

📝 项目描述：
Dependency vulnerability scanner against bundled NVD-derived CVE data + online feeds, with PDF/JSON reports

🔗 点击访问项目地址
GitHub
GitHub - Phanidhar007/vuln-auditor: Dependency vulnerability scanner against bundled NVD-derived CVE data + online feeds, with…
GitHub - Phanidhar007/vuln-auditor: Dependency vulnerability scanner against bundled NVD-derived CVE data + online feeds, with…
Dependency vulnerability scanner against bundled NVD-derived CVE data + online feeds, with PDF/JSON reports - Phanidhar007/vuln-auditor
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSTI #RCE

📦 项目名称： SSTImap-Kali-2026-Guide
👤 项目作者： Mariokiilz
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 10:06:36

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - Mariokiilz/SSTImap-Kali-2026-Guide
Contribute to Mariokiilz/SSTImap-Kali-2026-Guide development by creating an account on GitHub.
SSTI RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Bypass #WAF

📦 项目名称： NIGHTFALL
👤 项目作者： DELHIKRISHNAN
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 12:06:47

📝 项目描述：
An agentic, reasoning-driven penetration testing platform designed to autonomously discover, triage, and exploit web vulnerabilities. Unlike traditional checklist-based scanners, NIGHTFALL uses a frontier reasoning model (Claude, GPT-4, etc.) to drive its decision-making, synthesizing context-aware payloads and executing dynamic WAF bypass chains.

🔗 点击访问项目地址
GitHub
DELHIKRISHNAN/NIGHTFALL
DELHIKRISHNAN/NIGHTFALL
An agentic, reasoning-driven penetration testing platform designed to autonomously discover, triage, and exploit web vulnerabilities. Unlike traditional checklist-based scanners, NIGHTFALL uses a f...
Bypass WAF
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： notus-scanner
👤 项目作者： greenbone
🛠 开发语言： Python
⭐ Star数量： 62 | 🍴 Fork数量： 13
📅 更新时间： 2026-08-05 11:50:16

📝 项目描述：
Notus is a vulnerability scanner for creating results from local security checks

🔗 点击访问项目地址
GitHub
GitHub - greenbone/notus-scanner: Notus is a vulnerability scanner for creating results from local security checks
Notus is a vulnerability scanner for creating results from local security checks - greenbone/notus-scanner
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： nightmare-framework
👤 项目作者： an0mal1a
🛠 开发语言： C
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 11:52:55

📝 项目描述：
C2 post-exploitation framework in C. Modular agent design, client-server architecture.

🔗 点击访问项目地址
GitHub
GitHub - an0mal1a/nightmare-framework: C2 post-exploitation framework in C. Modular agent design, client-server architecture.
GitHub - an0mal1a/nightmare-framework: C2 post-exploitation framework in C. Modular agent design, client-server architecture.
C2 post-exploitation framework in C. Modular agent design, client-server architecture. - an0mal1a/nightmare-framework
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Nuclei #templates

📦 项目名称： nuclei-action
👤 项目作者： projectdiscovery
🛠 开发语言： JavaScript
⭐ Star数量： 288 | 🍴 Fork数量： 80
📅 更新时间： 2026-08-05 10:10:04

📝 项目描述：
Vulnerability Scan with Nuclei

🔗 点击访问项目地址
GitHub
GitHub - projectdiscovery/nuclei-action: Vulnerability Scan with Nuclei
Vulnerability Scan with Nuclei. Contribute to projectdiscovery/nuclei-action development by creating an account on GitHub.
Nuclei templates
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Loader #Evasion #EDR

📦 项目名称： p3-loader
👤 项目作者： HackSpeak
🛠 开发语言： C
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 11:53:10

📝 项目描述：
P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread (EDR evasion research)

🔗 点击访问项目地址
GitHub
GitHub - HackSpeak/p3-loader: P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread…
GitHub - HackSpeak/p3-loader: P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread…
P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread (EDR evasion research) - HackSpeak/p3-loader
Shellcode Loader Evasion EDR
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： C2-Keylogger
👤 项目作者： noobuser978-gif
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 10:57:16

📝 项目描述：
Python C2 (Command & Control) framework with keylogger client & FastAPI server. Features: real‑time log streaming, command polling, remote execution, cross‑platform (Windows/Linux). Admin endpoint for injecting commands. Built for cybersecurity education – use ethically on authorized systems only.

🔗 点击访问项目地址
GitHub
GitHub - noobuser978-gif/C2-Keylogger: Python C2 (Command & Control) framework with keylogger client & FastAPI server. Features:…
GitHub - noobuser978-gif/C2-Keylogger: Python C2 (Command & Control) framework with keylogger client & FastAPI server. Features:…
Python C2 (Command & Control) framework with keylogger client & FastAPI server. Features: real‑time log streaming, command polling, remote execution, cross‑platform (Windows...
C2 Framework
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnerability-scanner
👤 项目作者： Rashmibhandari-alt
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 10:57:54

📝 项目描述：
A simple Python vulnerability scanner project.

🔗 点击访问项目地址
GitHub
GitHub - Rashmibhandari-alt/vulnerability-scanner: A simple Python vulnerability scanner project.
GitHub - Rashmibhandari-alt/vulnerability-scanner: A simple Python vulnerability scanner project.
A simple Python vulnerability scanner project. Contribute to Rashmibhandari-alt/vulnerability-scanner development by creating an account on GitHub.
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #插件

📦 项目名称： SensiExtract
👤 项目作者： AakiTT
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-05 09:46:57

📝 项目描述：
SensiExtract - Burp Suite 敏感信息提取插件

🔗 点击访问项目地址
GitHub
GitHub - AakiTT/SensiExtract: SensiExtract - Burp Suite 敏感信息提取插件
GitHub - AakiTT/SensiExtract: SensiExtract - Burp Suite 敏感信息提取插件
SensiExtract - Burp Suite 敏感信息提取插件. Contribute to AakiTT/SensiExtract development by creating an account on GitHub.
Burp 插件
Before
After
Back to Top