​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Plugin #Extension

📦 项目名称： Burp-Suite-Professional-License-Key-1-Year
👤 项目作者： jsh11dev
🛠 开发语言： Unknown
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 01:48:51

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - jsh11dev/Burp-Suite-Professional-License-Key-1-Year
GitHub - jsh11dev/Burp-Suite-Professional-License-Key-1-Year
Contribute to jsh11dev/Burp-Suite-Professional-License-Key-1-Year development by creating an account on GitHub.
Burp Plugin Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Spring #EXP

📦 项目名称： talent-intelligence-platform
👤 项目作者： pedrovvitor
🛠 开发语言： Kotlin
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 02:03:58

📝 项目描述：
Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j, React, PostgreSQL, and PGVector.

🔗 点击访问项目地址
GitHub
GitHub - pedrovvitor/talent-intelligence-platform: Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j…
GitHub - pedrovvitor/talent-intelligence-platform: Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j…
Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j, React, PostgreSQL, and PGVector. - pedrovvitor/talent-intelligence-platform
Spring EXP
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： albatoul
👤 项目作者： karimfayadd
🛠 开发语言： Rust
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 01:49:52

📝 项目描述：
Albatoul Vulnerability Scanner native Windows CVE engine

🔗 点击访问项目地址
GitHub
GitHub - karimfayadd/albatoul: Albatoul Vulnerability Scanner — native Windows CVE engine by Karim Fayad
Albatoul Vulnerability Scanner — native Windows CVE engine by Karim Fayad - karimfayadd/albatoul
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Stored

📦 项目名称： Stored-Cross-Site-Scripting-Stored-XSS-in-Spryn-via-PDF-Upload-in-Issue-Discussion
👤 项目作者： LindHunt
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 01:16:16

📝 项目描述：
# Stored Cross-Site Scripting (Stored XSS) in Spryn via PDF Upload in Issue Discussion A Stored XSS vulnerability in **Spryn** allows malicious JavaScript to be embedded in a PDF uploaded through Issue Discussion. The payload is stored and executes when the PDF is opened or previewed by another user. Affects versions **below 1.0.21**.

🔗 点击访问项目地址
GitHub
GitHub - LindHunt/Stored-Cross-Site-Scripting-Stored-XSS-in-Spryn-via-PDF-Upload-in-Issue-Discussion: # Stored Cross-Site Scripting…
GitHub - LindHunt/Stored-Cross-Site-Scripting-Stored-XSS-in-Spryn-via-PDF-Upload-in-Issue-Discussion: # Stored Cross-Site Scripting…
# Stored Cross-Site Scripting (Stored XSS) in Spryn via PDF Upload in Issue Discussion A Stored XSS vulnerability in **Spryn** allows malicious JavaScript to be embedded in a PDF uploaded through ...
XSS Stored
⚡️⚡️⚡️⚡️😂😂😂😂
2026世界杯官方指定投注平台

➡️ 豪礼大放送、高端嫩模、劳力士手表、奔驰E300 加入 #182体育 等你领取， 电子可拉2万一注

🌐182体育官网： 182268.com
TG玩家首选人民币台 不限ip 免实名免绑卡手机号码

🌐8K国际官网： 8k2769.com
TG玩家首选U台 U存U提出款稳，福利好反水无上限


😀😀😀😀😀😀😀😀😀😀😀😀😀

1.PG电子赏金女王一举斩获830万并成功提现
2.PA真人豪赢644万一路长虹一天实现暴富
3.PG电子爆890万并以成功提现实现财富自由
4.大哥在PA真人百家乐累计盈利突破1000万

🔤🔤🔤🔤 以及C币，K豆，OKpay、👌微信，👌支付宝，银行卡等30多种存取款方式，通畅便捷

大额出款额外奖励8888-128888，双重日存彩金128888+4688每日送，周流水彩金68888每周送，双重签到彩金16888+3888送不停

😅😏😃😃🙃😢😅😚😍😀😏😝
【 182体育 全网独此一家】
公平、公正、公开、 信誉第一、服务第一
不限ip、 免实名、免绑卡、免绑手机号码

🤩🤩🤩🤩🤩🤩🤩🤩🤩🤩🤩🤩
官方频道： @vip182ty
体育推荐： @tytj182ty
专属客服： @vipkf_182ty
双向联系：@vipkf_182ty_bot


🌐 8K国际网址： 8k2769.com
🌐182体育网址： 182268.com
182体育
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #malware

📦 项目名称： CTI-YARA-Detection-Repository
👤 项目作者： cybersecurity-dev
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 23:21:33

📝 项目描述：
Cyber Threat Intelligence (CTI) | YARA Detection Repository

🔗 点击访问项目地址
GitHub
GitHub - cybersecurity-dev/CTI-YARA-Detection-Repository: Cyber Threat Intelligence (CTI) | YARA Detection Repository
GitHub - cybersecurity-dev/CTI-YARA-Detection-Repository: Cyber Threat Intelligence (CTI) | YARA Detection Repository
Cyber Threat Intelligence (CTI) | YARA Detection Repository - cybersecurity-dev/CTI-YARA-Detection-Repository
YARA rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnradar.dev
👤 项目作者： VulnRadar
🛠 开发语言： TypeScript
⭐ Star数量： 8 | 🍴 Fork数量： 1
📅 更新时间： 2026-08-25 23:56:04

📝 项目描述：
Open-source web vulnerability scanner. Scan any website for instant reports with severity ratings, actionable fix guidance, and team collaboration tools. Free and self-hostable.

🔗 点击访问项目地址
GitHub
GitHub - VulnRadar/vulnradar.dev: Scan websites for 700+ security vulnerabilities. Get instant reports with severity ratings, actionable…
GitHub - VulnRadar/vulnradar.dev: Scan websites for 700+ security vulnerabilities. Get instant reports with severity ratings, actionable…
Scan websites for 700+ security vulnerabilities. Get instant reports with severity ratings, actionable fix guidance, and team collaboration tools. - VulnRadar/vulnradar.dev
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： Vebto-Platform-Unauthenticated-to-RCE-via-Social-Auth-Bypass-diskPrefix-Upload
👤 项目作者： Yucaerin
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 23:47:11

📝 项目描述：
The Vebto platform (shared foundation for BeLink, BeDesk, BeDrive, BeMusic, MTDB, and Architect) is vulnerable to a full unauthenticated Remote Code Execution through a multi-step exploitation chain

🔗 点击访问项目地址
GitHub
GitHub - Yucaerin/Vebto-Platform-Unauthenticated-to-RCE-via-Social-Auth-Bypass-diskPrefix-Upload: The Vebto platform (shared foundation…
GitHub - Yucaerin/Vebto-Platform-Unauthenticated-to-RCE-via-Social-Auth-Bypass-diskPrefix-Upload: The Vebto platform (shared foundation…
The Vebto platform (shared foundation for BeLink, BeDesk, BeDrive, BeMusic, MTDB, and Architect) is vulnerable to a full unauthenticated Remote Code Execution through a multi-step exploitation chai...
RCE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSTI #RCE

📦 项目名称： SSTImap
👤 项目作者： vladko312
🛠 开发语言： Python
⭐ Star数量： 1620 | 🍴 Fork数量： 185
📅 更新时间： 2026-08-25 23:04:17

📝 项目描述：
Automatic SSTI detection tool with interactive interface

🔗 点击访问项目地址
GitHub
GitHub - vladko312/SSTImap: Automatic SSTI detection tool with interactive interface
GitHub - vladko312/SSTImap: Automatic SSTI detection tool with interactive interface
Automatic SSTI detection tool with interactive interface - vladko312/SSTImap
SSTI RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Vulnerability-Scanner
👤 项目作者： ssevera1
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 22:33:26

📝 项目描述：
Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener for Linux, Windows, and macOS. Runs a five-phase security pipeline with 14 CIS-aligned scanners, behavioral anomaly detection, backup-first hardening, and optional AI analysis — all with only 2 runtime dependencies.

🔗 点击访问项目地址
GitHub
GitHub - ssevera1/Vulnerability-Scanner: Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener…
GitHub - ssevera1/Vulnerability-Scanner: Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener…
Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener for Linux, Windows, and macOS. Runs a five-phase security pipeline with 14 CIS-aligned scanners, behavio...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #提权 #CVE

📦 项目名称： vivo-root-build
👤 项目作者： sgswzglwlx
🛠 开发语言： C
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 21:33:33

📝 项目描述：
vivo/iQOO 提权 so 编译（CVE-2026-43499）

🔗 点击访问项目地址
提权 CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Reflected

📦 项目名称： web-application-security-testing-lab
👤 项目作者： samitha01
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 20:25:04

📝 项目描述：
Intentionally vulnerable Flask web application tested from Kali Linux to demonstrate route discovery, broken access control, reflected XSS, remediation, and verification.

🔗 点击访问项目地址
GitHub
GitHub - samitha01/web-application-security-testing-lab: Intentionally vulnerable Flask web application tested from Kali Linux…
GitHub - samitha01/web-application-security-testing-lab: Intentionally vulnerable Flask web application tested from Kali Linux…
Intentionally vulnerable Flask web application tested from Kali Linux to demonstrate route discovery, broken access control, reflected XSS, remediation, and verification. - samitha01/web-applicatio...
XSS Reflected
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： GoSCAn
👤 项目作者： therxwold
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 21:03:40

📝 项目描述：
GoScan is a Go dependency vulnerability scanner and remediation planner.

🔗 点击访问项目地址
GitHub
GitHub - therxwold/GoSCAn: GoScan is a Go dependency vulnerability scanner and remediation planner.
GoScan is a Go dependency vulnerability scanner and remediation planner. - therxwold/GoSCAn
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-56705
👤 项目作者： Boreas37
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 21:00:00

📝 项目描述：
CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile arbitrary file write). PoC, Docker lab and negative test included.

🔗 点击访问项目地址
GitHub
GitHub - Boreas37/CVE-2026-56705: CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile…
GitHub - Boreas37/CVE-2026-56705: CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile…
CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile arbitrary file write). PoC, Docker lab and negative test included. - Boreas37/CVE-2026-56705
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： CVE-2021-41773-Exploit
👤 项目作者： abdulrafay25-svg
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:35:49

📝 项目描述：
CVE-2021-41773 Apache HTTP Server 2.4.49 Path Traversal to RCE Exploit

🔗 点击访问项目地址
GitHub
abdulrafay25-svg/CVE-2021-41773-Exploit
CVE-2021-41773 Apache HTTP Server 2.4.49 Path Traversal to RCE Exploit - abdulrafay25-svg/CVE-2021-41773-Exploit
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #渗透测试 #内网 #漏洞

📦 项目名称： pentest-kb-mcp
👤 项目作者： wangqiao258
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:58:36

📝 项目描述：
渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server)

🔗 点击访问项目地址
GitHub
GitHub - wangqiao258/pentest-kb-mcp: 渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server)
GitHub - wangqiao258/pentest-kb-mcp: 渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server)
渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server) - wangqiao258/pentest-kb-mcp
渗透测试 内网 漏洞
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： api-security-scanner-
👤 项目作者： muhammadbalalansar
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:14:45

📝 项目描述：
Full-stack API vulnerability scanner targeting the OWASP API Security Top 10 with configurable scan modules and a React dashboard.

🔗 点击访问项目地址
GitHub
GitHub - muhammadbalalansar/api-security-scanner-: Full-stack API vulnerability scanner targeting the OWASP API Security Top 10…
GitHub - muhammadbalalansar/api-security-scanner-: Full-stack API vulnerability scanner targeting the OWASP API Security Top 10…
Full-stack API vulnerability scanner targeting the OWASP API Security Top 10 with configurable scan modules and a React dashboard. - muhammadbalalansar/api-security-scanner-
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #RCE

📦 项目名称： DarkSword-RCE
👤 项目作者： zhengalfie
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:59:32

📝 项目描述：
Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain I'm not interested in the RU/UA politics, sloppy tradecraft results in exploits being found.

🔗 点击访问项目地址
GitHub
GitHub - zhengalfie/DarkSword-RCE: Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain…
GitHub - zhengalfie/DarkSword-RCE: Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain…
Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain I'm not interested in the RU/UA politics, sloppy tradecraft results in exploits being found....
Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-75604-poc
👤 项目作者： rafabd1
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:35:59

📝 项目描述：
CVE-2026-75604 Next.js Windows RCE proof of concept

🔗 点击访问项目地址
GitHub
GitHub - rafabd1/CVE-2026-75604-poc: CVE-2026-75604 Next.js Windows RCE proof of concept
GitHub - rafabd1/CVE-2026-75604-poc: CVE-2026-75604 Next.js Windows RCE proof of concept
CVE-2026-75604 Next.js Windows RCE proof of concept - rafabd1/CVE-2026-75604-poc
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #C2 #Framework

📦 项目名称： mirax
👤 项目作者： itsreverance
🛠 开发语言： Unknown
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 18:55:24

📝 项目描述：
Mirax - Modular IoT network testing framework. Multi-architecture botnet C2 with 19 attack methods, auto-scanning, exploit modules (Telnet/SSH/CVE), user tiers (VIP/PREMIUM/USER). For authorized security auditing & educational research only.

🔗 点击访问项目地址
GitHub
itsreverance/mirax
Mirax - Modular IoT network testing framework. Multi-architecture botnet C2 with 19 attack methods, auto-scanning, exploit modules (Telnet/SSH/CVE), user tiers (VIP/PREMIUM/USER). For authorized se...
C2 Framework
Before
After
Back to Top