​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #POC #利用

📦 项目名称： easyWallet
👤 项目作者： easyHackCash
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 03:03:16

📝 项目描述：
The #1 open-source private key cracking framework. Comprehensive integration of public POCs, GPU-accelerated, leading weak-entropy wallet exploit solution. 排名第一的开源私钥破解框架。全面集成公开 POC，GPU 加速，领先的弱熵钱包利用方案。

🔗 点击访问项目地址
GitHub
easyHackCash/easyWallet
easyHackCash/easyWallet
The #1 open-source private key cracking framework. Comprehensive integration of public POCs, GPU-accelerated, leading weak-entropy wallet exploit solution. 排名第一的开源私钥破解框架。全面集成公开 POC，GPU 加速，领先的弱熵钱包利用...
Exploit POC 利用
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules

📦 项目名称： yara-rules
👤 项目作者： amethystsystems
🛠 开发语言： YARA
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 02:17:07

📝 项目描述：
Various Yara rules we make for hunting and detections.

🔗 点击访问项目地址
GitHub
GitHub - amethystsystems/yara-rules: Various Yara rules we make for hunting and detections.
GitHub - amethystsystems/yara-rules: Various Yara rules we make for hunting and detections.
Various Yara rules we make for hunting and detections. - amethystsystems/yara-rules
YARA rules
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Burp #Plugin #Extension

📦 项目名称： Burp-Suite-Professional-License-Key-1-Year
👤 项目作者： jsh11dev
🛠 开发语言： Unknown
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 01:48:51

📝 项目描述：
无描述

🔗 点击访问项目地址
GitHub
GitHub - jsh11dev/Burp-Suite-Professional-License-Key-1-Year
GitHub - jsh11dev/Burp-Suite-Professional-License-Key-1-Year
Contribute to jsh11dev/Burp-Suite-Professional-License-Key-1-Year development by creating an account on GitHub.
Burp Plugin Extension
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Spring #EXP

📦 项目名称： talent-intelligence-platform
👤 项目作者： pedrovvitor
🛠 开发语言： Kotlin
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 02:03:58

📝 项目描述：
Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j, React, PostgreSQL, and PGVector.

🔗 点击访问项目地址
GitHub
GitHub - pedrovvitor/talent-intelligence-platform: Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j…
GitHub - pedrovvitor/talent-intelligence-platform: Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j…
Explainable AI candidate-to-job matching with Kotlin, Spring Boot, LangChain4j, React, PostgreSQL, and PGVector. - pedrovvitor/talent-intelligence-platform
Spring EXP
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： albatoul
👤 项目作者： karimfayadd
🛠 开发语言： Rust
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 01:49:52

📝 项目描述：
Albatoul Vulnerability Scanner native Windows CVE engine

🔗 点击访问项目地址
GitHub
GitHub - karimfayadd/albatoul: Albatoul Vulnerability Scanner — native Windows CVE engine by Karim Fayad
Albatoul Vulnerability Scanner — native Windows CVE engine by Karim Fayad - karimfayadd/albatoul
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Stored

📦 项目名称： Stored-Cross-Site-Scripting-Stored-XSS-in-Spryn-via-PDF-Upload-in-Issue-Discussion
👤 项目作者： LindHunt
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 01:16:16

📝 项目描述：
# Stored Cross-Site Scripting (Stored XSS) in Spryn via PDF Upload in Issue Discussion A Stored XSS vulnerability in **Spryn** allows malicious JavaScript to be embedded in a PDF uploaded through Issue Discussion. The payload is stored and executes when the PDF is opened or previewed by another user. Affects versions **below 1.0.21**.

🔗 点击访问项目地址
GitHub
GitHub - LindHunt/Stored-Cross-Site-Scripting-Stored-XSS-in-Spryn-via-PDF-Upload-in-Issue-Discussion: # Stored Cross-Site Scripting…
GitHub - LindHunt/Stored-Cross-Site-Scripting-Stored-XSS-in-Spryn-via-PDF-Upload-in-Issue-Discussion: # Stored Cross-Site Scripting…
# Stored Cross-Site Scripting (Stored XSS) in Spryn via PDF Upload in Issue Discussion A Stored XSS vulnerability in **Spryn** allows malicious JavaScript to be embedded in a PDF uploaded through ...
XSS Stored
🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #malware

📦 项目名称： CTI-YARA-Detection-Repository
👤 项目作者： cybersecurity-dev
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 23:21:33

📝 项目描述：
Cyber Threat Intelligence (CTI) | YARA Detection Repository

🔗 点击访问项目地址
GitHub
GitHub - cybersecurity-dev/CTI-YARA-Detection-Repository: Cyber Threat Intelligence (CTI) | YARA Detection Repository
GitHub - cybersecurity-dev/CTI-YARA-Detection-Repository: Cyber Threat Intelligence (CTI) | YARA Detection Repository
Cyber Threat Intelligence (CTI) | YARA Detection Repository - cybersecurity-dev/CTI-YARA-Detection-Repository
YARA rules malware
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： vulnradar.dev
👤 项目作者： VulnRadar
🛠 开发语言： TypeScript
⭐ Star数量： 8 | 🍴 Fork数量： 1
📅 更新时间： 2026-08-25 23:56:04

📝 项目描述：
Open-source web vulnerability scanner. Scan any website for instant reports with severity ratings, actionable fix guidance, and team collaboration tools. Free and self-hostable.

🔗 点击访问项目地址
GitHub
GitHub - VulnRadar/vulnradar.dev: Scan websites for 700+ security vulnerabilities. Get instant reports with severity ratings, actionable…
GitHub - VulnRadar/vulnradar.dev: Scan websites for 700+ security vulnerabilities. Get instant reports with severity ratings, actionable…
Scan websites for 700+ security vulnerabilities. Get instant reports with severity ratings, actionable fix guidance, and team collaboration tools. - VulnRadar/vulnradar.dev
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： Vebto-Platform-Unauthenticated-to-RCE-via-Social-Auth-Bypass-diskPrefix-Upload
👤 项目作者： Yucaerin
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 23:47:11

📝 项目描述：
The Vebto platform (shared foundation for BeLink, BeDesk, BeDrive, BeMusic, MTDB, and Architect) is vulnerable to a full unauthenticated Remote Code Execution through a multi-step exploitation chain

🔗 点击访问项目地址
GitHub
GitHub - Yucaerin/Vebto-Platform-Unauthenticated-to-RCE-via-Social-Auth-Bypass-diskPrefix-Upload: The Vebto platform (shared foundation…
GitHub - Yucaerin/Vebto-Platform-Unauthenticated-to-RCE-via-Social-Auth-Bypass-diskPrefix-Upload: The Vebto platform (shared foundation…
The Vebto platform (shared foundation for BeLink, BeDesk, BeDrive, BeMusic, MTDB, and Architect) is vulnerable to a full unauthenticated Remote Code Execution through a multi-step exploitation chai...
RCE Remote
🚨 GitHub 监控消息提醒

🚨 发现关键词： #SSTI #RCE

📦 项目名称： SSTImap
👤 项目作者： vladko312
🛠 开发语言： Python
⭐ Star数量： 1620 | 🍴 Fork数量： 185
📅 更新时间： 2026-08-25 23:04:17

📝 项目描述：
Automatic SSTI detection tool with interactive interface

🔗 点击访问项目地址
GitHub
GitHub - vladko312/SSTImap: Automatic SSTI detection tool with interactive interface
GitHub - vladko312/SSTImap: Automatic SSTI detection tool with interactive interface
Automatic SSTI detection tool with interactive interface - vladko312/SSTImap
SSTI RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Vulnerability-Scanner
👤 项目作者： ssevera1
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 22:33:26

📝 项目描述：
Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener for Linux, Windows, and macOS. Runs a five-phase security pipeline with 14 CIS-aligned scanners, behavioral anomaly detection, backup-first hardening, and optional AI analysis — all with only 2 runtime dependencies.

🔗 点击访问项目地址
GitHub
GitHub - ssevera1/Vulnerability-Scanner: Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener…
GitHub - ssevera1/Vulnerability-Scanner: Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener…
Cross-platform vulnerability scanner, penetration tester, zero-day detector, and OS hardener for Linux, Windows, and macOS. Runs a five-phase security pipeline with 14 CIS-aligned scanners, behavio...
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #提权 #CVE

📦 项目名称： vivo-root-build
👤 项目作者： sgswzglwlx
🛠 开发语言： C
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 21:33:33

📝 项目描述：
vivo/iQOO 提权 so 编译（CVE-2026-43499）

🔗 点击访问项目地址
提权 CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #Reflected

📦 项目名称： web-application-security-testing-lab
👤 项目作者： samitha01
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 20:25:04

📝 项目描述：
Intentionally vulnerable Flask web application tested from Kali Linux to demonstrate route discovery, broken access control, reflected XSS, remediation, and verification.

🔗 点击访问项目地址
GitHub
GitHub - samitha01/web-application-security-testing-lab: Intentionally vulnerable Flask web application tested from Kali Linux…
GitHub - samitha01/web-application-security-testing-lab: Intentionally vulnerable Flask web application tested from Kali Linux…
Intentionally vulnerable Flask web application tested from Kali Linux to demonstrate route discovery, broken access control, reflected XSS, remediation, and verification. - samitha01/web-applicatio...
XSS Reflected
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： GoSCAn
👤 项目作者： therxwold
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 21:03:40

📝 项目描述：
GoScan is a Go dependency vulnerability scanner and remediation planner.

🔗 点击访问项目地址
GitHub
GitHub - therxwold/GoSCAn: GoScan is a Go dependency vulnerability scanner and remediation planner.
GoScan is a Go dependency vulnerability scanner and remediation planner. - therxwold/GoSCAn
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-56705
👤 项目作者： Boreas37
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 21:00:00

📝 项目描述：
CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile arbitrary file write). PoC, Docker lab and negative test included.

🔗 点击访问项目地址
GitHub
GitHub - Boreas37/CVE-2026-56705: CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile…
GitHub - Boreas37/CVE-2026-56705: CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile…
CVE-2026-56705 - Adminer < 5.4.3 unauthenticated RCE via MSSQL PDO DSN injection (ODBC TraceFile arbitrary file write). PoC, Docker lab and negative test included. - Boreas37/CVE-2026-56705
CVE POC RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： CVE-2021-41773-Exploit
👤 项目作者： abdulrafay25-svg
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:35:49

📝 项目描述：
CVE-2021-41773 Apache HTTP Server 2.4.49 Path Traversal to RCE Exploit

🔗 点击访问项目地址
GitHub
abdulrafay25-svg/CVE-2021-41773-Exploit
CVE-2021-41773 Apache HTTP Server 2.4.49 Path Traversal to RCE Exploit - abdulrafay25-svg/CVE-2021-41773-Exploit
RCE CVE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #渗透测试 #内网 #漏洞

📦 项目名称： pentest-kb-mcp
👤 项目作者： wangqiao258
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:58:36

📝 项目描述：
渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server)

🔗 点击访问项目地址
GitHub
GitHub - wangqiao258/pentest-kb-mcp: 渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server)
GitHub - wangqiao258/pentest-kb-mcp: 渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server)
渗透测试经验库 MCP 服务器 (pentest knowledge base MCP server) - wangqiao258/pentest-kb-mcp
渗透测试 内网 漏洞
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： api-security-scanner-
👤 项目作者： muhammadbalalansar
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:14:45

📝 项目描述：
Full-stack API vulnerability scanner targeting the OWASP API Security Top 10 with configurable scan modules and a React dashboard.

🔗 点击访问项目地址
GitHub
GitHub - muhammadbalalansar/api-security-scanner-: Full-stack API vulnerability scanner targeting the OWASP API Security Top 10…
GitHub - muhammadbalalansar/api-security-scanner-: Full-stack API vulnerability scanner targeting the OWASP API Security Top 10…
Full-stack API vulnerability scanner targeting the OWASP API Security Top 10 with configurable scan modules and a React dashboard. - muhammadbalalansar/api-security-scanner-
Vulnerability
🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #RCE

📦 项目名称： DarkSword-RCE
👤 项目作者： zhengalfie
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:59:32

📝 项目描述：
Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain I'm not interested in the RU/UA politics, sloppy tradecraft results in exploits being found.

🔗 点击访问项目地址
GitHub
GitHub - zhengalfie/DarkSword-RCE: Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain…
GitHub - zhengalfie/DarkSword-RCE: Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain…
Reference: https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain I'm not interested in the RU/UA politics, sloppy tradecraft results in exploits being found....
Exploit RCE
🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #RCE

📦 项目名称： CVE-2026-75604-poc
👤 项目作者： rafabd1
🛠 开发语言： Python
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-25 19:35:59

📝 项目描述：
CVE-2026-75604 Next.js Windows RCE proof of concept

🔗 点击访问项目地址
GitHub
GitHub - rafabd1/CVE-2026-75604-poc: CVE-2026-75604 Next.js Windows RCE poc
GitHub - rafabd1/CVE-2026-75604-poc: CVE-2026-75604 Next.js Windows RCE poc
CVE-2026-75604 Next.js Windows RCE poc. Contribute to rafabd1/CVE-2026-75604-poc development by creating an account on GitHub.
CVE POC RCE
Before
After
Back to Top