​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE

📦 项目名称: ssrf-scira-cve
👤 项目作者: indifference108
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-28 16:04:41

📝 项目描述:
无描述

🔗 点击访问项目地址 indifference108/ssrf-scira-cve
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE

📦 项目名称: CVE-2026-69137
👤 项目作者: EntroVyx
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-28 16:34:20

📝 项目描述:
SuiteCRM <= 7.15.1, <= 8.10.1 - Authenticated SSRF

🔗 点击访问项目地址 GitHub - EntroVyx/CVE-2026-69137: SuiteCRM <= 7.15.1, <= 8.10.1 - Authenticated SSRF
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE

📦 项目名称: information_security_-expert-Blind-SSRF-with-Shellshock-exploitation
👤 项目作者: rbkhan0229
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-28 06:48:00

📝 项目描述:
information_security_(expert)Blind SSRF with Shellshock exploitation

🔗 点击访问项目地址 GitHub - rbkhan0229/information_security_-expert-Blind-SSRF-with-Shellshock-exploitation: information_security_(expert)Blind SSRF…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: local-whisper-mcp
👤 项目作者: laurentlemercier
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-27 19:20:16

📝 项目描述:
Service de transcription vocale local - FastAPI REST + MCP Streamable HTTP, Whisper via faster-whisper, avec protection SSRF.

🔗 点击访问项目地址 GitHub - laurentlemercier/local-whisper-mcp: Service de transcription vocale local - FastAPI REST + MCP Streamable HTTP, Whisper…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #POC

📦 项目名称: openwiki-ssrf-poc
👤 项目作者: tphilll
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-27 16:25:33

📝 项目描述:
Demo project wiki source

🔗 点击访问项目地址 GitHub - tphilll/openwiki-ssrf-poc: Demo project wiki source
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE

📦 项目名称: CVE-2026-8712-Wyoming
👤 项目作者: rahulreddykarne
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-27 07:01:59

📝 项目描述:
CVE-2026-8712: Unauthenticated SSRF / Backend URI Override in Wyoming HTTP API via uri Query Parameter

🔗 点击访问项目地址 GitHub - rahulreddykarne/CVE-2026-8712-Wyoming: CVE-2026-8712: Unauthenticated SSRF / Backend URI Override in Wyoming HTTP API…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: AWS-Cloud-Security-Threat-Hunting-Incident-Response
👤 项目作者: aobakwemokgothu94-jpg
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-26 20:52:22

📝 项目描述:
Cloud threat hunting and exploitation simulation on AWS infrastructure. Demonstrated real-world compromise vectors including S3 public access exposure, credential exfiltration via IMDSv1 Server-Side Request Forgery (SSRF), and post-incident forensic log auditing using AWS CloudTrail.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: rf-survey
👤 项目作者: Chicago-Offline
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-26 22:45:57

📝 项目描述:
Multi-SDR RF landscape surveying tool: sweep, dwell, decode, and generate ssrf-lite candidate evidence

🔗 点击访问项目地址 GitHub - Chicago-Offline/rf-survey: Multi-SDR RF landscape surveying tool: sweep, dwell, decode, and generate ssrf-lite candidate…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SubScope
👤 项目作者: ishasonaria568-prog
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 14:18:00

📝 项目描述:
Professional subdomain enumeration & reconnaissance tool with DNS verification, HTTP/HTTPS probing, SSRF protection, real-time scanning, and security metadata analysis.

🔗 点击访问项目地址 GitHub - ishasonaria568-prog/SubScope: Professional subdomain enumeration & reconnaissance tool with DNS verification, HTTP/HTTPS…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: go-webhook-delivery
👤 项目作者: gabrieldosprazeres
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 13:13:34

📝 项目描述:
Reliable at-least-once webhook delivery engine in Go with PostgreSQL, retries, fencing, HMAC, SSRF defense and observability.

🔗 点击访问项目地址 GitHub - gabrieldosprazeres/go-webhook-delivery: Reliable at-least-once webhook delivery engine in Go with PostgreSQL, retries…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: jack-sparrow
👤 项目作者: Pabl0l
🛠 开发语言: Rust
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 07:37:14

📝 项目描述:
web hacking sharp-tool kit. XSS, SSRF, IDOR...

🔗 点击访问项目地址 GitHub - Pabl0l/jack-sparrow: web hacking sharp-tool kit. XSS, SSRF, IDOR...
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SSRF3r
👤 项目作者: MaestraSoprano
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 08:24:42

📝 项目描述:
无描述

🔗 点击访问项目地址 GitHub - MaestraSoprano/SSRF3r
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE

📦 项目名称: Digital-Forensics-OSINT-CVE-Security-Labs-Hands-On-Cybersecurity-CTF
👤 项目作者: sifatnotes
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 06:09:03

📝 项目描述:
Hands-on cybersecurity and CTF labs covering email forensics, Windows Registry and Shimcache analysis, PST/OST triage, mobile verification, authorized OSINT, partition recovery, SQL injection, SSRF, and CVSS v3.1 assessment.

🔗 点击访问项目地址 GitHub - sifatnotes/Digital-Forensics-OSINT-CVE-Security-Labs-Hands-On-Cybersecurity-CTF: Hands-on cybersecurity and CTF labs covering…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE

📦 项目名称: CVE-Vulnerability-Penetration-Testing-CTF-Labs-Hands-On-Cybersecurity
👤 项目作者: sifatnotes
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 06:14:48

📝 项目描述:
Hands-on cybersecurity CTF labs covering SQL injection, SSRF, XSS, MITM, race conditions, path traversal, authorization bypasses, OS command injection, and authorized network security testing.

🔗 点击访问项目地址 GitHub - sifatnotes/CVE-Vulnerability-Penetration-Testing-CTF-Labs-Hands-On-Cybersecurity: Hands-on cybersecurity CTF labs covering…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ecommerce-price-watcher
👤 项目作者: rahulxcodex
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 20:00:20

📝 项目描述:
E-Commerce Price Tracker (Amazon, Flipkart, Meesho) with SSRF defense, automated price drop alerts, and Next.js 14 App Router

🔗 点击访问项目地址 GitHub - rahulxcodex/ecommerce-price-watcher: E-Commerce Price Tracker (Amazon, Flipkart, Meesho) with SSRF defense, automated…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: dotnet-webhooks
👤 项目作者: ericksonlopezf
🛠 开发语言: C#
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 14:39:28

📝 项目描述:
Production-ready webhook engine for .NET 8/9/10: resilient outbound delivery with Polly v8 & socket-level SSRF mitigation, Redis distributed DLQ & anti-replay defense, and ASP.NET Core inbound verification middleware with Native AOT & OpenTelemetry.

🔗 点击访问项目地址 GitHub - ericksonlopezf/dotnet-webhooks: Production-ready webhook engine for .NET 8/9/10: resilient outbound delivery with Polly…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ts-libs
👤 项目作者: spy4x
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 15:23:18

📝 项目描述:
Framework-agnostic TypeScript libraries for Deno, published to JSR as @spy4x/*: validation, platform primitives, server adapters, net/SSRF guards, email, time, realtime, integrations.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ayron-tools-api
👤 项目作者: ayronjins
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 03:29:27

📝 项目描述:
SSRF-hardened FastAPI service behind the DNS/TLS and site-metadata tools on ayron.in. Pins connections to pre-validated IPs to defeat DNS rebinding.

🔗 点击访问项目地址 GitHub - ayronjins/ayron-tools-api: SSRF-hardened FastAPI service behind the DNS/TLS and site-metadata tools on ayron.in. Pins…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #POC

📦 项目名称: nexus-composer-ssrf-poc
👤 项目作者: meIisource
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-22 16:25:08

📝 项目描述:
Temporary Nexus Composer SSRF PoC upstream

🔗 点击访问项目地址 GitHub - meIisource/nexus-composer-ssrf-poc: Temporary Nexus Composer SSRF PoC upstream
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ai-job-gateway
👤 项目作者: Furkiozknn
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-22 04:53:25

📝 项目描述:
The async job contract fal.ai, Black Forest Labs and RunPod each arrived at independently, as one hardened reference server: submit, poll, webhook. Idempotency keys that survive a restart, SSRF-guarded signed webhooks, and expiry as a status you can read rather than a silent 404. 156 tests.

🔗 点击访问项目地址 GitHub - Furkiozknn/ai-job-gateway: The async job contract fal.ai, Black Forest Labs and RunPod each arrived at independently,…
 
 
Back to Top