​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: local-whisper-mcp
👤 项目作者: laurentlemercier
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-27 19:20:16

📝 项目描述:
Service de transcription vocale local - FastAPI REST + MCP Streamable HTTP, Whisper via faster-whisper, avec protection SSRF.

🔗 点击访问项目地址 GitHub - laurentlemercier/local-whisper-mcp: Service de transcription vocale local - FastAPI REST + MCP Streamable HTTP, Whisper…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: AWS-Cloud-Security-Threat-Hunting-Incident-Response
👤 项目作者: aobakwemokgothu94-jpg
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-26 20:52:22

📝 项目描述:
Cloud threat hunting and exploitation simulation on AWS infrastructure. Demonstrated real-world compromise vectors including S3 public access exposure, credential exfiltration via IMDSv1 Server-Side Request Forgery (SSRF), and post-incident forensic log auditing using AWS CloudTrail.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: rf-survey
👤 项目作者: Chicago-Offline
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-26 22:45:57

📝 项目描述:
Multi-SDR RF landscape surveying tool: sweep, dwell, decode, and generate ssrf-lite candidate evidence

🔗 点击访问项目地址 GitHub - Chicago-Offline/rf-survey: Multi-SDR RF landscape surveying tool: sweep, dwell, decode, and generate ssrf-lite candidate…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SubScope
👤 项目作者: ishasonaria568-prog
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 14:18:00

📝 项目描述:
Professional subdomain enumeration & reconnaissance tool with DNS verification, HTTP/HTTPS probing, SSRF protection, real-time scanning, and security metadata analysis.

🔗 点击访问项目地址 GitHub - ishasonaria568-prog/SubScope: Professional subdomain enumeration & reconnaissance tool with DNS verification, HTTP/HTTPS…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: go-webhook-delivery
👤 项目作者: gabrieldosprazeres
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 13:13:34

📝 项目描述:
Reliable at-least-once webhook delivery engine in Go with PostgreSQL, retries, fencing, HMAC, SSRF defense and observability.

🔗 点击访问项目地址 GitHub - gabrieldosprazeres/go-webhook-delivery: Reliable at-least-once webhook delivery engine in Go with PostgreSQL, retries…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: jack-sparrow
👤 项目作者: Pabl0l
🛠 开发语言: Rust
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 07:37:14

📝 项目描述:
web hacking sharp-tool kit. XSS, SSRF, IDOR...

🔗 点击访问项目地址 GitHub - Pabl0l/jack-sparrow: web hacking sharp-tool kit. XSS, SSRF, IDOR...
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SSRF3r
👤 项目作者: MaestraSoprano
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-25 08:24:42

📝 项目描述:
无描述

🔗 点击访问项目地址 GitHub - MaestraSoprano/SSRF3r
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ecommerce-price-watcher
👤 项目作者: rahulxcodex
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 20:00:20

📝 项目描述:
E-Commerce Price Tracker (Amazon, Flipkart, Meesho) with SSRF defense, automated price drop alerts, and Next.js 14 App Router

🔗 点击访问项目地址 GitHub - rahulxcodex/ecommerce-price-watcher: E-Commerce Price Tracker (Amazon, Flipkart, Meesho) with SSRF defense, automated…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: dotnet-webhooks
👤 项目作者: ericksonlopezf
🛠 开发语言: C#
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 14:39:28

📝 项目描述:
Production-ready webhook engine for .NET 8/9/10: resilient outbound delivery with Polly v8 & socket-level SSRF mitigation, Redis distributed DLQ & anti-replay defense, and ASP.NET Core inbound verification middleware with Native AOT & OpenTelemetry.

🔗 点击访问项目地址 GitHub - ericksonlopezf/dotnet-webhooks: Production-ready webhook engine for .NET 8/9/10: resilient outbound delivery with Polly…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ts-libs
👤 项目作者: spy4x
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 15:23:18

📝 项目描述:
Framework-agnostic TypeScript libraries for Deno, published to JSR as @spy4x/*: validation, platform primitives, server adapters, net/SSRF guards, email, time, realtime, integrations.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ayron-tools-api
👤 项目作者: ayronjins
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-23 03:29:27

📝 项目描述:
SSRF-hardened FastAPI service behind the DNS/TLS and site-metadata tools on ayron.in. Pins connections to pre-validated IPs to defeat DNS rebinding.

🔗 点击访问项目地址 GitHub - ayronjins/ayron-tools-api: SSRF-hardened FastAPI service behind the DNS/TLS and site-metadata tools on ayron.in. Pins…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ai-job-gateway
👤 项目作者: Furkiozknn
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-22 04:53:25

📝 项目描述:
The async job contract fal.ai, Black Forest Labs and RunPod each arrived at independently, as one hardened reference server: submit, poll, webhook. Idempotency keys that survive a restart, SSRF-guarded signed webhooks, and expiry as a status you can read rather than a silent 404. 156 tests.

🔗 点击访问项目地址 GitHub - Furkiozknn/ai-job-gateway: The async job contract fal.ai, Black Forest Labs and RunPod each arrived at independently,…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: dsh-web-gateway
👤 项目作者: GooDAnDReaDY
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-21 18:19:36

📝 项目描述:
Resilient web search and page extract tools for DeepSeek Harness with provider fallback and SSRF-safe extract

🔗 点击访问项目地址 GitHub - GooDAnDReaDY/dsh-web-gateway: Resilient web search and page extract tools for DeepSeek Harness with provider fallback…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SSRF-FirewallProxy
👤 项目作者: alinurettin
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-20 12:40:28

📝 项目描述:
Outbound HTTP inspection proxy validating destination IP addresses against RFC 1918, RFC 3927 (link-local), loopback, and cloud metadata IPs (169.254.169.254) with DNS pin-down verification.

🔗 点击访问项目地址 GitHub - alinurettin/SSRF-FirewallProxy: Outbound HTTP inspection proxy validating destination IP addresses against RFC 1918, RFC…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #CVE #metadata

📦 项目名称: sRX87
👤 项目作者: sylhetyhackvenger
🛠 开发语言: Python
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-20 08:04:52

📝 项目描述:
sRX87 is SSL/TLS reconnaissance and exploitation framework. It runs 12 stages: transport recon, cert parsing, cipher enumeration, real crypto oracles, HTTP smuggling, auth bypass, SSRF, cloud metadata, CVE correlation, and 20-format reporting.

🔗 点击访问项目地址 GitHub - sylhetyhackvenger/sRX87: sRX87 is SSL/TLS reconnaissance and exploitation framework. It runs 12 stages: transport recon…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ssrf-guard
👤 项目作者: kulykivska
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-20 02:42:16

📝 项目描述:
Refuse to fetch a URL that points inside your network: the disguises (integer, hex, IPv6-mapped, userinfo), DNS resolution of every address, and a check on every redirect hop. No dependencies.

🔗 点击访问项目地址 GitHub - kulykivska/ssrf-guard: Refuse to fetch a URL that points inside your network: the disguises (integer, hex, IPv6-mapped…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: OutboundUrlGuard
👤 项目作者: nowo-tech
🛠 开发语言: Shell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-18 18:36:40

📝 项目描述:
Symfony bundle that blocks SSRF on outbound http(s) URLs: private networks, cloud metadata, and optional DNS pinning. PHP 8.2+. Symfony 7.4, 8.0, and 8.1.

🔗 点击访问项目地址 GitHub - nowo-tech/OutboundUrlGuard: Symfony bundle that blocks SSRF on outbound http(s) URLs: private networks, cloud metadata…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ComfyUI-ImmichManager
👤 项目作者: oitsukiii
🛠 开发语言: Python
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-17 13:14:27

📝 项目描述:
Upload ComfyUI images/videos to Immich with a built-in preview & management panel. Save nodes embed workflow metadata into PNG/MP4 — download from Immich and drag back to restore workflows. Timeline preview, favorites, trash-safe delete, batch actions, i18n. SSRF-checked, optional Bearer-token panel auth.

🔗 点击访问项目地址 GitHub - oitsukiii/ComfyUI-ImmichManager: Upload ComfyUI images/videos to Immich with a built-in preview & management panel. Save…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: ZeroPhish
👤 项目作者: Sarvadnya07
🛠 开发语言: Python
⭐ Star数量: 2 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-17 09:19:14

📝 项目描述:
ZeroPhish is an AI-powered phishing and threat-forensics platform that combines browser-side heuristics, threat intelligence, ML/ONNX analysis, multimodal Gemini reasoning, URL/email inspection, SSRF protection, Redis acceleration, persistent analytics, RBAC, real-time SSE telemetry, and a Chrome MV3 security extension.

🔗 点击访问项目地址 GitHub - Sarvadnya07/ZeroPhish: ZeroPhish is an AI-powered phishing and threat-forensics platform that combines browser-side heuristics…
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SecureScan
👤 项目作者: NikhilPoswal
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-09-17 07:54:16

📝 项目描述:
"A web-based security auditor that scans any website for missing HTTP security headers, SSL/TLS issues, insecure cookies, server info leaks, and exposed sensitive files — with built-in SSRF protection."

🔗 点击访问项目地址 GitHub - NikhilPoswal/SecureScan:
 
 
Back to Top