GitHub监控消息提醒！！！

更新了：RCE
描述：FortiWeb Unauthenticated RCE via Path Traversal & CGI Auth Bypass
URL：https://github.com/D3crypT0r/CVE-2025-64446

标签：#RCE

GitHub

GitHub - D3crypT0r/CVE-2025-64446: FortiWeb Unauthenticated RCE via Path Traversal & CGI Auth Bypass

FortiWeb Unauthenticated RCE via Path Traversal & CGI Auth Bypass - D3crypT0r/CVE-2025-64446

GitHub监控消息提醒！！！

更新了：内网渗透
描述：GYscan是一款基于Go语言开发的现代化内网横向渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。
URL：https://github.com/Puremilk-SYC/PuremilkJS

标签：#内网渗透

GitHub

GitHub - Puremilk-SYC/PuremilkJS: PuremilkJS是一款专业的 Burp Suite 扩展插件，专注于 JavaScript 文件的深度安全分析和 API 端点提取。该工具集成了 75+ 条企业级检测规则，能够自动发现…

PuremilkJS是一款专业的 Burp Suite 扩展插件，专注于 JavaScript 文件的深度安全分析和 API 端点提取。该工具集成了 75+ 条企业级检测规则，能够自动发现 JS 文件中的敏感信息泄露、API 端点和安全漏洞。工具支持检测多种敏感信息，包括 RSA 私钥、AWS 密钥、阿里云 OSS、JWT Token、硬编码密码、Session ID、内网 IP 等，还能识...

GitHub监控消息提醒！！！

更新了：RCE
描述：merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE, RCE, XSS, Path Traversal, NTLM Leak, LFI, and other vulnerabilities in all common file formats
URL：https://github.com/karthickkumar3011/DVWA-Penetration-Testing-Report

标签：#RCE

GitHub

GitHub - karthickkumar3011/DVWA-Penetration-Testing-Report: This repository contains my DVWA Penetration Testing Report (Medium…

This repository contains my DVWA Penetration Testing Report (Medium Security Level). It includes exploitation of Brute Force, SQL Injection, Command Injection, File Upload RCE, Reflected XSS, and S...

GitHub监控消息提醒！！！

更新了：RCE
描述：CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing
URL：https://github.com/netw0rk7/CVE-2015-3306-Home-Lab

标签：#RCE

GitHub

GitHub - netw0rk7/CVE-2015-3306-Home-Lab: CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or…

CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing - netw0rk7/CVE-2015-3306-Home-Lab

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A scanner for the FortiNet vulnerability CVE-2025-64446
URL：https://github.com/sensepost/CVE-2025-64446

标签：#CVE-2025

GitHub

GitHub - sensepost/CVE-2025-64446: A scanner for the FortiNet vulnerability CVE-2025-64446

A scanner for the FortiNet vulnerability CVE-2025-64446 - sensepost/CVE-2025-64446

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-12762
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-12762

标签：#CVE-2025

GitHub

GitHub - Ashwesker/Blackash-CVE-2025-12762: CVE-2025-12762

CVE-2025-12762. Contribute to Ashwesker/Blackash-CVE-2025-12762 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：RCE
描述：merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE, RCE, XSS, Path Traversal, NTLM Leak, LFI, and other vulnerabilities in all common file formats
URL：https://github.com/niranc/UploadRenderAllTheThings

标签：#RCE

GitHub

GitHub - niranc/UploadRenderAllTheThings: merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE,…

merge malicious pdf xlsx docs svg etc Generates all possible payloads for SSRF, XXE, RCE, XSS, Path Traversal, NTLM Leak, LFI, and other vulnerabilities in all common file formats - niranc/UploadRe...

GitHub监控消息提醒！！！

更新了：红队
描述：适用于红队攻防演练获得目标账户批量登录，报告编写
URL：https://github.com/ChinaRan0/Attack_login

标签：#红队

GitHub

GitHub - ChinaRan0/Attack_login: 适用于红队攻防演练获得目标账户批量登录，报告编写

适用于红队攻防演练获得目标账户批量登录，报告编写. Contribute to ChinaRan0/Attack_login development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：webshell
描述：webshell-env
URL：https://github.com/songlaa/webshell-env

标签：#webshell

GitHub

GitHub - songlaa/webshell-env: webshell-env

webshell-env. Contribute to songlaa/webshell-env development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-36250
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-36250

标签：#CVE-2025

GitHub

GitHub - Ashwesker/Blackash-CVE-2025-36250: CVE-2025-36250

CVE-2025-36250. Contribute to Ashwesker/Blackash-CVE-2025-36250 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：免杀
描述：ModifyNeo-reGeorg 是一款基于 Neo-reGeorg 深度重构的高性能正向代理工具，采用 HTTP 隧道实现流量封装，天然具备强伪装与免杀优势，一键生成php、jsp、asp等8种模板文件。目前测试可过火绒、360、defender、天擎、绿盟EDR。
URL：https://github.com/6yx1n0930-art/ModifyNeo-reGeorg-V1.0

标签：#免杀

GitHub

GitHub - 6yx1n0930-art/ModifyNeo-reGeorg-V1.0: ModifyNeo-reGeorg 是一款基于 Neo-reGeorg 深度重构的高性能正向代理工具，采用 HTTP 隧道实现流量封装，天然具备强伪装与免杀优…

ModifyNeo-reGeorg 是一款基于 Neo-reGeorg 深度重构的高性能正向代理工具，采用 HTTP 隧道实现流量封装，天然具备强伪装与免杀优势，一键生成php、jsp、asp等8种模板文件。目前测试可过火绒、360、defender、天擎、绿盟EDR。 - 6yx1n0930-art/ModifyNeo-reGeorg-V1.0

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read /secret.txt.
URL：https://github.com/demining/Scalar-Venom-Attack

标签：#CVE-2025

GitHub

GitHub - demining/Scalar-Venom-Attack: Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables…

Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables private Bitcoin wallet key recovery through buffer overflow exploitation and shell metacharacters in the F5...

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read /secret.txt.
URL：https://github.com/ankitpandey383/roundcube-cve-2025-49113-lab

标签：#CVE-2025

GitHub

GitHub - ankitpandey383/roundcube-cve-2025-49113-lab: Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated…

Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read /secret.txt. - ankitpandey383/roundcube-cve-2025-49113-lab

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.
URL：https://github.com/sarabpal-dev/cheese-cake

标签：#CVE-2025

GitHub

GitHub - sarabpal-dev/cheese-cake: A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.

A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique. - sarabpal-dev/cheese-cake

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-10720 PoC
URL：https://github.com/lorenzocamilli/CVE-2025-62950-PoC

标签：#CVE-2025

GitHub

GitHub - lorenzocamilli/CVE-2025-62950-PoC: CVE-2025-10720 PoC

CVE-2025-10720 PoC . Contribute to lorenzocamilli/CVE-2025-62950-PoC development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-64484
URL：https://github.com/B1ack4sh/Blackash-CVE-2025-64484

标签：#CVE-2025

GitHub

GitHub - Ashwesker/Blackash-CVE-2025-64484: CVE-2025-64484

CVE-2025-64484. Contribute to Ashwesker/Blackash-CVE-2025-64484 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：placeholder for CitrixBleed 2.0 CVE-2025-5777
URL：https://github.com/mr-r3b00t/CVE-2025-5777

标签：#CVE-2025

GitHub

GitHub - mr-r3b00t/CVE-2025-5777: placeholder for CitrixBleed 2.0 CVE-2025-5777

placeholder for CitrixBleed 2.0 CVE-2025-5777. Contribute to mr-r3b00t/CVE-2025-5777 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317
URL：https://github.com/M507/CVE-2025-59287-PoC

标签：#CVE-2025

GitHub

GitHub - M507/CVE-2025-59287-PoC: Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 &…

Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317 - M507/CVE-2025-59287-PoC

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：maybe a poc for CVE-2025-40019
URL：https://github.com/guard-wait/CVE-2025-40019_POC

标签：#CVE-2025

GitHub

GitHub - guard-wait/CVE-2025-40019_POC: maybe a poc for CVE-2025-40019

maybe a poc for CVE-2025-40019. Contribute to guard-wait/CVE-2025-40019_POC development by creating an account on GitHub.