GitHub 红队武器库🚨
14.4K subscribers
25 photos
10 videos
28.1K links
​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
Download Telegram
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Jenkins #CVE

📦 项目名称: awarely-scan-plugin
👤 项目作者: awarelyeu
🛠 开发语言: Java
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 21:39:07

📝 项目描述:
Jenkins Pipeline and Freestyle SBOM automation with Awarely Scan: Linux, npm, Python and Java inventory, scoped CVE checks and source synchronization.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: CVE-2026-110025
👤 项目作者: capivara-research
🛠 开发语言: Shell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 22:45:10

📝 项目描述:
CVE-2026-110025: bilingual analysis and safe local PoC for phpwcms unrestricted upload to RCE

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-108924
👤 项目作者: capivara-research
🛠 开发语言: PHP
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 22:39:02

📝 项目描述:
CVE-2026-108924: didactic PoC for Kirby dynamic option authorization bypass

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules #malware

📦 项目名称: grandoreiro-malware-analysis
👤 项目作者: an7imp
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 22:18:45

📝 项目描述:
Static and dynamic analysis of a Grandoreiro loader, including Python decryption scripts, YARA rules, and Snort detection signatures.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules

📦 项目名称: chrome-abe-evasion-analysis
👤 项目作者: edmasceno
🛠 开发语言: YARA
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 23:53:01

📝 项目描述:
Reverse engineering analysis demonstrating a real-world bypass of Google Chrome's App-Bound Encryption (ABE) via native Windows CNG API abuse and LSASS impersonation. Includes sanitized PoC and YARA detection rules.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rule #malware

📦 项目名称: malware-report-sentinel
👤 项目作者: MrLouisWright
🛠 开发语言: JavaScript
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 23:51:54

📝 项目描述:
Static malware triage report generator: hashes, file type, entropy, PE/ELF internals, Office macros and auto-exec, PDF actions, LNK, RTF, archives, scripts and HTML smuggling, IOCs, ATT&CK mapping, a verdict and a YARA starter rule, as Markdown, HTML or JSON. Never executes samples. Zero deps.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #DOM

📦 项目名称: WebShieldAI
👤 项目作者: Tanvir-Chowdhury
🛠 开发语言: Vue
⭐ Star数量: 0 | 🍴 Fork数量: 1
📅 更新时间: 2026-10-13 23:57:35

📝 项目描述:
AI-powered web intrusion detection & auto-defense SaaS: SQLi, XSS, DOM tampering and defacement detection with real-time alerts. Vue + FastAPI + TensorFlow.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Reflected

📦 项目名称: Web-Application-Security
👤 项目作者: utuinnocent-creator
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 23:44:42

📝 项目描述:
A Python-based automated scanner for detecting reflected XSS vulnerabilities in web applications. Designed for Orion Health Systems, it submits test payloads to search endpoints, analyzes HTTP responses for reflection, and reports security risks. Includes error handling for timeouts and invalid URLs to ensure safe, controlled testing.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: CVE-2026-107821
👤 项目作者: pinebudweiser
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 00:52:44

📝 项目描述:
The MariaDB 13.1.0 RCE LAB is a testing environment designed to validate an exploit chain that combines an OOB Read vulnerability in the share->field pointer array with multiple additional vulnerabilities, ultimately achieving arbitrary code execution with mysql privileges.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Reflected

📦 项目名称: Penetration-Testing-using-web_scanner--CodeGrade
👤 项目作者: utuinnocent-creator
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 00:09:18

📝 项目描述:
A Python-based automated Reflected XSS scanner for authorized security assessments. Features dynamic payload submission with URL-encoded variants, robust reflection detection logic to prevent false positives, and detailed reporting. Designed to identify injection vulnerabilities in web applications during penetration testing engagements.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Shellcode #Loader

📦 项目名称: Protect_Loader
👤 项目作者: furax124
🛠 开发语言: Go
⭐ Star数量: 82 | 🍴 Fork数量: 11
📅 更新时间: 2026-10-14 00:42:22

📝 项目描述:
A fucking real shellcode loader with a GUI. Work-in-Progress.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #Exploit #RCE

📦 项目名称: CVE-2026-107821-PoC
👤 项目作者: pinebudweiser
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 01:04:08

📝 项目描述:
The MariaDB 13.1.0 RCE LAB is a testing environment designed to validate an exploit chain that combines an OOB Read vulnerability in the share->field pointer array with multiple additional vulnerabilities, ultimately achieving arbitrary code execution with mysql privileges.

🔗 点击访问项目地址
👍1
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: dark-spot-vulnerability-scanner
👤 项目作者: nealshrimali
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 01:57:08

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Xray #漏洞

📦 项目名称: MikuXrayNet
👤 项目作者: JunXieX
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 02:58:54

📝 项目描述:
MikuMC 自研反矿透 + 带宽优化插件(Paper 26.x)

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Exploit #CVE

📦 项目名称: metasploit-lab-metasploitable2
👤 项目作者: ajekiigbetomiwa2-lgtm
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 02:52:35

📝 项目描述:
HANDS ON PENETRATION TESTING LAB DOCUMENTING RECONNAISSANCE,VULNERABILITY EXPLOITATION..

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #POC #CVE

📦 项目名称: cve-poc-monitor
👤 项目作者: Yftnn14
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:03:36

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules #malware

📦 项目名称: android-shazhudao-rat
👤 项目作者: ArchLinuxAddict
🛠 开发语言: YARA
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 02:52:36

📝 项目描述:
Reverse-engineering report + IOCs + YARA for the 杀猪刀 (Shazhudao) Android RAT delivered as a fake "TikTok Pro" APK via Instagram ads — full analysis, payload decryptor, detection rules and removal runbook

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SSRF-Scanner
👤 项目作者: 0x0bito
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:27:17

📝 项目描述:
SSRF-Scanner

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: sanitext-xss-task
👤 项目作者: Toti-Alignerr
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:55:02

📝 项目描述:
Synthetic Python HTML sanitiser (base commit for an RLHF repository-track task: XSS-safe allowlist sanitising)

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: HtmlSecurityCheck
👤 项目作者: interactivetools-com
🛠 开发语言: PHP
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:54:29

📝 项目描述:
Rejects rich-text HTML that could run script, send the page's data to another host, or mislead the visitor, and never rewrites what it accepts. Element and attribute names, URL schemes and CSS functions must be on allowlists, and CI fails if headless Chrome finds script in any test input the check accepts.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Bypass #UAC

📦 项目名称: Selective-VPN-Bypass
👤 项目作者: WhoSia
🛠 开发语言: PowerShell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 05:00:11

📝 项目描述:
无描述

🔗 点击访问项目地址