GitHub 红队武器库🚨
14.4K subscribers
25 photos
10 videos
28.1K links
​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
Download Telegram
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules

📦 项目名称: chrome-abe-evasion-analysis
👤 项目作者: edmasceno
🛠 开发语言: YARA
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 23:53:01

📝 项目描述:
Reverse engineering analysis demonstrating a real-world bypass of Google Chrome's App-Bound Encryption (ABE) via native Windows CNG API abuse and LSASS impersonation. Includes sanitized PoC and YARA detection rules.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rule #malware

📦 项目名称: malware-report-sentinel
👤 项目作者: MrLouisWright
🛠 开发语言: JavaScript
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 23:51:54

📝 项目描述:
Static malware triage report generator: hashes, file type, entropy, PE/ELF internals, Office macros and auto-exec, PDF actions, LNK, RTF, archives, scripts and HTML smuggling, IOCs, ATT&CK mapping, a verdict and a YARA starter rule, as Markdown, HTML or JSON. Never executes samples. Zero deps.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #DOM

📦 项目名称: WebShieldAI
👤 项目作者: Tanvir-Chowdhury
🛠 开发语言: Vue
⭐ Star数量: 0 | 🍴 Fork数量: 1
📅 更新时间: 2026-10-13 23:57:35

📝 项目描述:
AI-powered web intrusion detection & auto-defense SaaS: SQLi, XSS, DOM tampering and defacement detection with real-time alerts. Vue + FastAPI + TensorFlow.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Reflected

📦 项目名称: Web-Application-Security
👤 项目作者: utuinnocent-creator
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-13 23:44:42

📝 项目描述:
A Python-based automated scanner for detecting reflected XSS vulnerabilities in web applications. Designed for Orion Health Systems, it submits test payloads to search endpoints, analyzes HTTP responses for reflection, and reports security risks. Includes error handling for timeouts and invalid URLs to ensure safe, controlled testing.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: CVE-2026-107821
👤 项目作者: pinebudweiser
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 00:52:44

📝 项目描述:
The MariaDB 13.1.0 RCE LAB is a testing environment designed to validate an exploit chain that combines an OOB Read vulnerability in the share->field pointer array with multiple additional vulnerabilities, ultimately achieving arbitrary code execution with mysql privileges.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Reflected

📦 项目名称: Penetration-Testing-using-web_scanner--CodeGrade
👤 项目作者: utuinnocent-creator
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 00:09:18

📝 项目描述:
A Python-based automated Reflected XSS scanner for authorized security assessments. Features dynamic payload submission with URL-encoded variants, robust reflection detection logic to prevent false positives, and detailed reporting. Designed to identify injection vulnerabilities in web applications during penetration testing engagements.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Shellcode #Loader

📦 项目名称: Protect_Loader
👤 项目作者: furax124
🛠 开发语言: Go
⭐ Star数量: 82 | 🍴 Fork数量: 11
📅 更新时间: 2026-10-14 00:42:22

📝 项目描述:
A fucking real shellcode loader with a GUI. Work-in-Progress.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #Exploit #RCE

📦 项目名称: CVE-2026-107821-PoC
👤 项目作者: pinebudweiser
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 01:04:08

📝 项目描述:
The MariaDB 13.1.0 RCE LAB is a testing environment designed to validate an exploit chain that combines an OOB Read vulnerability in the share->field pointer array with multiple additional vulnerabilities, ultimately achieving arbitrary code execution with mysql privileges.

🔗 点击访问项目地址
👍1
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: dark-spot-vulnerability-scanner
👤 项目作者: nealshrimali
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 01:57:08

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Xray #漏洞

📦 项目名称: MikuXrayNet
👤 项目作者: JunXieX
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 02:58:54

📝 项目描述:
MikuMC 自研反矿透 + 带宽优化插件(Paper 26.x)

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Exploit #CVE

📦 项目名称: metasploit-lab-metasploitable2
👤 项目作者: ajekiigbetomiwa2-lgtm
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 02:52:35

📝 项目描述:
HANDS ON PENETRATION TESTING LAB DOCUMENTING RECONNAISSANCE,VULNERABILITY EXPLOITATION..

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #POC #CVE

📦 项目名称: cve-poc-monitor
👤 项目作者: Yftnn14
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:03:36

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #rules #malware

📦 项目名称: android-shazhudao-rat
👤 项目作者: ArchLinuxAddict
🛠 开发语言: YARA
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 02:52:36

📝 项目描述:
Reverse-engineering report + IOCs + YARA for the 杀猪刀 (Shazhudao) Android RAT delivered as a fake "TikTok Pro" APK via Instagram ads — full analysis, payload decryptor, detection rules and removal runbook

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #SSRF #metadata

📦 项目名称: SSRF-Scanner
👤 项目作者: 0x0bito
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:27:17

📝 项目描述:
SSRF-Scanner

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: sanitext-xss-task
👤 项目作者: Toti-Alignerr
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:55:02

📝 项目描述:
Synthetic Python HTML sanitiser (base commit for an RLHF repository-track task: XSS-safe allowlist sanitising)

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: HtmlSecurityCheck
👤 项目作者: interactivetools-com
🛠 开发语言: PHP
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 03:54:29

📝 项目描述:
Rejects rich-text HTML that could run script, send the page's data to another host, or mislead the visitor, and never rewrites what it accepts. Element and attribute names, URL schemes and CSS functions must be on allowlists, and CI fails if headless Chrome finds script in any test input the check accepts.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Bypass #UAC

📦 项目名称: Selective-VPN-Bypass
👤 项目作者: WhoSia
🛠 开发语言: PowerShell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 05:00:11

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #漏洞 #扫描

📦 项目名称: fastjson_scan
👤 项目作者: fisssh
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 04:32:52

📝 项目描述:
fastjson漏洞扫描器

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Exploit #CVE

📦 项目名称: ctf-challenges
👤 项目作者: mrhenrike
🛠 开发语言: Shell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 05:00:20

📝 项目描述:
Personal CTF & VulnHub writeup repository by André Henrike (@mrhenrike). Step-by-step walkthroughs, exploit scripts (Bash, Python, C, Ruby), MITRE ATT&CK mappings, CVE references, APT group correlations and security framework alignment (NIST CSF 2.0, NIST SP 800-53, CISA KEV, C2M2, D3FEND). 700+ VMs planned. EN-US and PT-BR versions.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #C2 #Framework

📦 项目名称: vanguard
👤 项目作者: pallab-js
🛠 开发语言: Rust
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 05:01:45

📝 项目描述:
A modern, distributed C2 (Command & Control) framework written in Rust and SvelteKit. It is designed for red teamers and security researchers, featuring a stealthy no-std agent, a high-performance teamserver with SQLite persistence, and a real-time dashboard.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: Stored-XSS-Attack-Defense-Simulation-Python-Flask-Docker-
👤 项目作者: DanielIVirlan
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-14 05:01:00

📝 项目描述:
A practical cybersecurity laboratory project demonstrating the end-to-end lifecycle of a **Stored Cross-Site Scripting (XSS)** vulnerability, session hijacking, and multi-layered defense strategies.

🔗 点击访问项目地址