GitHub 红队武器库🚨
15.1K subscribers
25 photos
9 videos
31.3K links
​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
Download Telegram
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Jenkins #CVE

📦 项目名称: SentinelGate-Serverless-DevSecOps-Pipeline-Telemetry-Observatory
👤 项目作者: BhaveshBharadwaj
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 00:39:46

📝 项目描述:
Serverless DevSecOps pipeline & live CVE telemetry observatory. Automates GitLeaks, SAST, tfsec Terraform CIS audits, and multi-stage non-root Docker scans via GitHub Actions & Jenkins, featuring a client-side Trivy v2 JSON parser.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: php2shell-619-poc
👤 项目作者: LuckyFishOno
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 01:47:04

📝 项目描述:
CVE-2026-109619 — PHP Session Upload Progress → RCE PoC

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #漏洞 #Nuclei

📦 项目名称: argus
👤 项目作者: TokEat
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 01:48:25

📝 项目描述:
分布式攻击面管理与漏洞巡航平台 | Distributed ASM with gRPC agents, Nuclei v3 + GoPoc, and AI Copilot

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #XSS #Stored

📦 项目名称: tienda-qa-automation
👤 项目作者: matii1942
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 01:16:50

📝 项目描述:
BDD test automation suite for an e-commerce store: Java, Cucumber, Selenium and Rest Assured. 49 API and UI scenarios run in CI against the real app in Docker, and 11 more reproduce 10 bugs I found (auth bypass, stored XSS).

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: VulnLite
👤 项目作者: Ryukensaki
🛠 开发语言: C#
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-11 11:47:44

📝 项目描述:
Lightweight Windows web vulnerability scanner — 13 read-only checks, optional intrusive tests, CVSS 3.1 scoring, TXT/HTML/CSV reports. For authorized testing only.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE #POC

📦 项目名称: oblivion-cve-2024-25600-scanner
👤 项目作者: OblivionDH
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 01:29:09

📝 项目描述:
Scanner and PoC for CVE-2024-25600, the Bricks Builder WordPress unauthenticated RCE. Detect and verify vulnerable sites. Security research by Oblivion.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: metapwn-mass
👤 项目作者: Jenderal92
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 02:47:26

📝 项目描述:
CVE-2026-72898 — Mass exploitation & post-exploitation toolkit for Metabase. Session forgery, SQLi, PostgreSQL RCE via COPY TO PROGRAM, file read/write, webshell drop, and credential harvesting. For authorized pentesting only.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Fscan #内网 #漏洞 #POC

📦 项目名称: fscan--1.4
👤 项目作者: sg-scale
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-11 12:05:24

📝 项目描述:
Mirror of https://github.com/shadow1ng/fscan at 1.4

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: Web-Vulnerability-Scanner---IT-359
👤 项目作者: tylerfbrown9-jpg
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 00:46:49

📝 项目描述:
IT 359- Tools and Techniques in Penetration Testing

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Spring #EXP

📦 项目名称: java-spring-framework-lab
👤 项目作者: vardhan23v
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-28 13:02:24

📝 项目描述:
jsf programs explanation and guide

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: CVE-2026-126170
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:56:12

📝 项目描述:
Containerised PoC for CVE-2026-126170 (Fortinet FG-IR-26-219): a JSON injection (CWE-116) in the FortiManager/FortiAnalyzer JRPC API lets an unauthenticated crafted request reach command execution and injects keys into the response document. Differential 7.6.7 vs 7.6.8 plus a 72-case sweep.

🔗 点击访问项目地址
❤1
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: CVE-2026-126148
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:41:36

📝 项目描述:
Containerised PoC for CVE-2026-126148 (Fortinet FG-IR-26-200): an OS command injection (CWE-78) in the FortiMail HA cluster lets one unauthenticated join-request packet reach command execution as root. Differential 8.0.1 vs 8.0.2, plus a 129-case sweep over the HA surfaces.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Fortinet #CVE #RCE #POC

📦 项目名称: CVE-2026-126147
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:22:43

📝 项目描述:
Containerised PoC for CVE-2026-126147 (Fortinet FG-IR-26-199): a path traversal (CWE-22) in the FortiMail management interface API lets an unauthenticated request write outside the restricted directory and reach code execution as root. Differential 8.0.1 vs 8.0.2 plus a payload sweep.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #malware

📦 项目名称: AegisNode
👤 项目作者: bakhishovism
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:50:24

📝 项目描述:
Open-source desktop malware triage, zero-copy PE forensic analyzer, and threat intelligence workbench for Windows

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #malware

📦 项目名称: Malware-Triage-Synthetic-Windows-Persistence-Detection
👤 项目作者: abhinavkishor9
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:47:15

📝 项目描述:
Static malware-triage lab demonstrating YARA-based detection of simulated Windows persistence-related strings in an inert PowerShell sample, with benign control testing, SHA-256 hashing, and evidence-based analysis.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: Vulnerability_scanner
👤 项目作者: sriharisha2006-hash
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:02:37

📝 项目描述:
"A python based vulnerability scanner designed to identify security weaknesses and potential vulnerabilities in systems."

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: vuls
👤 项目作者: albatrossflavour
🛠 开发语言: Ruby
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:48:57

📝 项目描述:
Vuls, the agentless vulnerability scanner, with its scan list built from PuppetDB

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE #POC

📦 项目名称: poc-cve-2026-126187-rsc-usecache-rce
👤 项目作者: TahuCryptsi
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:04:11

📝 项目描述:
PoC: unauth RCE via Next.js use-cache typed-array framing desync (CVE-2026-126187 / GHSA-xqc2-xf4c-x3h3) | docker compose lab

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: Paint2Shell
👤 项目作者: zake1god
🛠 开发语言: PowerShell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:49:51

📝 项目描述:
Safe CVE-2026-83844 lab and Microsoft Paint host assessment

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-119958
👤 项目作者: googlesky
🛠 开发语言: C
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:44:36

📝 项目描述:
Containerised proof of concept for CVE-2026-119958, the Windows LDAP remote code execution vulnerability of the November 2026 Microsoft security update (CWE-787, CVSS 9.8). Differential lab with vulnerable and patched models, a wire-level LDAP proof of concept, and a sanitizer sweep of the patched model.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Docker #EXP

📦 项目名称: microshop
👤 项目作者: hminhtri-cloud
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-02 12:07:44

📝 项目描述:
This is my e-commerce website project, incorporating technologies and components such as Python, Docker, microservices architecture, and security measures; it serves as a significant milestone in my DevSecOps journey.

🔗 点击访问项目地址