GitHub 红队武器库🚨
15.1K subscribers
25 photos
9 videos
31.2K links
​📦 GitHub 全球红队渗透资源中转站。
​旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
​⚠️ 本频道仅供安全研究与授权测试使用。
Download Telegram
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE #POC

📦 项目名称: oblivion-cve-2024-25600-scanner
👤 项目作者: OblivionDH
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 01:29:09

📝 项目描述:
Scanner and PoC for CVE-2024-25600, the Bricks Builder WordPress unauthenticated RCE. Detect and verify vulnerable sites. Security research by Oblivion.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: metapwn-mass
👤 项目作者: Jenderal92
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 02:47:26

📝 项目描述:
CVE-2026-72898 — Mass exploitation & post-exploitation toolkit for Metabase. Session forgery, SQLi, PostgreSQL RCE via COPY TO PROGRAM, file read/write, webshell drop, and credential harvesting. For authorized pentesting only.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Fscan #内网 #漏洞 #POC

📦 项目名称: fscan--1.4
👤 项目作者: sg-scale
🛠 开发语言: Go
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-11 12:05:24

📝 项目描述:
Mirror of https://github.com/shadow1ng/fscan at 1.4

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: Web-Vulnerability-Scanner---IT-359
👤 项目作者: tylerfbrown9-jpg
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 00:46:49

📝 项目描述:
IT 359- Tools and Techniques in Penetration Testing

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Spring #EXP

📦 项目名称: java-spring-framework-lab
👤 项目作者: vardhan23v
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-10-28 13:02:24

📝 项目描述:
jsf programs explanation and guide

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: CVE-2026-126170
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:56:12

📝 项目描述:
Containerised PoC for CVE-2026-126170 (Fortinet FG-IR-26-219): a JSON injection (CWE-116) in the FortiManager/FortiAnalyzer JRPC API lets an unauthenticated crafted request reach command execution and injects keys into the response document. Differential 7.6.7 vs 7.6.8 plus a 72-case sweep.

🔗 点击访问项目地址
❤1
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #RCE

📦 项目名称: CVE-2026-126148
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:41:36

📝 项目描述:
Containerised PoC for CVE-2026-126148 (Fortinet FG-IR-26-200): an OS command injection (CWE-78) in the FortiMail HA cluster lets one unauthenticated join-request packet reach command execution as root. Differential 8.0.1 vs 8.0.2, plus a 129-case sweep over the HA surfaces.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Fortinet #CVE #RCE #POC

📦 项目名称: CVE-2026-126147
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:22:43

📝 项目描述:
Containerised PoC for CVE-2026-126147 (Fortinet FG-IR-26-199): a path traversal (CWE-22) in the FortiMail management interface API lets an unauthenticated request write outside the restricted directory and reach code execution as root. Differential 8.0.1 vs 8.0.2 plus a payload sweep.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #malware

📦 项目名称: AegisNode
👤 项目作者: bakhishovism
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:50:24

📝 项目描述:
Open-source desktop malware triage, zero-copy PE forensic analyzer, and threat intelligence workbench for Windows

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #YARA #malware

📦 项目名称: Malware-Triage-Synthetic-Windows-Persistence-Detection
👤 项目作者: abhinavkishor9
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:47:15

📝 项目描述:
Static malware-triage lab demonstrating YARA-based detection of simulated Windows persistence-related strings in an inert PowerShell sample, with benign control testing, SHA-256 hashing, and evidence-based analysis.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: Vulnerability_scanner
👤 项目作者: sriharisha2006-hash
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:02:37

📝 项目描述:
"A python based vulnerability scanner designed to identify security weaknesses and potential vulnerabilities in systems."

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: vuls
👤 项目作者: albatrossflavour
🛠 开发语言: Ruby
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 03:48:57

📝 项目描述:
Vuls, the agentless vulnerability scanner, with its scan list built from PuppetDB

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE #POC

📦 项目名称: poc-cve-2026-126187-rsc-usecache-rce
👤 项目作者: TahuCryptsi
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:04:11

📝 项目描述:
PoC: unauth RCE via Next.js use-cache typed-array framing desync (CVE-2026-126187 / GHSA-xqc2-xf4c-x3h3) | docker compose lab

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #Exploit #RCE

📦 项目名称: Paint2Shell
👤 项目作者: zake1god
🛠 开发语言: PowerShell
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:49:51

📝 项目描述:
Safe CVE-2026-83844 lab and Microsoft Paint host assessment

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-119958
👤 项目作者: googlesky
🛠 开发语言: C
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:44:36

📝 项目描述:
Containerised proof of concept for CVE-2026-119958, the Windows LDAP remote code execution vulnerability of the November 2026 Microsoft security update (CWE-787, CVSS 9.8). Differential lab with vulnerable and patched models, a wire-level LDAP proof of concept, and a sanitizer sweep of the patched model.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Docker #EXP

📦 项目名称: microshop
👤 项目作者: hminhtri-cloud
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-02 12:07:44

📝 项目描述:
This is my e-commerce website project, incorporating technologies and components such as Python, Docker, microservices architecture, and security measures; it serves as a significant milestone in my DevSecOps journey.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE

📦 项目名称: lab-cve-pristine
👤 项目作者: elonma-china
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:14:35

📝 项目描述:
10 pristine CVE RCE lab targets (vulhub/official images, no flag, no CTF artifact) - internal security research

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #RCE #CVE

📦 项目名称: apache-httpd-scanner
👤 项目作者: foxcornlab
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 04:17:59

📝 项目描述:
Detection-only triage for Apache HTTP Server 2.4.71 batch: CVE-2026-119618 (mod_http2 RCE, CVSS 9.8), CVE-2026-106023, CVE-2026-109163. Grades httpd versions, catches the distro-backport and mod_h2 traps.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #POC #CVE

📦 项目名称: CVE-2026-119618
👤 项目作者: googlesky
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 05:05:34

📝 项目描述:
Apache httpd mod_http2 (2.4.55-2.4.70) races on the connection allocator when assign_headers() writes the synthesised Content-Length: 0 into the shared stream table, corrupting the child heap. Containerised lab, stdlib HTTP/2 PoC, ASan and TSan evidence, 2.4.71 differential, workaround test, 0day sweep.

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC #Exploit

📦 项目名称: CVE-2026-98260
👤 项目作者: YuKongA
🛠 开发语言: Rust
⭐ Star数量: 58 | 🍴 Fork数量: 16
📅 更新时间: 2026-11-12 05:25:02

📝 项目描述:
无描述

🔗 点击访问项目地址
🚨 GitHub 监控消息提醒

🚨 发现关键词: #Vulnerability Scanner

📦 项目名称: Vulnerability-scanner-mini-project
👤 项目作者: ranjithranjithkumar718-eng
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-12 05:47:21

📝 项目描述:
A Vulnerability Scanner is a cybersecurity tool designed to identify security weaknesses in a computer system, network, or website. It scans for common vulnerabilities, detects potential security risks, and provides reports to help improve system security.

🔗 点击访问项目地址