GitHub 红队武器库🚨

📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。

29 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #NTLM Relay #AD

📦 项目名称： internal-domain-development-compromise-assessment
👤 项目作者： amnsecurity
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-12 16:00:43

📝 项目描述：

Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT → NTLM Relay → Path Traversal → CVE-2025-8110 → ADCS ESC11 → DCSync | AMN SECURITY

🔗 点击访问项目地址

GitHub

GitHub - amnsecurity/internal-domain-development-compromise-assessment: Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT…

Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT → NTLM Relay → Path Traversal → CVE-2025-8110 → ADCS ESC11 → DCSync | AMN SECURITY - amnsecurity/internal-domain-development-compromise-asse...

NTLM AD

32 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE #POC

📦 项目名称： CVE-2025-24813
👤 项目作者： yuzuki-ayanami
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-12 15:53:58

📝 项目描述：
CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit

🔗 点击访问项目地址

GitHub

GitHub - yuzuki-ayanami/CVE-2025-24813: CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit

CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit - yuzuki-ayanami/CVE-2025-24813

RCE CVE POC

32 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #CVE

📦 项目名称： support-infrastructure-compromise-assessment
👤 项目作者： amnsecurity
🛠 开发语言： Shell
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-12 16:00:45

📝 项目描述：

Penetration test report: OpenSTAManager RCE, NFS misconfiguration, Roundcube email access, OliveTin command injection | Arabic/English | AMN SECURITY

🔗 点击访问项目地址

GitHub

GitHub - amnsecurity/support-infrastructure-compromise-assessment: Penetration test report: OpenSTAManager RCE, NFS misconfiguration…

Penetration test report: OpenSTAManager RCE, NFS misconfiguration, Roundcube email access, OliveTin command injection | Arabic/English | AMN SECURITY - amnsecurity/support-infrastructure-compromise...

RCE CVE

33 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #Shellcode #Execute #EDR #AV

📦 项目名称： powershell-shellcode-case
👤 项目作者： Ivan-qa-rgb
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-12 15:45:48

📝 项目描述：
DFIR case: injected shellcode in powershell.exe.

🔗 点击访问项目地址

GitHub

GitHub - Ivan-qa-rgb/powershell-shellcode-case: DFIR case: injected shellcode in powershell.exe.

DFIR case: injected shellcode in powershell.exe. Contribute to Ivan-qa-rgb/powershell-shellcode-case development by creating an account on GitHub.

Shellcode Execute EDR AV

33 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #BlueTeam #Detection

📦 项目名称： XCLOAK-SECURITY-SUITE
👤 项目作者： The-Abhishek1
🛠 开发语言： C
⭐ Star数量： 4 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-12 15:33:57

📝 项目描述：
Open-source enterprise SOC platform — SIEM · SOAR · EDR · DPI · MDM · NGFW in one stack. Self-host in minutes.

🔗 点击访问项目地址

GitHub

GitHub - The-Abhishek1/XCLOAK-SECURITY-SUITE: XCloak Security Suite is a self-hosted, open-architecture security operations platform…

XCloak Security Suite is a self-hosted, open-architecture security operations platform combining NGFW, SIEM, EDR, and SOAR capabilities into a single unified system. - The-Abhishek1/XCLOAK-SECURITY...

BlueTeam Detection

36 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules

📦 项目名称： ApexPlanet-Cybersecurity-Task5
👤 项目作者： Praveen050-tech
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-07-12 15:34:18

📝 项目描述：

This final ledger shifts focus to proactive defense engineering and threat intelligence mapping. It outlines how to isolate malicious host binary artifacts, calculate immutable SHA-256 file hashes for global threat tracking, and translate actor patterns into action-ready defensive alerts. It features custom, structurally validated YARA rules (.yar)

🔗 点击访问项目地址

GitHub

GitHub - Praveen050-tech/ApexPlanet-Cybersecurity-Task5: This final ledger shifts focus to proactive defense engineering and threat…

This final ledger shifts focus to proactive defense engineering and threat intelligence mapping. It outlines how to isolate malicious host binary artifacts, calculate immutable SHA-256 file hashes ...

YARA rules

Before

After