GitHub 红队武器库🚨

📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。

a few seconds ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #DOM

📦 项目名称： es-chromium
👤 项目作者： EyalSec
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-14 15:31:03

📝 项目描述：

es-chromium: a Chromium build that tracks attacker-controlled data through V8 and Blink and reports DOM-XSS as a flow, not a guess. The browser agent behind EyalSec.

🔗 点击访问项目地址

XSS DOM

a few seconds ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #DOM

📦 项目名称： vulnerable-javascript
👤 项目作者： EyalSec
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-14 15:54:19

📝 项目描述：

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only.

🔗 点击访问项目地址

GitHub

GitHub - EyalSec/vulnerable-javascript: Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint…

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only. - EyalSec/vu...

XSS DOM

a few seconds ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： JARVIS-vulnerability-scanner
👤 项目作者： Pexel-sibi
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-14 15:38:54

📝 项目描述：
A lightweight Node.js vulnerability and security configuration scanner.

🔗 点击访问项目地址

GitHub

GitHub - Pexel-sibi/JARVIS-vulnerability-scanner: A lightweight Node.js vulnerability and security configuration scanner.

A lightweight Node.js vulnerability and security configuration scanner. - Pexel-sibi/JARVIS-vulnerability-scanner

Vulnerability

a few seconds ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： Network-Vulnerability-Scanner
👤 项目作者： aloksinha-02
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-14 15:56:04

📝 项目描述：

A Python-based network vulnerability scanner that discovers active devices, scans TCP ports, detects services and banners, performs rule-based risk analysis, and generates security reports.

🔗 点击访问项目地址

GitHub

aloksinha-02/Network-Vulnerability-Scanner

A Python-based network vulnerability scanner that discovers active devices, scans TCP ports, detects services and banners, performs rule-based risk analysis, and generates security reports. - aloks...

Vulnerability

a minute ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #Exploit #CVE

📦 项目名称： CVE-2021-41773-Exploit-Lab
👤 项目作者： SANR01
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-14 15:59:09

📝 项目描述：
CVE-2021-41773 Exploit Lab

🔗 点击访问项目地址

GitHub

SANR01/CVE-2021-41773-Exploit-Lab

Contribute to SANR01/CVE-2021-41773-Exploit-Lab development by creating an account on GitHub.

Exploit CVE

3 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #RCE #Remote Code Execution

📦 项目名称： Remote-Code-Execution-RCE-via-Web-Shell-Upload
👤 项目作者： yagayahani
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-14 15:42:37

📝 项目描述：

A cybersecurity lab demonstration illustrating how an insecure file upload function in a web application can be exploited using **Burp Suite to achieve Remote Code Execution (RCE) and exfiltrate sensitive server files[span_1](start_span)[span_1](end_span).

🔗 点击访问项目地址

GitHub

GitHub - yagayahani/Remote-Code-Execution-RCE-via-Web-Shell-Upload: A cybersecurity lab demonstration illustrating how an insecure…

A cybersecurity lab demonstration illustrating how an insecure file upload function in a web application can be exploited using **Burp Suite to achieve Remote Code Execution (RCE) and exfiltrate se...

RCE Remote

Before

After