GitHub 红队武器库🚨

📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。

19 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #XSS #POC #Stored #Reflected

📦 项目名称： Web-Application-Vulnerability-Assessment-OWASP-Top-10-
👤 项目作者： yogeshjadhao0345-cmd
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 19:04:04

📝 项目描述：

Web Application Vulnerability Assessment toolkit targeting OWASP Juice Shop & DVWA. Includes Docker setup, Python PoC scripts for SQL Injection (auth bypass, UNION extraction), Reflected/Stored XSS, and BOLA/IDOR testing, secure remediation code (Node.js, PHP), a testing methodology guide, and a full PDF vulnerability report template.

🔗 点击访问项目地址

GitHub

yogeshjadhao0345-cmd/Web-Application-Vulnerability-Assessment-OWASP-Top-10-

Web Application Vulnerability Assessment toolkit targeting OWASP Juice Shop & DVWA. Includes Docker setup, Python PoC scripts for SQL Injection (auth bypass, UNION extraction), Reflected/St...

21 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #Bypass #Sandbox

📦 项目名称： SecureAssess
👤 项目作者： shaheerali838
🛠 开发语言： JavaScript
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 15:54:45

📝 项目描述：

SecureAssess is a hybrid threat-detection platform securing remote assessments against OS-level AI cheating tools. It combines low-friction browser telemetry (typing cadence, gaze tracking) with a native Tauri/Rust desktop client to bypass browser sandbox limits, detecting stealth AI copilots, VMs, and unauthorized background processes.

🔗 点击访问项目地址

GitHub

shaheerali838/SecureAssess

SecureAssess is a hybrid threat-detection platform securing remote assessments against OS-level AI cheating tools. It combines low-friction browser telemetry (typing cadence, gaze tracking) with a ...

Bypass Sandbox

22 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #Vulnerability Scanner

📦 项目名称： DrLinter
👤 项目作者： Nikchan5
🛠 开发语言： Makefile
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 18:58:27

📝 项目描述：

Cross-platform CLI/TUI Static Application Security Testing (SAST) engine written in pure C99. Fast, lightweight, and zero-dependency code vulnerability scanner for C/C++, GDScript, and Python.

🔗 点击访问项目地址

GitHub

GitHub - Nikchan5/DrLinter: Cross-platform CLI/TUI Static Application Security Testing (SAST) engine written in pure C99. Fast…

Cross-platform CLI/TUI Static Application Security Testing (SAST) engine written in pure C99. Fast, lightweight, and zero-dependency code vulnerability scanner for C/C++, GDScript, and Python. - Ni...

Vulnerability

23 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #POC #Exploit

📦 项目名称： CVE-2026-72898-metabase-sqli
👤 项目作者： d-maggipinto
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 18:37:53

📝 项目描述：
Detector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)

🔗 点击访问项目地址

GitHub

GitHub - d-maggipinto/CVE-2026-72898-metabase-sqli: Detector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated…

Detector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password) - d-maggipinto/CVE-2026-72898-metabase-sqli

CVE POC Exploit

23 minutes ago

🚨 GitHub 监控消息提醒

🚨 发现关键词： #CVE-2026 #Exploit

📦 项目名称： YellowKey-BitLocker-CVE-2026-45585
👤 项目作者： yellowkeycve2026
🛠 开发语言： C++
⭐ Star数量： 1 | 🍴 Fork数量： 0
📅 更新时间： 2026-08-26 18:59:07

📝 项目描述：

YellowKey BitLocker recovery - bitlocker yellowkey, yellowkey bitlocker, CVE-2026-45585, yellowkey github, yellowkey vulnerability, yellowkey CVE, TPM, BitLocker recovery key backup, Windows 10/11, CLI GUI, portable audit tool. Download:🡇

🔗 点击访问项目地址

GitHub

GitHub - yellowkeycve2026/YellowKey-BitLocker-CVE-2026-45585: YellowKey BitLocker recovery - bitlocker yellowkey, yellowkey bitlocker…

YellowKey BitLocker recovery - bitlocker yellowkey, yellowkey bitlocker, CVE-2026-45585, yellowkey github, yellowkey vulnerability, yellowkey CVE, TPM, BitLocker recovery key backup, Windows 10/11,...

CVE Exploit

Before

After