GitHub 红队武器库🚨
📦 GitHub 全球红队渗透资源中转站。 旨在收录那些“好用却难找”的安全项目。 🔗 定时推送:GitHub Trending (Security) 🛠 必备清单:后渗透、远控、免杀、提权工具集 📅 更新频率:每日精选,绝不灌水。 ⚠️ 本频道仅供安全研究与授权测试使用。
Show more📈 Analytical overview of Telegram channel GitHub 红队武器库🚨
Channel GitHub 红队武器库🚨 (@githubredteam) in the Chinese language segment is an active participant. Currently, the community unites 14 371 subscribers, ranking 8 877 in the Technologies & Applications category and 15 228 in the China region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 14 371 subscribers.
According to the latest data from 14 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 289 over the last 30 days and by 2 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0.52%. Within the first 24 hours after publication, content typically collects 0.47% reactions from the total number of subscribers.
- Post reach: On average, each post receives 75 views. Within the first day, a publication typically gains 68 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 1.
- Thematic interests: Content is focused on key topics such as fork, github, powered, 六合彩, cve-2026.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。”
Thanks to the high frequency of updates (latest data received on 15 October, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
CVE-2026-19478: GitLab GraphQL Vulnerability PoC
🔗 点击访问项目地址Controlled PoC: consumer workflow demonstrating mutable-tag action RCE (authorized self-owned sandbox)
🔗 点击访问项目地址Controlled PoC: composite action for demonstrating mutable-tag supply-chain RCE mechanism (authorized self-owned sandbox)
🔗 点击访问项目地址This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell.
🔗 点击访问项目地址Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet framing, multi-threaded C2 infrastructure setup, & application-layer XOR encrypted payload analysis via Wireshark.
🔗 点击访问项目地址CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc.py).
🔗 点击访问项目地址Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only.
🔗 点击访问项目地址The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated lab using tools like VirusTotal and Windows Defender.
🔗 点击访问项目地址A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Designed for security professionals and ethical hackers.
🔗 点击访问项目地址Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover
🔗 点击访问项目地址a walkthrough of all six levels of flaws.cloud — aws s3, ebs, imds and iam misconfigurations, and how they chain into a full account compromise
🔗 点击访问项目地址