GitHub 红队武器库🚨
📦 GitHub 全球红队渗透资源中转站。 旨在收录那些“好用却难找”的安全项目。 🔗 定时推送:GitHub Trending (Security) 🛠 必备清单:后渗透、远控、免杀、提权工具集 📅 更新频率:每日精选,绝不灌水。 ⚠️ 本频道仅供安全研究与授权测试使用。
Ko'proq ko'rsatish📈 Telegram kanali GitHub 红队武器库🚨 analitikasi
GitHub 红队武器库🚨 (@githubredteam) Xitoy til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 14 242 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 8 689-o'rinni va Xitoy mintaqasida 14 881-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 14 242 obunachiga ega bo‘ldi.
30 Sentabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 344 ga, so‘nggi 24 soatda esa 9 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0.55% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 0.46% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 79 marta ko‘riladi; birinchi sutkada odatda 66 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 1 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent fork, github, powered, 六合彩, cve-2026 kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送:GitHub Trending (Security)
🛠 必备清单:后渗透、远控、免杀、提权工具集
📅 更新频率:每日精选,绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 01 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
This repository contains a sample Java application vulnerable to command injection and server-side request forgery (SSRF).
🔗 点击访问项目地址Senior-AppSec-style OpenCode skill for auditing and hardening Next.js App Router + React + TypeScript apps — injection, auth, Server Actions, CSRF/SSRF, CSP, and dependency risk. No CAPTCHA, no blind sanitization, no unjustified deps.
🔗 点击访问项目地址A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.
🔗 点击访问项目地址The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery password functionalities.
🔗 点击访问项目地址OSCP/OSCP+/OSAI knowledge base + 6 real Docker exploit labs (Log4Shell, Shellshock, Heartbleed, Fastjson, Commons Collections CC6, Shiro-550)
🔗 点击访问项目地址TGSEC社区 @TGSEC · 擎天柱@Qtzuu 渗透测试工具包 —— 假设驱动的授权红队渗透测试技能框架:15个域 + 状态机攻击链 + 证据账本引擎
🔗 点击访问项目地址Go语言开发的高性能文件下载站,提供文件上传、下载、浏览、审核和管理功能,支持基于角色的用户权限控制。
🔗 点击访问项目地址Kente Retail order-service: Jenkins CI/CD with a gating Trivy scan and blue-green deploys (CI/CD lab, 'No More 2 A.M. Releases')
🔗 点击访问项目地址Python-based web application vulnerability scanner using OWASP ZAP, Nmap, and Flask which detects exposed services, insecure headers, and misconfigurations with severity-classified reports.
🔗 点击访问项目地址银狐(SilverFox)威胁情报 IOC 数据
🔗 点击访问项目地址A yara based MCP Server
🔗 点击访问项目地址