Curated security research, vulnerabilities, advisories and tools for practitioners.

#red-team

Security coverage tagged red-team.

1.

Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)

tool | 2026-09-25 00:13 | CVE-2026-93485 | github.com | original ↗ | #bug-bounty | #rce | #zero-day

2.

Linux LPE Toolkit: Multi-Architecture Automated Privilege Escalation Tool

tool | 2026-09-23 20:28 | github.com | original ↗ | #linux | #privilege-escalation | #lpe

3.

AI for Offensive Security: What Works, What Does Not, and How to Adopt It

blog | 2026-09-24 16:00 | specterops.io | original ↗ | #ai-security | #red-team | #offensive-security

4.

Introducing Ghostwriter Skills

blog | 2026-09-22 16:08 | specterops.io | original ↗ | #red-team | #ai-agents | #agent-skills

5.

From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion

blog | 2026-09-18 00:00 | bishopfox.com | original ↗ | #red-team | #obfuscation | #c2

6.

PoC for CVE-2026-67401: cPanel/WHM EmailTrack SQL Injection Leading to Root RCE

tool | 2026-09-17 06:53 | CVE-2026-67401 | github.com | original ↗ | #cloud | #rce | #red-team

7.

Linux Container Escape PoCs for CVE-2026-52910 & CVE-2026-80521

tool | 2026-09-16 21:04 | github.com | original ↗ | #linux | #privilege-escalation | #red-team

8.

Droid ASC: High-Performance On-Demand Android Decompiler Front-End for Mobile Security & AI Agents

tool | 2026-09-15 18:43 | github.com | original ↗ | #ai-security | #open-source | #android

9.

Red Team vs. Pentest vs. Bug Bounty: Building a Complete Web3 Security Program

blog | 2026-09-14 11:00 | certik.com | original ↗ | #bug-bounty | #web3 | #red-team

10.

ShieldCrash: Windows Defender 0-Day PoC Bypassing ShieldBreak (CVE-2026-69414) Patch

vulnerability | High | 2026-09-07 20:36 | CVE-2026-69414 | github.com | original ↗ | #cloud | #zero-day | #arbitrary-file-read

11.

Google ARTEMIS: Natural-Language Driven Android Automation & Mobile AI Agent Framework

tool | 2026-09-12 03:00 | github.com | original ↗ | #ai-security | #automation | #mcp

12.

CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoC

vulnerability | Critical | 2026-09-05 06:23 | CVE-2026-32475 | github.com | original ↗ | #bug-bounty | #rce | #wordpress

13.

ReAgent: Open-Source AI Agent for Autonomous Binary Reverse Engineering and C/C++ Reconstruction

tool | 2026-09-09 20:35 | github.com | original ↗ | #ai-security | #open-source | #red-team

14.

Beyond Tier Zero

blog | 2026-09-10 13:26 | specterops.io | original ↗ | #active-directory | #identity-security | #red-team

15.

FalconFlank: CrowdStrike Falcon Sensor 0-Day Local Privilege Escalation Exploit

vulnerability | High | 2026-09-03 02:48 | github.com | original ↗ | #zero-day | #privilege-escalation | #windows

16.

StrikeAgent AtkBrain-Flash: Autonomous AI Penetration Testing & Red Teaming Platform

tool | 2026-09-07 15:15 | github.com | original ↗ | #ai-security | #pentesting | #claude-code

17.

SpecterOps Skills: Open-Source LLM Agent Skills & MCP Plugin Marketplace for Red Teaming and AppSec

tool | 2026-09-03 19:48 | github.com | original ↗ | #ai-security | #agentic-ai | #claude-code

18.

NetSPI/AD-PathFinder: Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data

tool | 2026-09-02 23:54 | github.com | original ↗ | #pentesting | #open-source | #active-directory

19.

DavidCarliez/trustmebro: Bypass llm guardrails by confusing it with fabricated tool output

tool | 2026-09-02 23:54 | github.com | original ↗ | #ai-security | #open-source | #red-team

20.

How to Run an AI Application Pentesting Vendor RFP: The Evaluation Framework that actually works

blog | 2026-08-31 12:00 | xbow.com | original ↗ | #ai-security | #appsec | #red-team

21.

Ghost-Js-Burp-Extension: Burp Suite Extension to Detect Hardcoded Secrets & Endpoints in JavaScript

tool | 2026-08-31 23:54 | github.com | original ↗ | #bug-bounty | #cloud | #burp-suite

22.

AD Group Risks: Hidden Powers of Account Operators

blog | 2026-08-28 20:00 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #windows-security

23.

Robin: AI-Powered Dark Web OSINT & Threat Intelligence Investigation Tool

tool | 2026-08-25 00:38 | github.com | original ↗ | #ai-security | #open-source | #threat-intelligence

24.

BOFScale: A CDN-Fronted Tailnet from a BOF-PE

blog | 2026-08-19 00:00 | netspi.com | original ↗ | #red-team | #c2 | #cdn

25.

[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence

research | 2026-08-09 15:35 | CVE-2024-6100 | github.com | original ↗ | #ai-security | #rce | #benchmark

26.

CVE-2026-60004: Gitea diffpatch Git Hook Installation Remote Code Execution Exploit PoC

vulnerability | Critical | 2026-07-29 08:45 | CVE-2026-60004 | github.com | original ↗ | #rce | #gitea | #red-team

27.

Guide to Bypassing Hotel Wi-Fi Captive Portals (With Permission)

blog | 2026-08-02 10:54 | projectblack.io | original ↗ | #pentesting | #captive-portal | #network-security

28.

pentestkit: Autonomous Multi-Agent Penetration Testing Framework Powered by LLMs

tool | 2026-07-31 23:26 | github.com | original ↗ | #ai-security | #bug-bounty | #pentesting

29.

Azure VM Command Execution using Third-Party Extensions – Salt Minion

blog | 2026-07-27 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #privilege-escalation

30.

Introducing Internal Network Scanning: see your network the way an attacker inside it would

vulnerability | 2026-07-21 21:48 | projectdiscovery.io | original ↗ | #bug-bounty | #zero-day | #red-team