Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
IlhomjonR/CVE-2026-67598
CVE-2026-67598 — Emlog Pro: disabled TLS certificate validation in AI assistant (MITM → API-key theft). CWE-295, CVSS 9.1. Reported by @IlhomjonR. | language: Python
tc4dy/CVE-2026-58048-PoC-Exploit
👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe Checker (audit/reporting), Weaponized (reverse shell, persistence, UDF RCE...
tfawnies/CVE-2026-64633
captain-woof/CVE-2026-25243
Stable POC for CVE-2026-25243 (Redis RESTORE double-free -> remote code execution) | topics: cve-2026-25243, rce-exploit, redis, redis-server, remote-code-execution | language: Python
v3s9er/CVE-2026-52886
Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)
Microsoft Office SharePoint Spoofing Vulnerability
Application Insights Profiler 特权提升漏洞
Azure Active Directory 权限提升漏洞
Azure Service Bus Remote Code Execution Vulnerability
Azure Logic Apps Information Disclosure Vulnerability
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Revcloudi/Rinte
Rinte是一款专为渗透测试人员设计的 BurpSuite 插件，提供强大的框架自动化安全扫描功能。目前支持1000+POC | stars: 77 | forks: 9 | updated 2026-08-13T17:28:11Z | pushed 2026-08-13T17:27:44Z
1lkla1va1/Atoolkit
面向已授权 SRC / 漏洞赏金 / Web 靶场的 AI 辅助渗透效率工具：威胁建模 + 证明合同 + 报告出口收口，只交付可复验的漏洞（v9.2） | language: Python | stars: 0 | forks: 0 | updated 2026-09-02T02:38:26Z | pushed 2026-09-02T02:38:22Z
Hex-Neo/Annhylde
渗透测试 + 代码审计 + 开发 Agent | stars: 1 | forks: 0 | updated 2026-08-24T12:48:52Z | pushed 2026-08-24T12:46:52Z
xiguayiqiu/exp-labs
基于 Vue 3 + Express + SQLite构建的现代化 Web 安全实训平台，内置 WebTap10（映射 OWASP Top 10 并扩展）、**密码学**、**杂项（CTF）** 与 **《网络安全渗透考试》四大部分，共 72 个实战关卡，每个关卡都是一个可实际攻击的靶标应用。 | topics: dvwa, pikaqiu | language: Vue | stars: 0 | forks: 0 | updated ...
dacj4n/ARC
基于图黑板的自主 AI 渗透测试 Agent | language: Python | stars: 0 | forks: 0 | updated 2026-08-21T01:53:12Z | pushed 2026-08-21T01:52:45Z
Gach0ng/Wormhole
虫洞 Wormhole：面向复杂攻击链的图谱认知渗透智能体 | language: Python | stars: 0 | forks: 0 | updated 2026-08-15T05:49:40Z | pushed 2026-08-15T05:49:36Z
AutoPT-ai/agent-observability-and-aepis
从 Agent 过程观测到 AePis：自动化渗透测试 Agent Harness 的设计与工程实践 | stars: 0 | forks: 0 | updated 2026-08-15T09:29:53Z | pushed 2026-08-15T09:29:45Z
xegeng/dsh-pentest-skills
DSH 渗透测试 skills:信息收集+渗透测试工具链(国内场景适配) | language: Python | stars: 9 | forks: 1 | updated 2026-09-04T06:38:28Z | pushed 2026-09-04T06:38:06Z
Kunspring/DeepKali
Kali Linux 渗透测试 TUI agent —— 45 个 Kali 工具深度定制档案，工具联动流水线 | language: Python | stars: 1 | forks: 0 | updated 2026-08-17T02:54:55Z | pushed 2026-08-17T02:54:50Z
hanc00l/nemo_go
Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。 | language: JavaScript | stars: 2083 | forks: 284 | updated 2026-08-15T12:05:43Z | pushed 2026-08-15T12:05:30Z