Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
George0Papasotiriou/CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity
language: Python
George0Papasotiriou/CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation
language: Python
George0Papasotiriou/CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server
language: Rust
George0Papasotiriou/CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP
language: Python
George0Papasotiriou/CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection
language: Python
George0Papasotiriou/CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy
language: Solidity
George0Papasotiriou/CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow
language: C
George0Papasotiriou/CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata
language: Python
George0Papasotiriou/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection
language: Python
George0Papasotiriou/CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
eixvusm/zgocloud-dual-isp-vps
ZgoCloud Dual ISP VPS: Clean Dual-ISP IPs From $58/yr, 9929+CMIN2 China-Optimized Routing | stars: 1 | forks: 0 | updated 2026-08-11T08:41:02Z | pushed 2026-08-11T08:40:27Z
MattTride/BlueWarden
一个日志驱动的蓝队排查/取证小工具——解析常见日志（SSH auth.log、Nginx/Apache access log），识别攻击模式（暴力破解、SQL 注入/XSS/目录遍历探测、扫描行为爆发），按 MITRE ATT&CK 技术编号打标签，输出控制台报告和 JSON 报告。 | topics: blue-team, incident-response, log-analysis, mitre-attack, python, s...
FunnyArenaPixel/BedWars-Silverfish
BedWars 蠹虫模式 — Nukkit-MOT 起床战争玩法分支（蠹虫攻防/雪傀儡/防御塔/TNT/鱼王争霸赛） | language: Kotlin | stars: 0 | forks: 0 | updated 2026-08-08T16:11:17Z | pushed 2026-08-08T16:11:03Z
masonzeng702550/ais3-aiad-public
AIAD — 以 Attack & Defense CTF 賽制量化 LLM 資安能力的評量平台。六模型同 scaffold 攻防，含 48 場完整賽事數據與分析。 | language: Python | stars: 0 | forks: 0 | updated 2026-08-08T16:20:37Z | pushed 2026-08-08T16:20:30Z
wukongmazi/reverse-puncture-machine
一个专治运营人「PRD 写得挺顺，上线才发现是坑」的背锅体质。粘贴规则文本，一键生成结构化排雷报告。羊毛党红点预警：像羊毛党一样思考，把可被机器刷量、用户套利的漏洞逐条揪出来，按风险等级排序。用户歧义大赏：以「小白视角」重写规则并与原版逐条对比，高亮那些注定被误解的措辞。客诉预演：提前模拟评论区最犀利的三条吐槽，并附上应对话术。角色扮演扫描：AI 分饰「最坏的用户」与「最杠的客服」，从攻防两端输出完整排雷报告。所有风险按严重/中等/轻微...
lee-miya/kbs
授权红队与代码审计专业知识库：双库分册、跨 Agent Skills 作战层、周一情报与自学路径 | topics: agent-skills, code-audit, cybersecurity, knowledge-base, markdown, penetration-testing, pentest, red-team, security, vulnerability | language: PowerShell | stars...
zar130530/Web-Application-Security-Agent
2026实训：Web应用安全攻防智能体设计方案（源码与设计方案文档） | language: Python | stars: 0 | forks: 0 | updated 2026-08-10T11:30:54Z | pushed 2026-08-10T11:30:41Z
brentwu2000/PoliticalLab
政治立場攻防實驗 | language: TypeScript | stars: 0 | forks: 0 | updated 2026-08-12T06:20:49Z | pushed 2026-08-12T06:20:43Z
allenlee564/SMB
資安攻防平台藍隊 | language: Shell | stars: 0 | forks: 0 | updated 2026-08-14T08:35:29Z | pushed 2026-08-18T05:54:41Z
Graylee0128/cyber
Gamified Red-Blue-Purple 攻防訓練平台 — Purple Platform P1: Telemetry & Detection Pipeline | language: Python | stars: 0 | forks: 0 | updated 2026-08-17T07:12:42Z | pushed 2026-08-17T07:11:42Z