Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
0xsha/wp2shell
CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core | language: Python
0xBlackash/CVE-2026-60206
CVE-2026-60206 | language: Python
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
sorrow404Null/CVE-2026-43499-RMX5200
language: C
Chromium: CVE-2026-16424 Use after free in GPU
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16423 Use after free in UI
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16422 Insufficient validation of untrusted input in Certificate
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16420 Type Confusion in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
MWDLH/pentest-field-operator
给 AI Agent 的渗透测试实战操作系统——基于证据决策，像高级工程师一样思考，而不是机械执行工具清单 | language: Python | stars: 2 | forks: 0 | updated 2026-07-30T08:24:33Z | pushed 2026-07-30T08:22:36Z
WWindy/LARLPT-An-LLM-Augmented-Reinforcement-Learning-Framework-for-Autonomous-Penetration-Testing
面向自动化渗透测试的双层增强学习框架 | stars: 0 | forks: 0 | updated 2026-07-28T10:11:19Z | pushed 2026-07-28T10:11:00Z
LilDean17/hahaha
自动化资产收集平台，以根域驱动子域名发现、指纹识别、目录扫描等多阶段任务链，输出结构化资产知识库支撑渗透测试。 | language: Java | stars: 0 | forks: 0 | updated 2026-08-31T07:38:36Z | pushed 2026-08-31T07:36:15Z
LilDean17/reg-finder
reg-finder 是一款批量URL分析工具，帮助渗透测试与资产盘点人员在数千条网址中快速筛选出具备注册入口的高价值目标，并自动识别其业务类型（电商、后台、门户等），大幅减少人工逐条研判的重复劳动。 | language: Python | stars: 0 | forks: 0 | updated 2026-08-06T09:23:14Z | pushed 2026-08-06T09:21:34Z
iggcloud/kusanagi-wiki
面向授权安全测试的中文网络安全知识库：渗透测试、Tips、Writeups 与 Wiki | topics: chinese, cybersecurity, mkdocs, penetration-testing, security-wiki, writeups | language: Python | stars: 1 | forks: 0 | updated 2026-07-30T23:15:58Z | pushed 2026-07...
LilDean17/js-collector
burp-js-collector 是一个 Burp Suite 扩展项目，通过 Burp Extender API 被动拦截响应中的 .js 资源并按域名归类展示，同时内置一个独立的 Java 静态扫描器 JsScanner，可对 JS 文件内容做正则提取，向前追溯上下文并过滤噪音，最终输出隐藏的 API 端点和路径调用片段，用于渗透测试中的 JS 资源收集与端点发现。 | language: Java | stars: 0 | fo...
MostimarkQ/CSPTOS-Workspace
个人网络安全渗透测试学习空间 My Cyber Security & Penetration Testing Learning Workspace | stars: 0 | forks: 0 | updated 2026-07-28T16:37:53Z | pushed 2026-07-28T16:34:37Z
Night-Master/recon_browser
一个用于爬虫和渗透测试使用的浏览器agent，可以自动去探索目标数据的采集逻辑，或者分析出网站的功能路径和核心数据包，为后续的渗透测试做准备 | language: Python | stars: 0 | forks: 0 | updated 2026-07-28T17:10:19Z | pushed 2026-07-28T17:03:30Z
y1721607494-beep/pentest-ctf-agent-skills-research
渗透测试与 CTF Agent Skills 采集 | stars: 1 | forks: 0 | updated 2026-07-29T00:11:19Z | pushed 2026-07-28T21:11:31Z
渗透测试与 CTF Agent Skills 采集
创建者: y1721607494-beep
渗透测试与 CTF Agent Skills 采集