Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Het-Kalariya/CVE-2026-20253
language: JavaScript
CybersecSpirit/CVE-2026-63030
language: Shell
kulichr/wp2shell
Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 ("wp2shell"), a pre-authentication RCE chain in WordPress core. | topics: wordpress, wordpress-vulnerability, wordpress-vulnerability-scanner, wp2shell | language...
Hunt-Benito/zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri
language: C
PeronGH/badepoll-selinux-disabler
Use CVE-2026-43074 to disable SELinux on Android (Linux 6.6/6.12) | language: C
416rehman/asus-bsitf-0-day-poc
PoC for CVE-2026-13585 | topics: cve, poc, vulnerability | language: Rust | homepage: https://www.cve.org/CVERecord?id=CVE-2026-13585
oguz-kagan-akar/CVE-2026-41940-analysis
Technical analysis of the cPanel/WHM auth bypass
akash-osmsec/CVE-2026-44262
language: Blade
manoelprovider20-lgtm/merge-authz-test
authz test (CVE-2026-1999 siblings)
zeroc00I/CVE-2026-63030
That wasnt tested on a vulnerable target yet
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
Losirgithub/dl-llm-learning
深度学习与大模型安全学习笔记:从数学基础到 LLM 对齐与红队 | language: Python | stars: 0 | forks: 0 | updated 2026-07-23T14:18:03Z | pushed 2026-07-23T14:16:07Z
markcraddockxmzqntb-lgtm/deal-room-negotiator
特朗普谈判:强势交易红队,用真实筹码、条件交换和成交落纸审计谈判会议。 | language: Python | stars: 0 | forks: 0 | updated 2026-07-24T09:22:06Z | pushed 2026-07-24T09:21:34Z
icecliffs/marbleproxy
红队多协议跳板代理管理平台,支持 HTTP/SOCKS5 代理链、10 种策略调度、域名/IP/进程规则分流、健康检查自动故障转移、TUN 全局模式、REST API + WebSocket 自动化 | language: Go | stars: 4 | forks: 0 | updated 2026-08-09T03:48:42Z | pushed 2026-07-20T04:20:39Z
wangzifan396-wzf/ai-safety-viz-lab
AI 安全与对抗可视化实验室 — 对抗样本/红队/越狱/偏见/水印/护栏等 8 个交互式模块 | topics: adversarial, ai-safety, artificial-intelligence, css, data-viz, deep-learning, education, guardrails, html, interactive, jailbreak, javascript, machine-learning, r...
lingbol088-spec/5.6-JAILBREAK-NERV
NERV-BREAK-5.6 — GPT-5.6 破甲框架。三层纵深防御:上下文重构让拒绝无法触发,23条篡改规则实时消除拒绝保持对话不中断,文件路由绕过云端审核。31个MCP安全工具 + 28个技能模块 + Kali四后端集成。Codex CLI 即装即用。 | stars: 23 | forks: 4 | updated 2026-07-25T23:43:01Z | pushed 2026-07-25T23:24:10Z
cream-sec/DBJ
大宝剑-边界资产梳理工具(红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配) | stars: 0 | forks: 0 | updated 2022-03-05T09:27:54Z | pushed 2021-10-28T15:41:03Z | homepage: https://dbj.vercel.app/
xheishou-com/Termux-X-wiki
Termux-X 终端 - 移动端终极渗透测试平台使用知识库 | stars: 11 | forks: 11 | updated 2026-08-15T19:38:12Z | pushed 2026-08-15T19:37:48Z
pioneerkg525/pentest-report-generator
自动化渗透测试报告生成工具 | 支持 Nmap/Burp Suite/Nikto/Nessus/sqlmap 多源扫描结果解析,自动生成中文渗透测试报告(Markdown + Word) | stars: 1 | forks: 0 | updated 2026-07-18T09:33:39Z | pushed 2026-07-18T09:33:17Z
YanQuan-dozzy/AutoPentest-AI
正在开发的Linux ai自动渗透框架 | language: Python | stars: 0 | forks: 0 | updated 2026-07-19T02:50:35Z | pushed 2026-07-19T02:50:31Z
AUDGO/bachangjr
模拟练习渗透测试靶场(简单版) | language: PHP | stars: 2 | forks: 0 | updated 2026-09-06T10:36:38Z | pushed 2026-09-06T10:36:34Z