Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
AnhedonicX/CVE-2026-0776
Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client. | language: Python
rrve/CVE-2026-0776
Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client. | language: Python
xrct/CVE-2026-0776
Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client. | language: Python
g0thamRabb1t/CVE-2026-46331-pedit-COW-detection
Defensive validation of CVE-2026-46331 / pedit COW with auditd, AppArmor, mitigation comparison and detection logic.
g0thamRabb1t/CVE-2026-48907-Joomla-JCE-detection
Defensive lab validation and SOC detection guidance for CVE-2026-48907 in Joomla JCE <= 2.9.99.4, including Apache/Joomla/auditd telemetry, webshell artifacts, Sigma rules, MITRE ATT&CK mapping and mitigation recommendat...
g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection
Laboratory validation of CVE-2026-48908 in Joomla SP Page Builder, covering unauthorized icon upload, PHP file write, code execution as www-data, auditd and PCAP evidence, event timeline reconstruction, and SOC detection...
nmagill123/CVE-2026-61343-poc-librebooking-rce
Librebooking Admin RCE PoC CVE-2026-61343 | language: Python
yellow-key/yellowkey-bitlocker
yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubles...
codespacey68/yellowkey-bitlocker
yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubles...
gagaltotal/CVE-2026-57517-CWP
Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517 | topics: blind-sql-injection, control-web-panel, cve, cve-scanning, cwp, go, golang, golang-cli, rce, rce-exploit | language: Go | homepage: https...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
xiaomandujia/glowing-octo-funicular
基于ai构建的网络安全小插件，Web渗透测试工具集 — 信息收集/漏洞检测/安全头审计/字典攻击 | language: Python | stars: 0 | forks: 0 | updated 2026-07-08T03:39:21Z | pushed 2026-07-08T03:39:16Z
1neptune/yakit-trae-tutorial
Yakit + Trae AI 自动化渗透测试教程 含MCP集成配置与实战案例 | stars: 0 | forks: 0 | updated 2026-07-08T07:46:24Z | pushed 2026-07-08T07:47:46Z
Exllo-Lv/Security-Learning
渗透测试学习笔记/poc/exp合集 | language: Python | stars: 2 | forks: 0 | updated 2026-09-09T00:06:08Z | pushed 2026-09-09T00:05:55Z
2007-ygp/sqlilabs-waf-bypass
SQLi-Labs WAF绕过实战 - 长亭雷池SafeLine渗透测试与绕过技术研究 | stars: 0 | forks: 0 | updated 2026-07-08T08:41:58Z | pushed 2026-07-08T08:41:26Z
ssr6125/SRC-Hunter
AI 驱动的自动化 SRC / 渗透测试辅助平台：FOFA 资产搜集 + LLM 多 Worker 自主挖掘、审核与情报沉淀。单进程部署，仅供授权测试与研究。 | topics: ai-agent, automation, bug-bounty, fastapi, fofa, llm, penetration-testing, pentest, python, red-team, security, src, vue, vulnerab...
lone-tree-bird/pyvulnlab
基于 Flask + MySQL 的轻量级 Web 渗透测试靶场，内置 6 个常见 Web 漏洞（SQL注入、XSS、越权、信息泄露等），用于网络安全教学和漏洞验证。 | language: Python | stars: 0 | forks: 0 | updated 2026-07-08T12:50:18Z | pushed 2026-07-08T12:49:40Z
txluck/secweb
🛡️ 自动化渗透测试调度平台 — Claude Code 生态. AI 驱动 / 多目标并发 / 动态 skill 加载 / 实时观测 | language: Python | stars: 11 | forks: 3 | updated 2026-07-10T15:26:01Z | pushed 2026-07-08T13:44:17Z
Gavin-crazyCoding/GavinFloat
**GavinFloat** 是一个 Android 悬浮球侧边栏应用，运行在 WindowManager 叠加层中。与 Termux 共享 `com.termux` 用户 ID，可直接操作 Termux 文件系统和发送命令到终端。提供 **35+ 图形化工具弹窗**，覆盖渗透测试、系统管理、文件编辑、网络工具、AI 对话、ADB 控制等场景。 | language: Java | stars: 1 | forks: 0 | updat...
Jialeiv/agent-injection-lab
Prompt injection 攻防实验台 · A reproducible lab for prompt injection in LLM agents (indirect injection, two-pillar defense, relay poisoning) | language: Python | stars: 1 | forks: 0 | updated 2026-07-08T05:04:52Z | pushed 20...
RedArmory/IoT-Botnet
这是一套用于网络攻防技术研究的物联网僵尸网络教学演示程序，由“控制端”和“被控端”组成，主要用于在封闭的虚拟机环境中模拟僵尸网络（Botnet）的工作原理。编写这份代码的目的，不是为了制造破坏，而是为了揭开黑盒。只有理解了攻击者的武器是如何锻造的，我们才能更好地铸造盾牌。 如果你是学生，请利用这份代码学好 TCP/IP；如果你是运维人员，请利用它来测试你的防火墙规则；如果你是开发者，请参考它的并发模型但不要抄袭它的恶意逻辑。 | top...