Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
MobiusM/CVE-2026-43499
CVE-2026-43499 PoC | language: C
R3n3r0/CVE-2026-20700
language: Python
Cosm3No1de/HTB-Abducted-Writeup
HTB "Abducted" write-up. Exploit CVE-2026-4480 (Samba RCE) → SMB wide links → systemd → root. Full methodology and flags. | language: HTML
sfewer-r7/CVE-2026-0257
Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257 | language: Python
jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431
AF_ALG/splice 기반 Linux Page Cache 변조 취약점 분석 및 대응 실습
0xBlackash/CVE-2026-46242
CVE-2026-46242 | language: C
huynambka/cve-2026-26114-poc
language: Ruby
oscerd/CVE-2026-27172
Reproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE) | topics: apache-camel, cve, proof-of-concept, security, vulnerability | language: Java
caterscam/CVE-2026-5524-PoC
language: Python
krisiasty/vcheck
Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500) | topics: audit, cve, fix, kernel-modules, linux, mitigation, security, security-audit, secur...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
guaidao2/suidexp
玄幕安全团队创始人guaidao2开发的基于GTFOBins的自动化渗透测试提权框架。 | language: Shell | stars: 2 | forks: 0 | updated 2026-07-06T12:43:50Z | pushed 2026-07-04T05:30:56Z
ramariyata/QddwHOKPzB
【Java计算机毕业设计分享】基于Python的后渗透框架设计与实现，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-06T14:53:11Z | pushed 2026-07-06T14:49:40Z
jenn619/frida_Hook_tools_Android
基于 [Frida](https://frida.re/) 的 Android 应用安全分析工具集，运行时自动捕获加密/哈希参数，监控网络请求、WebView、动态加载等行为，并内置 Root/模拟器检测绕过。该项目适合渗透测试人员，遇到加了挺牛b的壳的app绕不过也正常，倘若目标app把类名做了混淆，可以把混淆后的类名与脚本中的类名做替换 | language: JavaScript | stars: 8 | forks: 0 | u...
opsqw/scoop-security
Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。 | topics: cybersecurity, cybersecurity-tools, pentesting, pentesting-tools, scoop, scoop-bucket, security, securi...
Hmx-7488/testing-security
面向后端的一站式安全审计 Skill：从风险分析到 P0 功能测试、一键回归、八维攻防渗透、漏洞报告。不算返回码，只验计算结果对不对。 | stars: 0 | forks: 0 | updated 2026-07-20T09:05:56Z | pushed 2026-07-07T02:59:29Z
ok-helloworld/vibe-pentest
Vibe Pentest（氛围渗透）是一款模拟人类安全专家思维挖掘漏洞的 AI 渗透测试工具，采用多 Agent 并行执行架构，能够对 Web 应用、API、管理后台等进行全面的渗透测试（包括业务逻辑漏洞评估），输出稳定可靠的安全报告，并提供可落地的整改建议。 | topics: ai-pentest, vibe-pentest | language: Python | stars: 316 | forks: 33 | updated ...
zhaoxuya520/reverse-skill
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, ...
cha0upup/LeoAI
AI 驱动的后渗透综合管理平台，深度集成 LLM Agent，开箱即用。 | language: Java | stars: 305 | forks: 32 | updated 2026-09-10T12:29:51Z | pushed 2026-09-08T10:45:03Z
Unclecheng-li/VulnClaw
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。 | topics: ai, ai-agent, ai-tools, ctf, cybersecurity, openclaw, penetration-testing, penetration-testing-tools, security-tools, s...
LvShenlyl/ti-auto-triage-lab
蓝队自动化威胁研判工具 — Blue Team Automated Triage Tool | language: Python | stars: 0 | forks: 1 | updated 2026-06-14T02:55:48Z | pushed 2026-06-13T09:12:07Z