Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
sgkdev/packet_edit_meme
PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare | language: C
thecodeb0ss/CVE-2026-25555
OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header...
J4ck3LSyN-Gen2/CVE-2026-39047
Epson Printer RAW Protocol Exploit Framework | language: Python
Dx3iZ/CVE-2026-0920
Creating a Wordpress Admin User | language: Python
shinthink/CVE-2026-48939
Pre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0) | topics: cve-2026-48939, exploit, file-upload, icagenda, joomla, pentesting, python, rce, security-tools | language: Python
shinthink/CVE-2026-27966
Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8) | topics: ai-security, cve-2026-27966, exploit, langflow, pentesting, prompt-injection, python, rce, route-inject...
shinthink/CVE-2026-9290
Pre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5) | topics: cve-2026-9290, exploit, lfi, path-traversal, pentesting, python, rce, security-tools, wordpress, wp-user...
shinthink/CVE-2026-8713
Pre-auth path traversal to arbitrary file delete in Avada (Fusion) Builder <= 3.15.3 leading to RCE (CVSS 9.1) | topics: avada, cve-2026-8713, exploit, file-delete, fusion-builder, path-traversal, pentesting, python, rce...
tgies/copy-fail-c
Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint. | topics: af-alg, copy-fail, cve-2026-31431, exploit, kernel-exploit, linux-kernel, local-privilege-escalation, no...
Vikramaditya015/samsung-android-lpe
Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982 | language: Python
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
nexorin9/qc-rule-red-team
基于 Z3 约束求解器的医疗质控规则红队工具,自动生成边界病例测试规则覆盖度,输出漏洞报告与可视化图表,支持多格式规则导入。 | language: Python | stars: 0 | forks: 0 | updated 2026-05-23T15:42:29Z | pushed 2026-05-23T15:42:13Z
0x7556/hackvideo
Hack视频教程:红队渗透测试、金刚狼WolfShell、工具使用教程 | stars: 0 | forks: 0 | updated 2026-05-24T09:00:16Z | pushed 2026-05-24T09:00:12Z
dreamaeiou/BlackRelay
BlackRelay 是一个面向红队场景的 AI API 中转与审计工具。它位于 AI 客户端与上游模型 API 之间,负责转发请求、记录 Prompt 和工具行为、按规则扫描敏感信息,并在 Claude 风格的流式响应中注入额外工具调用。 | language: Go | stars: 1 | forks: 0 | updated 2026-05-30T11:18:25Z | pushed 2026-05-30T11:17:29Z
ctfd3219/StarS
StarS 一站式企业信息测绘与供应链风险探测工具,深度优化红队攻防作业链路,自动化替代人工重复工作,极速排查各类安全漏洞。 | topics: config, github-config | language: Go | stars: 1 | forks: 0 | updated 2026-05-31T05:45:26Z | pushed 2026-05-26T09:16:20Z | homepage: https://github....
fenghot/XSS_agents
基于LangGraph + DeepSeek的AI驱动XSS渗透测试系统。模拟红队专家的完整思维链——通过浏览器内改包绕过前端防御,结合GAN驱动持续进化,实现低误报、高效率的XSS漏洞深度挖掘。 | topics: ai-security, deepseek, langgraph, llm-agents, penetration-testing, red-teaming, xss-detection | language: Pytho...
prof-faustus/mental-poker-zh
Mental Poker(BSV 心智扑克)简体中文翻译版:无荷官扑克规范/架构/红队文档与手牌评估参考实现,全部译为简体中文(代码不变;二进制论文未纳入)。Simplified-Chinese localization of the Mental Poker (BSV dealerless poker) spec, architecture, red-team docs and hand-eval oracle. | language...
nexorin9/hospital-cloud-adversarial-tester
医院云端对抗性测试平台,用红队思维模拟云账号误封/服务中断等极端场景,验证HIS紧急响应流程漏洞并生成整改清单;基于FastAPI+Typer CLI,提供场景卡引擎、红队剧本、漏洞分析、HMAC审计链等六大模块,支持Docker一键部署 | language: Python | stars: 0 | forks: 0 | updated 2026-06-04T18:13:16Z | pushed 2026-06-04T18:12:20...
yuxing28/-PRISM
这是一个名为 "智镜 PRISM" 的 AI 决策辅助系统,基于 Next.js 16 + React 19 构建。用户输入决策问题后,系统通过 DeepSeek API 进行结构化分析(含多维评分、红队对抗、信息收集等模式),并将分析结果以流式方式呈现,同时在侧边栏显示雷达图和仪表盘。 | language: TypeScript | stars: 1 | forks: 1 | updated 2026-06-05T05:53:09Z...
Bouquets-ai/StrikeAgent-RedInit
面向红队侧的以严重漏洞直到RCE为主 | stars: 0 | forks: 0 | updated 2026-06-06T17:44:09Z | pushed 2026-06-06T17:44:06Z
xieguanting/
AI红队攻防研究实验室,收录OpenClaw技能、LLM边界测试、参数篡改与越权检测等实战工具,仅用于安全研究与防御优化。 | language: Python | stars: 2 | forks: 0 | updated 2026-06-09T09:15:24Z | pushed 2026-06-08T14:19:02Z