Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
yangh-beep/CVE-2026-31431-C
language: C
4xura/CVE-2026-31431-Copy-Fail
Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on https://4xura.com/binex/kernel/copy-fail | language: C
rahultb-sec/CVE-2026-33829-Writeup
Vulnerability Case Study: CVE-2026-33829 (Windows Snipping Tool NTLM Coercion)
lysophavin18/cve-2026-9082
cve poc
D7EAD/CVE-2026-38765
An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys | homepage: https://dreadsec.co/p/protogent-kernel-anti-virus-multiple-vulnera...
D7EAD/CVE-2026-38764
An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys | homepage: https://dreadsec.co/p/protogent-kernel-anti-virus-multiple-vulnera...
D7EAD/CVE-2026-38763
An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service in the kernel. | homepage: https://dreadsec.co/p/protogent-kernel-anti-virus-multiple-vulnerabilities.html
PySecTools/CVE-2026-3629
WordPress Privilege Escalation Checker | language: Python
prashanthnataraj/mini-shai-hulud-detector
One-command scanner for the Mini Shai-Hulud npm supply-chain worm (CVE-2026-45321). Detect before rotating tokens. | language: Shell
ZeroPathAI/autogpt-CVE-2026-30950-poc
POC for CVE-2026-30950 which allows session hijacking in AutoGpt | language: Python
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
duckpigdog/Intelligence-Gathering-Labs
一个“酷炫”的赛博朋克风信息收集 CTF 实验场,面向初学者与红队。 支持离线运行、轻量且开源 | language: PHP | stars: 4 | forks: 2 | updated 2026-02-25T13:01:35Z | pushed 2025-12-16T08:59:47Z
Yn8rt/Befree
一款红队在信息收集时规避IP封禁的傻瓜式一键代理池,通过大量代理节点轮询的代理池工具 | language: C# | stars: 7 | forks: 4 | updated 2026-02-26T01:20:37Z | pushed 2026-02-02T03:46:07Z
bilisheep/ExternalHound
一个基于 FastAPI + React 的企业级资产管理和关系图谱可视化平台 专为渗透测试团队、安全研究人员和红队打造 | language: Python | stars: 18 | forks: 2 | updated 2026-02-28T03:45:13Z | pushed 2026-01-30T02:44:32Z
sangnigege/Awesome_Pentest_Tools
一站式渗透测试与红队工具合集,旨在帮助渗透测试人员打造自己的工具链 | stars: 64 | forks: 9 | updated 2026-09-09T02:41:15Z | pushed 2026-09-09T02:41:05Z
tianlusec/TL-ICScan
TL-ICScan 是由天禄实验室开发的一款面向安全研究人员、红队与蓝队的本地化漏洞情报聚合与分析工具。 | language: Python | stars: 38 | forks: 9 | updated 2026-08-09T01:43:15Z | pushed 2025-12-12T13:37:44Z
D0gekong/Jaegar
Jaegar 是一个基于 LLM (大语言模型) 驱动的全栈式红队自动化侦察与渗透系统。 | language: Lua | stars: 7 | forks: 0 | updated 2026-03-03T15:15:03Z | pushed 2025-12-02T10:16:32Z
ktol1/RedTeam-MCP
RedTeam-MCP: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架,支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具,让 LLM 直接化身安全审计黑客。 | topics: active-directory, ai-agent, ai-s...
huaimeng666/gofinger
GoFinger是一款专为红队攻防和企业资产管理设计的下一代web指纹发现、指纹识别工具。基于 Go 语言开发,它不仅继承了传统指纹工具的识别能力,更在性能、可扩展性和输出质量上进行了深度优化。 它旨在帮助安全工程师和渗透测试人员快速、精准地识别网络资产指纹,并以美观、易读的格式呈现结果。工具原生支持本地指纹库与 Fofa、Quake、Hunter 等主流API联动,并集成了 Chainreactors Fingers、Goby、Eho...
25smoking/TaiGong-Project
太公是下一代红队社会工程学基础设施平台 - 全链路钓鱼演练与风险评估系统。支持邮件/短信/IM多渠道投递,内置AI助手,多样化模板库。 | stars: 0 | forks: 0 | updated 2026-06-16T14:24:21Z | pushed 2026-06-16T14:21:44Z
no-one-sec/code-phish
JetBrains系列产品.idea钓鱼反制红队 | topics: redteam, security | language: Go | stars: 330 | forks: 43 | updated 2026-03-07T02:02:06Z | pushed 2026-01-27T17:20:21Z