Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Lutfifakee-Project/CVE-2026-31635
Exploit for DirtyDecrypt - CVE-2026-31635 Local Privilege Escalation | language: C
fevar54/FULL-ANALYSIS---CVE-2026-45829-ChromaDB
language: Python
yusufdalbudak/CVE-2026-42945
language: Shell
Maxime288/Fragnesia-CVE-2026-46300
Renison-Gohel/CVE-2026-42945-NGINX-Rift
language: Python
bjbakker1984/Yellowkey-mitigation
A small script to apply Yellowkey mitigation based on CVE-2026-45585 instructions | language: PowerShell
dhawaldesai/agentic-ioc-scanner
IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink. | language: Shell
Lutfifakee-Project/CVE-2026-41651
Exploit for CVE-2026-41651 - PackageKit TOCTOU Local Privilege Escalation (Pack2TheRoot) | topics: cve-2026-41651, linux-exploit, local-privilege-escalation, lpe, pack2theroot, packagekit | language: C
Kulik-Labs-Development/Ghost-CMS-Code-Injection-Audit-CVE-2026-26980
Outdated Ghost CMS websites that have fallen become compromised from CVE-2026-26980 can suffer from spam code injection to pages. Use this to mass clear and edit code injection fields. | language: Python
a24ac1/CVE-2026-0740
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
safe6Sec/command
红队常用命令速查 | topics: penetration-testing | stars: 1017 | forks: 232 | updated 2026-03-20T05:27:31Z | pushed 2026-03-17T18:47:56Z
25smoking/GophisModified
Gophish Enhanced Edition 是在原版 Gophish v0.12.1 基础上的深度改进版本。针对原版在实际红队演练和企业安全培训中遇到的痛点（如邮件被拦截、特征明显、缺乏本地化等），进行了大量底层代码级的优化和增强。 | language: Go | stars: 40 | forks: 15 | updated 2026-03-10T02:36:57Z | pushed 2026-01-22T14:18:08Z
Dorishwj/Persona-Aware-Safety-Alignment-Dataset-Generator
本项目是一个基于“红队-受试-裁判”三模型博弈架构的自动化数据集生成系统。专门用于研究大型语言模型（LLM）在各大风险类别里面对用户画像脆弱性和不同诱导策略注入时的安全对齐表现。 | language: Python | stars: 0 | forks: 0 | updated 2026-03-10T03:47:12Z | pushed 2026-03-10T03:47:05Z
Zcentury/Venom
致命精准的红队作战兵器。模块化集成资产发现、漏扫与利用，重新定义渗透测试工作流 (Workflow) 的新一代安全平台。 | language: TypeScript | stars: 397 | forks: 18 | updated 2026-08-07T10:04:54Z | pushed 2026-06-29T01:56:24Z | homepage: http://zcentury.cn/Venom/
sulab999/AppMessenger
一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具 | stars: 1316 | forks: 110 | updated 2026-09-09T06:23:25Z | pushed 2026-09-06T06:33:15Z | homepage: https://github.com/sulab999/AppMessenger/wiki
hi-unc1e/Auto_JB_APE
一个基于 LangGraph 的自动化 LLM 越狱（Jailbreak）框架，通过多智能体协作，自动生成并迭代攻击提示词，旨在绕过目标大模型的安全护栏，用于红队测试，用于红队测试。An Automated LLM Jailbreak Framework (APE) for red team testing, works good in HTB AI Red Teamer course vulnerable environment. |...
Yf3te/Yokan
红队一体化工具 | stars: 1 | forks: 1 | updated 2026-03-13T03:24:53Z | pushed 2026-03-19T07:38:09Z
dctx479/airt-zh
AIRT——一个免费的开源 AI 红队课程，包含 8 个模块和动手 Docker 实验室。由 Perplexity Computer 构建。 | language: HTML | stars: 0 | forks: 0 | updated 2026-03-13T05:05:55Z | pushed 2026-03-13T05:05:52Z | homepage: https://dctx479.github.io/airt-zh/
heathc1iff-sec/PassGen
PassGen 是一款专为红队人员和安全测试工程师设计的高频密码字典生成器 | language: Python | stars: 0 | forks: 0 | updated 2026-03-13T14:25:09Z | pushed 2026-03-13T14:25:05Z
Coff0xc/AutoRedTeam-Orchestrator
Enterprise AI Red Team Platform | 企业级AI红队平台 | 132 MCP Tools | Pure Python Engines | SDK+CLI+MCP | Auto-Download sqlmap/nuclei/ffuf | Production C2 | LLM Enhanced | Docker Sandbox | SARIF CI/CD | 1980 Tests | topics: acti...