Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
rafabd1/CVE-2026-75604-poc
CVE-2026-75604 Next.js Windows RCE poc | language: Python
fevar54/cve-2026-60004
CVE-2026-60004 es una vulnerabilidad crítica (CVSS 9.8) en Gitea que permite ejecución remota de código sin autenticación mediante el endpoint `/api/v1/repos/{owner}/{repo}/diffpatch`. | topics: cve-pocs | language: Pyth...
maxprog-svg/CVE-2026-68820_Mass_Exploit
CVE-2026-68820 — Mass Exploit Framework Edition.
BishopFox/CVE-2026-58073-check
Safely detect Veeam Service Provider Console auth bypass CVE-2026-58073 | language: Python
debugactiveprocess/CVE-2026-18963
Nuclei template to discover Keycloak reset-credentials endpoints related to CVE-2026-18963 exposure validation.
fevar54/CVE-2026-32635-Angular-XSS-Mitigation
Demostracion educativa de mitigacion y deteccion de CVE-2026-32635: XSS en atributos i18n de Angular. | topics: cve-mitigations | language: YARA
LindHunt/CVE-2026-26211
Public disclosure for CVE-2026-26211, a stored XSS vulnerability affecting Ekushey Project Manager CRM v5.0.
gman0x00/keycloak-CVE-2026-18963
PoC, Dockerfile playground and root cause from patch diff analysis. | language: Python
kalhoralireza/CVE-2026-17532-lab
CVE-2026-17532 Docker Lab. | language: JavaScript
SneakyNachos/CVE-2026-4692-trust-me-im-in-rdm
Firefox BrowsingContext field-sync authz bypass (N-day, bug 2017643): forged PContent::CommitBrowsingContextTransaction sets InRDMPane=true from a compromised content process - parent applies it. Prerequisite primitive f...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
lights-rix/ZhLahyvy
2022软件工程毕设一套 终稿 基于python的web安全漏洞渗透测试系统设计与实现（论文+前后端程序源代码）41.zip | stars: 1 | forks: 0 | updated 2026-08-27T09:36:41Z | pushed 2026-08-27T09:31:38Z
fireditoo/AhrCUUBW
2022计算机毕设一套 终稿 （论文+程序源代码+使用说明）一款支持通过规则扩展进行终端防护对抗的后渗透框架设计与实现_596a004a-efc5-4543-a2ed-82b6a5ad11f5.zip | stars: 1 | forks: 0 | updated 2026-08-27T11:30:18Z | pushed 2026-08-27T11:24:47Z
vxssroott/reverse-skill
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, ...
na1385614-gif/-skill
一个 AI 按目标实际情况自主决策的渗透测试方法论+工具调用库，越来越聪明的skill | stars: 1 | forks: 0 | updated 2026-08-28T01:12:30Z | pushed 2026-08-28T01:12:25Z
lilili9646464/biohazard-ctf
🧪 BioHazard CTF Lab - 生化公司内网渗透实训靶场 (CTF教学, 仅供学习) | language: Python | stars: 0 | forks: 0 | updated 2026-08-28T02:36:41Z | pushed 2026-08-28T02:36:23Z
LSG-PolarBear/impulse
专为网络安全测试、渗透测试、安全研究而设计的手机号段字典生成工具。它内置了全国各省份、城市、地区的电话区号编码，以及中国移动、联通、电信、广电、虚拟运营商的号段数据，能够根据用户需求精确生成前7位手机号前缀，方便后续扩展为完整的11位手机号码字典。 | language: Python | stars: 0 | forks: 0 | updated 2026-08-28T03:09:03Z | pushed 2026-08-28T03:...
Toddli468/Pentest-Scoop-Bucket
渗透测试相关工具脚本的Scoop软件仓库 | language: PowerShell | stars: 7 | forks: 1 | updated 2026-09-05T03:49:00Z | pushed 2026-09-05T03:48:56Z
AliceGoto/nighthawk
NightHawk — security-first coding agent (渗透测试与代码安全审计 CLI/TUI) | language: TypeScript | stars: 9 | forks: 0 | updated 2026-09-03T07:21:59Z | pushed 2026-09-03T07:20:37Z
KahimWong/GenText-Forensics-3rd-Place
[MM'26 Challenge] SEED: Simple ViT and Evolving Harness for Explainable Text Forgery Detection | topics: document-ai, forgery-detection, harness | language: Python | stars: 3 | forks: 0 | updated 2026-08-28T06:29:49Z | p...
zh996325/SecTools
安全工具箱，好用的安全工具箱，可扩展。 | language: Python | stars: 0 | forks: 0 | updated 2026-08-28T07:28:56Z | pushed 2026-08-28T07:28:36Z