Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
nirvanasec/CVE-2026-34197-PoC
alkimcoskun/Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu
CVE-2026-77818 - Yordam Kütüphane Otomasyon Sistemi - Üç ayrı noktada yansıtılmış HTML enjeksiyonu, form action ele geçirme ve kimlik bilgisi hırsızlığı (CWE-79)
pvharmo2/gha-lab-7927d7d06f
Security-research lab reproducing CVE-2026-22869 (pwn) — arbitrary code execution in privileged pull_request_target run via npx local-bin hijack, snapshot of eigent-ai/eigent @ 2a406536 | topics: academic-research, githu...
FranklinF25/cve-2026-31431
PoC for CVE-2026-31431 | language: C
pvharmo2/gha-lab-b5c1313658
Authorized security-research lab reproducing CVE-2026-1699 (pwn request in preview.yml) — snapshot of eclipse-theia/theia-website | topics: academic-research, github-actions, research-artifact | language: JavaScript
0xCyp1337/CVE-2026-63077
CVE-2026-63077 - Unauthenticated RCE exploit for JetBrains TeamCity via Agent Polling Deserialization. Supports mass scanning, multi-threading, and interactive shell. For authorized security testing only. | language: Pyt...
HORKimhab/CVE-2026-6471
CVE-2026-6471 - Draft or TODO
HORKimhab/CVE-2026-73554
CVE-2026-73554 - Draft or TODO
HORKimhab/CVE-2026-19516
CVE-2026-19516 | language: Python
Hunt-Benito/the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
mowenQWQ/mowenQWQ
Profile · 独立开发者：Windows 安全工具 + AI agent 经验库 | stars: 0 | forks: 0 | updated 2026-09-28T19:25:11Z | pushed 2026-09-28T19:25:06Z
pcy09cuye9/fCZdctcT
25年【计算机专业毕设一套】基于Web的网络攻防实验学习系统的设计与实现【附源码+数据库+万字论文】 | stars: 1 | forks: 0 | updated 2026-09-03T23:13:55Z | pushed 2026-09-03T23:13:51Z
Adsfsd331/didactic-octo-sniffle
Sliver GUI 中文汉化版 —— 基于 Wails 的 Sliver C2 桌面操作终端（类 Cobalt Strike）。界面文案已全部汉化为简体中文，功能与上游一致：会话/信标管理、交互式 shell、70+ RPC 命令、Pivot 拓扑图、脚本管理器、战利品/凭据/审计面板等。面向红队/授权渗透测试用途，仅限在已授权环境使用；部分杀软可能将其误报为潜在工具，属正常现象，请加白名单后运行。 | stars: 0 | fork...
wufufu770/d2d
三环并行渗透测试 dsh 插件 — discovery/deep/creative 三环 + 独立 verify 闭环，Kuzu 图黑板共享状态，多 agent 自调度、按角色模型策略、自学习知识脑。仅用于授权安全测试（SRC/靶场/自有资产）。 | topics: autonomous-agents, bug-bounty, dsh, graph-database, kuzu, llm-agent, multi-agent, offe...
a15846/TGSEC-Qtzuu
TGSEC社区 学习渗透套件 — 按攻击面组织的渗透测试知识库,可直接喂给AI自动配置使用 | stars: 0 | forks: 4 | updated 2026-09-01T12:13:27Z | pushed 2026-09-01T10:17:06Z
DHKun/pentest-engine
自动化资产拓扑推演与渗透测试报告引擎：subfinder→naabu→httpx→nuclei 编排落库，LLM 攻击路径推理+确定性排序，一键中文 HTML/PDF 报告 | language: Go | stars: 0 | forks: 0 | updated 2026-09-02T16:46:22Z | pushed 2026-09-02T16:45:15Z
zhangjing278/TC
TC冷藏转运周度渗透看板 | stars: 0 | forks: 0 | 2026-09-03T04:38:47Z
wwwwwxysy/
渗透测试skill | language: Shell | stars: 2 | forks: 0 | updated 2026-09-14T09:36:24Z | pushed 2026-09-14T09:36:21Z
yxpil/Firelin
智能体网络渗透工具集 | language: Rust | stars: 0 | forks: 0 | updated 2026-09-04T20:15:34Z | pushed 2026-09-04T20:16:47Z
lnls-ids/report_ID_tracking
Report containing information about ID tracking methods | language: TeX | stars: 0 | forks: 0 | updated 2026-09-03T13:24:23Z | pushed 2026-09-03T13:19:56Z