Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
nmagill123/CVE-2026-61343-poc-librebooking-rce
Librebooking Admin RCE PoC CVE-2026-61343 | language: Python
yellow-key/yellowkey-bitlocker
yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubles...
codespacey68/yellowkey-bitlocker
yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubles...
gagaltotal/CVE-2026-57517-CWP
Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517 | topics: blind-sql-injection, control-web-panel, cve, cve-scanning, cwp, go, golang, golang-cli, rce, rce-exploit | language: Go | homepage: https...
cazzysoci/cve-2026-48908
language: Python
ziad626/CVE-2026-56876-POC
Offical PoC for this cve | language: JavaScript
Caster-chen/CVE-2026-8037-POC
包括能执行的命令探测和一键getshell（需要服务器部署服务） | language: Python
zerkl/CVE-2026-0776
Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client. | language: Python
oscerd/CVE-2026-40473
Reproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP) | topics: apache-camel, cve, proof-of-concept, security, vulnerability | language: Java
nk7667/-linx-server-vulnerability-report
Public disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
MrRobot-cpp/ZeroSec
A Security Tool for LLM & Vector Database Pipelines | language: JavaScript | stars: 1 | forks: 0 | updated 2026-03-22T11:28:49Z | pushed 2026-03-22T11:32:05Z
ramialdine/arpa-phishing-detector
hreat actors have discovered that because `.arpa` carries an **implicitly trusted reputation**, security tools consistently fail to scrutinize it. | stars: 0 | forks: 0 | 2026-03-22T11:43:21Z
MSLets97/network-security
A growing collection of hands-on guides, lab walkthroughs, and concept breakdowns covering network security tools, technologies, and best practices built and tested in real homelab and cloud environments. | stars: 0 | fo...
AGaevskiy/NMT-Hunter---Silent-Miner-Hunter
NMT Hunter is a security tool designed to detect and remove cryptocurrency miners, backdoors, and other threats on Windows systems. The program combines multiple detection techniques including process analysis, registry ...
arihantdalai/soc-lab-suricata-elk
This project focuses on designing and deploying a Virtual Security Operations Center (SOC) lab environment using open-source security tools. The lab integrates Suricata (Intrusion Detection System) with the Elastic Stack...
j0nsn/PT
渗透测试脚本仓库 | stars: 0 | forks: 0 | updated 2026-03-22T09:29:47Z | pushed 2026-03-22T09:29:43Z
trappedinthesim/NetRecon
10 security tools in a Chrome side panel — Nmap, DNS recon, WHOIS, SSL inspection, port scanning, CVE lookup, and more. Built for security researchers and CTF players. | topics: chrome-extension, ctf, cve, cybersecurity,...
DrishyaNair04/network-security-tool
language: Python | stars: 0 | forks: 0 | updated 2026-03-22T09:47:27Z | pushed 2026-03-22T09:47:24Z
july-whj/prompt-heist
Prompt Heist 是一款建立在区块链之上、由大语言模型（LLM）驱动的去中心化 AI 攻防博弈游戏。 随着 AI 技术的爆发，“提示词工程（Prompt Engineering）”正在成为新时代的黑客技术。本项目旨在将这种对抗性技术游戏化与金融化。玩家将通过极其巧妙的自然语言，试图“越狱（Jailbreak）”一个由最先进大模型扮演的金库守卫，骗取其持有的 ECDSA 密码学签名，从而掠夺部署在链上的全部加密资产奖池。 | la...
TarzEH/RedWeaver
Autonomous AI-powered vulnerability assessment platform — multi-agent bug hunting with CrewAI, real security tools, and real-time streaming | topics: ai-agents, bug-bounty, crewai, cybersecurity, docker, fastapi, knowled...