Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
tracyliving606/RegPwn
Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions | topics: assembly, capture-the-flag, cloudflare, containers, defcon, developer, fre...
oscerd/CVE-2026-33454
Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec | topics: apache-camel, cve, proof-of-concept, security, vulnerability | language: Java
covepseng/cve-2026-49352-poc
Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass) | language: Go
oscerd/CVE-2026-33453
Reproducer for CVE-2026-33453: Apache Camel camel-coap header injection to RCE via camel-exec | topics: apache-camel, cve, proof-of-concept, security, vulnerability | language: Java
aratane/CVE-2026-42945
A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead...
1neptune/chimera
Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence | language: Rust
MobiusM/CVE-2026-43499
CVE-2026-43499 PoC | language: C
R3n3r0/CVE-2026-20700
language: Python
Cosm3No1de/HTB-Abducted-Writeup
HTB "Abducted" write-up. Exploit CVE-2026-4480 (Samba RCE) → SMB wide links → systemd → root. Full methodology and flags. | language: HTML
sfewer-r7/CVE-2026-0257
Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257 | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
deCOLE118/RootDirectory
2026腾讯云安全-第二届智能渗透黑客松 | stars: 0 | forks: 0 | updated 2026-03-19T10:18:12Z | pushed 2026-03-19T10:18:08Z
jizhaoyu/Automated-Penetration-Testing-System
自动化渗透化测试系统 | language: Python | stars: 0 | forks: 0 | updated 2026-03-19T12:10:15Z | pushed 2026-03-19T12:08:42Z
KaGty1/VulPoc-Platform
All code is written by codex 5.4. 一个在断网环境下使用的本地在线漏洞/渗透知识库平台，供CTF线下赛使用 | language: Go | stars: 3 | forks: 0 | updated 2026-03-19T12:47:13Z | pushed 2026-03-19T11:46:24Z
yhy0/CHYing-agent
腾讯云黑客松 - 智能渗透挑战赛 Top9 | language: Python | stars: 388 | forks: 30 | updated 2026-03-21T10:41:14Z | pushed 2026-03-19T14:44:18Z | homepage: https://zc.tencent.com/competition/competitionHackathon?code=cha004
chenai999/AI
AI渗透机器人 | stars: 0 | forks: 0 | updated 2026-03-20T03:21:56Z | pushed 2026-03-20T06:02:46Z
Number312/Err404RR
渗透测试小小小白 | stars: 0 | forks: 0 | updated 2026-03-21T16:07:24Z | pushed 2026-03-21T16:07:21Z
0xdfggzsl/pt_agent
渗透测试agent开发 | language: Python | stars: 0 | forks: 0 | updated 2026-03-20T09:47:44Z | pushed 2026-03-20T09:47:41Z
ALKAERR/Kali_Hack_Agent
一个基于三层 Agent 架构的容器代码执行系统，专门用于在 Kali Linux Docker 容器中安全、自动地执行渗透测试工具。 | language: Python | stars: 80 | forks: 0 | updated 2026-03-20T11:11:09Z | pushed 2026-03-20T08:50:57Z
wgpsec/AboutSecurity
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。 | topics: bounty, bypass, cheatsheet, ctf, dictionary, fuzz, hacking, infosec, infrastructure, methodology, payload, penetration-testing, pentest, pentesting, r...
BugTraceAI/BugTraceAI-WEB
Real-time web dashboard for BugTraceAI — scan monitoring, 20+ security tools, and AI-powered analysis | language: TypeScript | stars: 3 | forks: 0 | updated 2026-03-22T10:19:14Z | pushed 2026-03-22T10:19:11Z | homepage: ...