Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
m00ddy/CVE-2026-0073-Android-client-TLS-auth-bypass
translating original python exploit to C | language: C
fredevsec/CVE-2026-0073
0-Click RCE Android Adb TLS Wireless Debugging | language: JavaScript
ChanderManiPandey2022/Yellow-Key-Check
YellowKey | BitLocker Bypass Vulnerability (CVE-2026-45585)
PwnOnu/T3-Technology-CPE-Advisories
CVE-2026-35904 / CVE-2026-35905 / CVE-2026-35906 — Unauth RCE, Hardcoded Root Creds & Telnet Enable in T3 Technology CPE
MichaelAdamGroberman/CVE-2026-32662
CVE-2026-32662: Active Debug Code in Production — Gardyn Home Kit (ICSA-26-055-03) | topics: cisa, coordinated-disclosure, cve, cve-2026-32662, cwe-489, debug-code, development-endpoints, gardyn, ics-advisory, icsa-26-05...
MichaelAdamGroberman/CVE-2026-28767
CVE-2026-28767: Missing Authentication on Admin Notifications Endpoint — Gardyn Home Kit (ICSA-26-055-03) | topics: admin-api, cisa, coordinated-disclosure, cve, cve-2026-28767, cwe-306, gardyn, ics-advisory, icsa-26-055...
MichaelAdamGroberman/CVE-2026-32646
CVE-2026-32646: Missing Authentication on Admin Device Endpoint — Gardyn Home Kit (ICSA-26-055-03) | topics: admin-api, cisa, coordinated-disclosure, cve, cve-2026-32646, cwe-306, gardyn, ics-advisory, icsa-26-055-03, io...
MichaelAdamGroberman/CVE-2026-25197
CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03) | topics: authorization-bypass, cisa, coordinated-disclosure, cve, cve-2026-25197, cwe-639, gardyn, ics-advisory, icsa-26-055-03, idor, iot...
MichaelAdamGroberman/CVE-2026-28766
CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03) | topics: cisa, coordinated-disclosure, cve, cve-2026-28766, cwe-306, gardyn, ics-advisory, icsa-26-055-03, iot-security,...
pduggusa/redis-cve-2026-23479-check
Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free → RCE). Find exposed instances, patch left-of-boom. By DugganUSA. | language: Python
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
25smoking/TaiGong-Project
太公是下一代红队社会工程学基础设施平台 - 全链路钓鱼演练与风险评估系统。支持邮件/短信/IM多渠道投递,内置AI助手,多样化模板库。 | stars: 0 | forks: 0 | updated 2026-06-16T14:24:21Z | pushed 2026-06-16T14:21:44Z
no-one-sec/code-phish
JetBrains系列产品.idea钓鱼反制红队 | topics: redteam, security | language: Go | stars: 330 | forks: 43 | updated 2026-03-07T02:02:06Z | pushed 2026-01-27T17:20:21Z
safe6Sec/command
红队常用命令速查 | topics: penetration-testing | stars: 1017 | forks: 232 | updated 2026-03-20T05:27:31Z | pushed 2026-03-17T18:47:56Z
25smoking/GophisModified
Gophish Enhanced Edition 是在原版 Gophish v0.12.1 基础上的深度改进版本。针对原版在实际红队演练和企业安全培训中遇到的痛点(如邮件被拦截、特征明显、缺乏本地化等),进行了大量底层代码级的优化和增强。 | language: Go | stars: 40 | forks: 15 | updated 2026-03-10T02:36:57Z | pushed 2026-01-22T14:18:08Z
Dorishwj/Persona-Aware-Safety-Alignment-Dataset-Generator
本项目是一个基于“红队-受试-裁判”三模型博弈架构的自动化数据集生成系统。专门用于研究大型语言模型(LLM)在各大风险类别里面对用户画像脆弱性和不同诱导策略注入时的安全对齐表现。 | language: Python | stars: 0 | forks: 0 | updated 2026-03-10T03:47:12Z | pushed 2026-03-10T03:47:05Z
Zcentury/Venom
致命精准的红队作战兵器。模块化集成资产发现、漏扫与利用,重新定义渗透测试工作流 (Workflow) 的新一代安全平台。 | language: TypeScript | stars: 397 | forks: 18 | updated 2026-08-07T10:04:54Z | pushed 2026-06-29T01:56:24Z | homepage: http://zcentury.cn/Venom/
sulab999/AppMessenger
一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具 | stars: 1296 | forks: 113 | updated 2026-07-14T09:53:38Z | pushed 2026-06-11T14:45:16Z | homepage: https://github.com/sulab999/AppMessenger/wiki
hi-unc1e/Auto_JB_APE
一个基于 LangGraph 的自动化 LLM 越狱(Jailbreak)框架,通过多智能体协作,自动生成并迭代攻击提示词,旨在绕过目标大模型的安全护栏,用于红队测试,用于红队测试。An Automated LLM Jailbreak Framework (APE) for red team testing, works good in HTB AI Red Teamer course vulnerable environment. |...
Yf3te/Yokan
红队一体化工具 | stars: 1 | forks: 1 | updated 2026-03-13T03:24:53Z | pushed 2026-03-19T07:38:09Z
dctx479/airt-zh
AIRT——一个免费的开源 AI 红队课程,包含 8 个模块和动手 Docker 实验室。由 Perplexity Computer 构建。 | language: HTML | stars: 0 | forks: 0 | updated 2026-03-13T05:05:55Z | pushed 2026-03-13T05:05:52Z | homepage: https://dctx479.github.io/airt-zh/