Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
MichaelAdamGroberman/CVE-2026-25197
CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03) | topics: authorization-bypass, cisa, coordinated-disclosure, cve, cve-2026-25197, cwe-639, gardyn, ics-advisory, icsa-26-055-03, idor, iot...
MichaelAdamGroberman/CVE-2026-28766
CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03) | topics: cisa, coordinated-disclosure, cve, cve-2026-28766, cwe-306, gardyn, ics-advisory, icsa-26-055-03, iot-security,...
pduggusa/redis-cve-2026-23479-check
Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free → RCE). Find exposed instances, patch left-of-boom. By DugganUSA. | language: Python
Jenderal92/CVE-2026-41940
Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution. | topics: bug-bounty, cpanel-exploit, cve, cve-2026-41940, cybersec...
avivyap/CVE-2026-23744
CVE-2026-23744 | language: Python
Diznev/CVE-2026-8732-EXPLOIT
PoC CVE-2026-8732 (WP Maps Pro <= 6.1.0)
p3Nt3st3r-sTAr/CVE-2026-8732-POC
language: Python
Pithase/asm-copyfail
CVE-2026-31431 (Copy Fail) — Análisis y desarrollo en Ensamblador x86-64 | Analysis and development in x86-64 Assembly
rootdirective-sec/CVE-2026-34234-Lab
language: Python
HORKimhab/CVE-2026-45247
CVE-2026-45247 - Draft | homepage: https://vulners.com/vulncheck_kev/VULNCHECK-KEV:CVE-2026-45247
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
heathc1iff-sec/PassGen
PassGen 是一款专为红队人员和安全测试工程师设计的高频密码字典生成器 | language: Python | stars: 0 | forks: 0 | updated 2026-03-13T14:25:09Z | pushed 2026-03-13T14:25:05Z
Coff0xc/AutoRedTeam-Orchestrator
Enterprise AI Red Team Platform | 企业级AI红队平台 | 132 MCP Tools | Pure Python Engines | SDK+CLI+MCP | Auto-Download sqlmap/nuclei/ffuf | Production C2 | LLM Enhanced | Docker Sandbox | SARIF CI/CD | 1980 Tests | topics: acti...
b0bac/ApolloScanner
自动化巡航扫描框架(可用于红队打点评估) | topics: python | language: JavaScript | stars: 724 | forks: 139 | updated 2026-03-15T03:34:27Z | pushed 2026-02-05T09:25:52Z
watanabe-hsad/GoPhantom
GoPhantom 是一个为红队演练和安全研究设计的下一代荷载加载器(Payload Loader)生成器。它利用 Go 语言的强大功能,将原始的 Shellcode 和一个诱饵文件打包成一个独立的、具有较强免杀(AV-Evasion)能力的 Windows 可执行文件。 | language: Go Template | stars: 190 | forks: 30 | updated 2026-03-20T01:39:07Z | p...
Zer08Bytes/ReconForge
红队工具--护网或攻防演练或日常渗透测试--快速外围打点半自动化工具 | stars: 2 | forks: 0 | updated 2026-03-16T09:45:57Z | pushed 2026-03-15T04:25:48Z
ReaJason/MemShellParty
一款专注于 Java 主流 Web 中间件的内存马快速生成工具,致力于简化安全研究人员和红队成员的工作流程,提升攻防效率 | topics: asm, bytebuddy, javaagent, javasecurity, javassist, javaweb, memshell, payload, webshell | language: Java | stars: 1577 | forks: 160 | updated 2026-0...
Yn8rt/DLDL
一款红队打点助力DDDD神器(POC|workflow|finger|dir管理、自动生成workflow) | stars: 22 | forks: 0 | updated 2026-03-18T00:38:46Z | pushed 2026-02-28T08:39:52Z
asaotomo/FofaMap
FofaMap v2.0 是一款基于 Python3 开发的全网首个 AI 驱动红队资产测绘智能体。在延续原有 FOFA 数据采集、存活检测、统计聚合、图标 Hash 及批量查询等核心功能的基础上,2.0 版本原生支持 MCP 协议,可无缝接入 Cursor、Claude 等 AI 平台。其核心内置了 AI 自我反思机制,能根据查询结果自动调优语法,并智能联动 Nuclei 推荐精准扫描策略,实现从“被动采集”到“主动智能决策”的红队作...
cbbzx12/LeakDetector
LeakDetector 是一款专为红队渗透测试人员和安全研究员设计的自动化信息泄露侦察工具。 | stars: 119 | forks: 3 | updated 2026-07-06T17:09:04Z | pushed 2026-06-09T13:58:55Z
ReAbout/web-sec
WEB安全手册(红队安全技能栈),漏洞理解,漏洞利用,代码审计和渗透测试总结。【持续更新】 | language: Python | stars: 1941 | forks: 275 | updated 2026-08-13T03:28:16Z | pushed 2026-07-20T15:37:42Z