Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
grassplatypus/cve-2026-45033-class
CVE-2026-45033 PoC for Claude Code, not Github Copilot. Worked for Haiku 4.5. | language: Shell
HORKimhab/CVE-2026-18577
CVE-2026-18577 - Draft
shinthink/CVE-2026-63223
CVE-2026-63223 — CI4RCE: CodeIgniter 4 is_image/mime_in File Upload RCE. Magic bytes bypass (getExtension vs getClientExtension). CVSS 9.8 | CWE-434 | CI4 < 4.7.4 | topics: ci4, ci4rce, codeigniter, cve, cve-2026-63223, ...
rizlmaulanaa/CVE-2026-23479-Redis-UAF-Proof-of-Concept
Proof of concept with GDB‑assisted exploitation (educational / lab use only) | language: Python
xiaoqiMikko/pac4j-check
Offline scanner for CVE-2026-29000 (CVSS 10.0) in org.pac4j:pac4j-jwt. Inspects jars/fat-jars directly, so it works where mvn dependency:tree cannot. Single jar, zero dependencies, Java 8+. | topics: appsec, authenticati...
imbas007/POC-CVE-2026-58048
Security research project | topics: cpanel, cve, cve-2026-58048, exploit, mysql, poc, privilege-escalation, security, sql-injection, web-security | language: Python
AzureADTrent/CVE-2026-52824
Technical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0.
spinfosecurity/BAS-Guardian
Free BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash. | topics: bacnet, bash, building-automati...
shinthink/CVE-2026-66066
CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft → forged variation. CVSS 9.5 | Rails < 8.1.3.1 | topics: activestorage, cv...
George0Papasotiriou/CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
kkld1684qw/BrTdpLxnkh
【Python计算机毕业设计分享】基于Python的Web安全渗透测试系统，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-08-02T06:52:45Z | pushed 2026-08-02T06:52:24Z
id650bchqk/GYbUIccCmF
【Java计算机毕业设计分享】基于Python的后渗透框架设计与实现，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-08-02T08:44:22Z | pushed 2026-08-02T08:43:59Z
hello-xiaoniao/WMP-pentest-automation
ai自动化渗透小程序，解决了微信小程序更新后偏移值改变导致的注入失败 | stars: 2 | forks: 1 | updated 2026-08-02T12:34:43Z | pushed 2026-08-01T15:53:34Z
tqjeff/qingtianzhu-toolbox
擎天柱工具箱 · AI 安全技能路由器(渗透优先) — 逆向/渗透/CTF 一体,融合 41 个安全仓库方法论,读 AI-AUTO-SETUP.md 即自动装配 | stars: 0 | forks: 0 | updated 2026-08-02T15:37:45Z | pushed 2026-08-02T15:07:30Z
kkbo8005/mitan
密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、sesionkey加解密、批量信息权重查询、密码字典等功能 | stars: 1814 | forks: 123 | updated 2026-08-05T11:57:57Z | pushed 2026-08-03T06:32:28Z
jiege56/RedTeam-Recon
基于天狐渗透工具箱二次开发的一体化信息收集工具 | language: Python | stars: 2 | forks: 0 | updated 2026-08-04T20:25:57Z | pushed 2026-08-03T14:25:46Z
litsasuk/Makit
一个快速启动渗透测试脚本、程序和工具的控制台 | language: Python | stars: 1 | forks: 0 | updated 2026-08-03T09:23:22Z | pushed 2026-08-03T09:22:18Z
do-whilefor/Jase-SecKit
面向授权安全测试、AI 辅助渗透测试与漏洞研究的可复用 Security Skills 集合。 | topics: ai-security, bug-bounty, claude-code | language: Python | stars: 2 | forks: 1 | updated 2026-08-04T02:10:35Z | pushed 2026-08-04T02:10:30Z | homepage: https://git...
Wzzm-123/web-scanner
一个从零开始编写的Web漏洞扫描器，支持多线程、数据库存储和报告生成。 | language: Python | stars: 3 | forks: 0 | updated 2026-08-10T08:10:20Z | pushed 2026-08-10T08:08:50Z
rkbkosp/pi-provider-clone
Clone Pi model providers under separate provider IDs and credential scopes | topics: multi-account, oauth, pi-coding-agent, pi-extension, pi-package, typescript | language: TypeScript | stars: 0 | forks: 0 | updated 2026...