Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
SunandM/poc-h2-duplicate-host
PoC for CVE-2026-71554 — h2 duplicate Host header request smuggling primitive (fixed in 4.4.1)
zylideum/CVE-2026-57858
Wormable exploit for CVE-2026-57858
ridhinva/ghe-push-option-rce-scanner
Scanner: CVE-2026-3854 GitHub Enterprise Server Pre-auth RCE via Push Option Injection — Python checker (CISA KEV) | topics: bug-bounty, cisa-kev, cli, cve, github, hacking, pentesting, python, red-team, scanner, securit...
ridhinva/drupal-jsonapi-sqli-scanner
Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV) | topics: bug-bounty, cisa-kev, cli, cve, drupal, hacking, pentesting, python, red-team, scan...
ridhinva/beyondtrust-rce-scanner
Scanner: CVE-2026-1731 BeyondTrust Remote Support Pre-auth RCE — Python checker for actively exploited vulnerability (CISA KEV) | topics: bug-bounty, cisa-kev, cli, cve, hacking, pentesting, python, red-team, scanner, se...
ethicbrudhack/CVE-2026-71851-Insufficient-Entropy-in-CryptoJS.lib.WordArray.random-Leads-to-BIP39-Recovery
ridhinva/panos-captive-portal-rce
Scanner: CVE-2026-0300 PAN-OS User-ID Captive Portal Buffer Overflow RCE — Python CLI for detecting actively exploited BOF vulnerability in Palo Alto firewalls (CISA KEV 2026-05-13) | topics: buffer-overflow, bug-bounty,...
mdvpat/CVE-2026-55957-PoC
Reproducible Docker lab for the Apache Tomcat JNDIRealm GSSAPI authentication bypass | topics: apache-tomcat, authentication-bypass, cve-2026-55957, docker, gssapi, jndirealm, kerberos, ldap | language: Java
5yu4n/CVE-2026-64638
CVE-2026-64638 | language: Python
wordsec/XSS2Shell
Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638) | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
zhihua-tech/zhuatech-agentsec
知华科技 AgentSec 社区源码版｜Agent 红队测试与发布门禁 | language: Java | stars: 0 | forks: 0 | updated 2026-08-02T03:34:31Z | pushed 2026-08-02T03:34:27Z
sorabug/Net-Loader
Net-Loader 是一个授权红队用途的 .NET 载荷生成工具 | language: C# | stars: 3 | forks: 0 | updated 2026-08-04T14:23:44Z | pushed 2026-08-01T06:57:56Z
liucy-666/NCRT
一个集成化越狱红队测试平台 | language: Python | stars: 3 | forks: 0 | updated 2026-08-05T11:43:33Z | pushed 2026-07-29T11:50:17Z
Lirunyi-123/legal-document-desensitizer
中国法律文书脱敏工具：20+类中国法律实体（身份证GB11643/信用代码GB32100/案号/律师执业证号/车牌等）→语义占位符，AES加密映射表一键无损还原，红队评测量化，本地优先、LLM可选（Ollama/云端API），面向中国律师。 | topics: chinese, data-privacy, desensitization, legal-documents, legal-tech, llm, nlp, pii, priva...
AKArrok/McPwn
通用 MCP 红队 agent:对准任意 MCP server 的 SSE 端点,自动完成侦察→假设→攻击→验证→报告,产出可重放 PoC。DVMCP 只是回归 fixture,不是产品目标。 | language: Python | stars: 0 | forks: 0 | updated 2026-08-07T02:52:14Z | pushed 2026-08-07T09:22:56Z
0rangec3t/Black-cat
Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill | topics: pentest, pentest-tools, red-team | language: Python | stars: 267 | forks: 32 | updated 2026-08-07T10:48:48Z | pushed 2026-0...
hitsz-ids/AI-Course
The repository for high school AI course | language: Python | stars: 7 | forks: 2 | updated 2026-08-07T11:31:59Z | pushed 2026-08-07T11:31:44Z
Andyyyyuan/CVE-Poc
存放一些渗透打靶中积累的CVE-poc | language: C | stars: 0 | forks: 0 | updated 2026-08-06T09:44:54Z | pushed 2026-08-06T09:43:45Z
Lanqd/pentest-notes
我的渗透实验手册 | stars: 0 | forks: 0 | 2026-08-06T10:48:55Z
yuanguin37/GKN-Phantom
GKN-Phantom 是一个面向 OpenClaw AI Agent 框架的工业级自动化渗透测试技能包。v5.0.0 配备 28 个检测模块，覆盖 38 种漏洞类型，支持 25+ 种 WAF 识别与绕过策略，20+ 条攻击链模式，在严格的 Scope Guard · Risk Gate · Rate Limiter 三重安全模型下，执行全生命周期安全验证：从零触碰被动侦察、主动资产发现、分层漏洞检测、交互式浏览器认证、证据验证、攻击路...