Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
ekomsSavior/wp2shell
CVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi) | language: Python
onesmiledx/CVE-2026-43499
A modified method to root Android device with locked bootloader via new exploit. (Only for Samsung now or smthing like that devices cuz i ported it to N970U1), Fork of https://github.com/localhosts-A/CyberMeowfia
WadesWeaponShed/Check-Point-Trusted-Access-Review
Local web app for conducting a Check Point Trusted Access Review. This scanner is built specifically to look for configuration issues around CVE-2026-16232, CVE-2026-62144 , and CVE-2026-62145. This tool is not created o...
BishopFox/CVE-2026-11374-check
Detection script for CVE-2026-11374 | language: Python
0xgh057r3c0n/CVE-2026-58138
CVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator | language: Python
gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc
CVE-2026-63030 & CVE-2026-60137 Wp2shell Poc | topics: cve-2026-60137, cve-2026-63030, poc, python, python-script, python3, rce, rce-exploit, wordpress, wordpress-api, wp2shell, wp2shell-poc | language: Python | homepage...
justsoman/CyberMeowfia-ace3
CVE-2026-43499 exploit with OnePlus Ace3 support
m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0 | language: Python
Iqbalx7/wp2shell
unauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137) | language: Python
oscerd/CVE-2026-49098
PoC reproducer for CVE-2026-49098 (Apache Camel camel-kafka): the non-Camel-prefixed kafka.OVERRIDE_TOPIC header escapes the upstream HTTP header filter and overrides the producer's configured topic, injecting an attacke...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
qul027/amazon-price-scraper
亚马逊价格抓取完整指南：为什么自己写爬虫那么难？怎么用API一键搞定？价格监控、竞品追踪、反爬攻防一篇全讲清楚 | stars: 1 | forks: 0 | updated 2026-06-21T06:15:15Z | pushed 2026-06-21T06:15:05Z
asttpy/asttpy-site
攻防实验网站 | language: HTML | stars: 0 | forks: 0 | updated 2026-06-22T06:13:33Z | pushed 2026-06-22T06:11:46Z
olist213/penetration_testing_env
渗透测试、红蓝攻防、代码审计基础环境搭建 | stars: 96 | forks: 14 | updated 2026-06-22T13:01:15Z | pushed 2026-06-22T01:40:38Z
1982813272/SDDD-UEBA
现有UEBA与蜜点诱捕融合应用存在风险评分滞后、蜜点无针对性、资源调度低效、缺少防御闭环四大缺陷；本发明针对性解决动态评分、个性化诱捕、弹性资源调度、攻防闭环自进化四大技术难题。 适用人群：安全运维人员 系统将部署在靶场或工作环境中，用户也可输入日志进行检测。 本系统具备五大核心亮点：支持用户在界面自动化定义与部署蜜点，可依据AI研判结果针对不同攻击形态实现个性化诱捕与智能防御；能够结合攻击情报完成弹性资源调度，自动增减蜜点以降低资源消...
lin09389/mox
大模型攻防平台 | language: Python | stars: 0 | forks: 0 | updated 2026-06-23T13:08:07Z | pushed 2026-06-24T05:32:04Z
ladon306/LLM-Security-Range
OWASP LLM Top 10 (2025) 交互式安全攻防靶场 - 10类漏洞30个挑战，中文原生场景，难度分级 | language: Python | stars: 1 | forks: 0 | updated 2026-06-24T10:41:11Z | pushed 2026-06-24T06:21:13Z
jenn619/bucket-scan
最近打攻防比赛挖了挺多oss漏洞，写了该工具目的是为了提高挖oss漏洞的效率。 | language: JavaScript | stars: 11 | forks: 0 | updated 2026-06-25T23:49:17Z | pushed 2026-06-23T01:12:10Z
Ray648-h/ai-security
本地使用ai工具的攻防演示 | language: HTML | stars: 0 | forks: 0 | updated 2026-06-24T12:25:06Z | pushed 2026-06-27T07:39:59Z
zeiwei0822/uav-swarm-defense
無人機機群攻防模擬：傳統 vs AI 防空、多軸夾擊、誘餌反制（台灣海峽防衛戰） | language: Python | stars: 0 | forks: 0 | updated 2026-06-27T15:32:37Z | pushed 2026-06-27T15:32:33Z
SHUN-OSS/CN-Attack-Defense
沧澜攻防平台 | stars: 0 | forks: 0 | 2026-06-28T10:00:25Z