Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
pvharmo2/gha-lab-5bce203f66
Security-research lab: reproduction of CVE-2026-41249 (GHSA-q58j-g3f4-h26h) — pull_request_target pwn request in .github/workflows/static.yml, snapshot of coreshop/CoreShop@cc1e3f54 | topics: academic-research, github-ac...
isaca0315/CVE-2026-64849-poc-lab
este laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah | language: Python | homepage: https://isacio-tamayo.ponciop.online/blog-mlflow-ssrf-es.html
isaca0315/CVE-2026-44578-next-js-ssrf
este laboratorio puede estar bien o mal esta el pruebas pero debe funcionar preguntale a la IA hahah | language: Python | homepage: https://isacio-tamayo.ponciop.online/blog-nextjs-ssrf-es.html
ynsmroztas/KeySniper
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow. | language: Python
pvharmo2/gha-lab-360f77d0d4
Authorized security-research lab: reproduction of CVE-2026-39866 (GHSA-9prc-pp2c-3427) — workflow_dispatch input template injection in .github/workflows/release_update.yml of LawnchairLauncher/lawnchair @ b089bae8c007f36...
0xCyp1337/CVE-2026-44402
language: Python
katranSefa/CVE-2026-19949
language: Python
dinosn/mikrotrick-poc
CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC | language: Python
HORKimhab/CVE-2026-67276
CVE-2026-67276 - Draft or TODO | language: Python
katranSefa/CVE-2026-49777
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
boom5497/VKdQQQXC
2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于shiro框架的渗透测试研究_e55821e8-81e7-4719-aaf7-abbfc684ba7d.zip | stars: 1 | forks: 0 | updated 2026-09-05T03:42:47Z | pushed 2026-09-05T03:42:43Z
boom5497/GaMMFkst
2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于Jboss框架的渗透测试研究_7343e07d-dc1f-43ad-807b-cb4efaff1aa5.zip | stars: 1 | forks: 0 | updated 2026-09-05T03:57:01Z | pushed 2026-09-05T03:56:58Z
manbamax/pentest-pro-skills
融合渗透测试 Skills 库（13 个 SKILL.md）：web/AD/提权/后渗透/代码审计/无线/云移动IoT/密码学/二进制。仅限授权测试。 | stars: 1 | forks: 1 | updated 2026-09-06T15:41:09Z | pushed 2026-09-05T12:16:46Z
Zoot-running/shence-yebushou
夜不收 · 渗透 skill（神策 SHENCE P4a，分支 ctf=校场） | language: TypeScript | stars: 0 | forks: 0 | updated 2026-09-05T05:45:14Z | pushed 2026-09-06T21:01:54Z
Kxiandaoyan/hack-dig
绕过ai模型执行渗透测试的工具 | language: Go | stars: 4 | forks: 1 | updated 2026-09-06T14:27:52Z | pushed 2026-09-05T13:28:45Z
fqix/kube-loop
Cross-platform Kubernetes desktop network client. Transparent TUN access to Pod IPs, ClusterIP Services, and cluster DNS via sing-box. | topics: desktop, developer-tools, golang, k8s, kubernetes, networking, react, sing-...
musclebigger/cyber-security-knowledge-engine
关于安全测试以及攻防检查的知识库清单 | language: Python | stars: 0 | forks: 0 | updated 2026-09-08T15:58:40Z | pushed 2026-09-08T15:53:00Z
iwbinb/NadWars
Monad 链上多人能源攻防策略游戏 | language: JavaScript | stars: 0 | forks: 0 | updated 2026-09-05T09:55:45Z | pushed 2026-09-05T09:55:41Z
henry2026a/bishe-Java-springboot-SSM-vue-js-uniapp-1788536785
【毕设分享】基于Java的springboot_SSM+vue.js+uniapp小程序的攻防靶场实验室平台附带文章源码部署视频讲解等.md | stars: 0 | forks: 0 | updated 2026-09-04T15:47:23Z | pushed 2026-09-04T15:47:17Z
dev-yz886/valorant-tactics-guide
《无畏契约》(VALORANT) 职业级枪法急停、特工阵容搭配、地图攻防与Vanguard底层白皮书 | language: HTML | stars: 0 | forks: 0 | updated 2026-09-05T20:43:08Z | pushed 2026-09-05T20:43:04Z