Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
CerberusMrXi/CVE-2026-44680-MikroORM-SQL-Injection-Exploit-Framework
PoC tool for CVE-2026-44680 affecting MikroORM ≤7.0.13. Exploits JSON path injection to extract database contents via UNION-based attacks. Features vulnerability detection, automated data extraction, table enumeration, a...
oscerd/CVE-2026-48205
Reproducer for CVE-2026-48205: Apache Camel camel-dns dns.* header injection redirecting DNS queries to an attacker-controlled resolver (SSRF via DNS) and enabling internal-hostname reconnaissance (fixed in 4.14.8/4.18.3...
baktistr/cve-2026-23550-poc
language: Shell
bahartanir/wp2shell-scanner
CVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner | language: Python
HELLBOY3110/cve-2026-16219-croogo-lab
language: Shell
oscerd/CVE-2026-49097
PoC reproducer for CVE-2026-49097 (Apache Camel camel-irc): the non-Camel-prefixed irc.sendTo header escapes the HTTP header filter and overrides the producer's configured channel, redirecting an IRC message to an attack...
remmons-r7/rapid7-CVE-2026-15409
This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it throug...
J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t
A fully red-team(offensive security) weaponized variant of wp2shell, built for authorized penetration testing & educational purposes. | language: Python
4minx/CVE-2026-63030
CVE-2026-63030 (wp2shell) POC. | language: Python
oscerd/CVE-2026-49086
PoC reproducer for CVE-2026-49086 (Apache Camel camel-dapr): the pub/sub consumer copies the untrusted CloudEvent's pubsubName/topic into producer-routing headers, letting an attacker redirect a republished message to an...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
2099383411/yunjing
AI驱动的渗透测试系统 - 让LLM像渗透测试工程师一样思考、决策、行动 | language: Python | stars: 3 | forks: 0 | updated 2026-07-03T15:47:26Z | pushed 2026-07-03T15:47:21Z
lfz97/HackerTeam
HackerTeam 是一个面向专业渗透测试人员的 AI 驱动多智能体agent渗透测试自动化平台。它将大语言模型与本地命令执行能力结合，通过标准化的 PTES（渗透测试执行标准）工作流，自动化完成从信息收集到后渗透的完整攻击链。 | language: Go | stars: 11 | forks: 0 | updated 2026-08-12T12:16:40Z | pushed 2026-08-12T12:16:37Z
ijabyregra/WltrmQPFuE
【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-07-03T16:56:53Z | pushed 2026-07-03T16:56:49Z
ijabyregra/XDGxeFbhzv
【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-07-03T17:08:15Z | pushed 2026-07-03T17:08:11Z
eyebite4/mScHSwKKkK
【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-04T06:51:17Z | pushed 2026-07-04T06:51:13Z
ctkqiang/QianKunQuan
乾坤圈 (QianKunQuan) 是一款功能强大的网络安全扫描工具，专为渗透测试人员、安全研究人员和系统管理员设计。它结合了高效端口扫描、服务识别、版本检测和CVE漏洞关联等核心功能，帮助您快速评估目标系统的安全状况。 | topics: china, chinese, ctkqiang, cyber, cybersecurity, go, golang, mysql, nmap, scanner, tcp, udp | langua...
eyebite4/dlOENJJQnD
【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-04T07:05:11Z | pushed 2026-07-04T07:05:08Z
Q16G/aster
基于 ReAct 框架的安全分析 Agent，在终端中完成代码审计、渗透测试、主机防护 | language: Go | stars: 83 | forks: 7 | updated 2026-07-12T16:42:58Z | pushed 2026-07-12T16:42:36Z
sandhyaman/wpCbpZXHku
【Java计算机毕业设计分享】基于Python的终端防护对抗后渗透框架设计与实现，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-04T11:57:41Z | pushed 2026-07-04T11:57:37Z
cao20031021/sec-study-notes
渗透测试流程、网络安全笔记等 | stars: 0 | forks: 0 | updated 2026-07-05T00:08:23Z | pushed 2026-07-05T00:08:19Z