Why it is worth attention

It provides a structured, community-driven dataset of real-world vulnerability exploits specifically targeting Chinese HW events, with automated processing and public access.

Who it is for

Security researchers focusing on Chinese APT/cyber exercises
Blue team members in HW
Vulnerability intelligence analysts
Open-source intelligence (OSINT) practitioners

Use cases

Tracking latest vulnerabilities during HW periods
Building PoC databases for defense
Automating vulnerability data collection via CI/CD
Researching trends in disclosed exploits

Strengths

Structured TOML format for easy parsing
Multiple submission channels (Issue/PR/Email)
Automated workflow from submission to static site
Well-organized by year with consistent metadata

Considerations

Only covers vulnerabilities reported during specific Chinese exercises
Data quality depends on community contributions
No CVE mapping or official verification

README quick start

护网漏洞库

护网（HW）期间漏洞情报汇总，包含 0day / 1day / nday 漏洞数据。

原数据维护于腾讯文档，因人数限制迁移至此。

数据格式

每漏洞一个独立 TOML 文件，按年份目录存放：

docs/
├── 2023/  ← 325 条
├── 2024/  ← 455 条
├── 2025/  ← 333 条
└── 2026/  ← x 条

提交漏洞

方式一：提交 Issue（推荐）

在站点页面顶部点击「＋提交漏洞」
填写表单 → 自动创建 GitHub Issue
维护者审核后打 审核通过 label
GitHub Actions 自动提取数据 → 写入 TOML → 重建站点

方式二：提交 PR

直接往 docs/{year}/ 目录新增 TOML 文件提交 PR，格式参考：

vendor = "厂商名"
name = "漏洞名称"
type = "RCE"
version = "受影响版本"
path = "/利用路径"
detail = "漏洞详情 / POC"
fix = "处置建议"
date = "0730"
label = "0day"        # 0day | 1day | nday
verifier = "AdySec"   # 验真人（2025+）

方式三：发送邮件

发送漏洞信息至 admin@adysec.com，包含厂商、漏洞名称、类型、POC 等关键信息。

目录说明

.github/
├── ISSUE_TEMPLATE/submit-vulnerability.md   # Issue 模板
└── workflows/update-data.yml                # 审核通过后自动更新
docs/
├── {year}/*.toml                            # 源数据（TOML）
└── assets/css/style.css                     # 暗黑模式样式
scripts/
├── build-static.py      # 核心：TOML → 静态 HTML
└── process-issue.py     # Issue → TOML（GitHub Actions 用）
index.html / 2023.html / ...                 # 构建产物
CNAME                                         # 自定义域名
.nojekyll                                    # 禁用 Jekyll

Description

护网漏洞情报库 · 0day/1day/nday 漏洞数据 · 原腾讯文档迁移 · Issue 提交 · TOML 源数据

Related repositories

Similar projects matched by category, topics, and programming language.

lopopolo

Featured

harness-engineering

Harness Engineering is a methodology for improving coding agent outputs by carefully crafting the environment around them—providing curated context, tools, and executable constraints that encode an organization’s nonfunctional requirements and cumulative lessons.

AI & Machine LearningAI Agents

2,390

slvDev

Featured

esp32-ai

A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.

AI & Machine LearningLarge Language Models

1,960

littledivy

Featured

mimic

mimic captures traffic from any iOS or web app and automatically generates a Python client library that lets you call the app's API like a regular library.

AI & Machine Learning

1,482