Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Dx3iZ/CVE-2026-0920
Creating a Wordpress Admin User | language: Python
shinthink/CVE-2026-48939
Pre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0) | topics: cve-2026-48939, exploit, file-upload, icagenda, joomla, pentesting, python, rce, security-tools | language: Python
shinthink/CVE-2026-27966
Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8) | topics: ai-security, cve-2026-27966, exploit, langflow, pentesting, prompt-injection, python, rce, route-inject...
shinthink/CVE-2026-9290
Pre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5) | topics: cve-2026-9290, exploit, lfi, path-traversal, pentesting, python, rce, security-tools, wordpress, wp-user...
shinthink/CVE-2026-8713
Pre-auth path traversal to arbitrary file delete in Avada (Fusion) Builder <= 3.15.3 leading to RCE (CVSS 9.1) | topics: avada, cve-2026-8713, exploit, file-delete, fusion-builder, path-traversal, pentesting, python, rce...
tgies/copy-fail-c
Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint. | topics: af-alg, copy-fail, cve-2026-31431, exploit, kernel-exploit, linux-kernel, local-privilege-escalation, no...
Vikramaditya015/samsung-android-lpe
Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982 | language: Python
Manisso/http2-bomb
Proof of Concept (PoC) for CVE-2026-49975 – HTTP/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP/2 Slowloris). | language: Python
sentinel-aidefense/CVE-2026-54998-exp
CVE-2026-54998 RCE Exploit
MESLIMOHAMEDM22005188/path-traversal-CVE-2026-14628
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
satan1a/ThreatHuntingInBlue
蓝队视角下的威胁狩猎 | stars: 0 | forks: 0 | updated 2020-07-18T13:15:49Z | pushed 2020-07-18T13:15:50Z
ORG-MARS/DBJ
大宝剑-信息收集和资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配） | stars: 0 | forks: 0 | updated 2021-03-12T07:02:00Z | pushed 2021-03-12T01:01:45Z
HotSec/blue-auto
蓝队自动化工具 | stars: 0 | forks: 0 | updated 2022-08-01T11:27:17Z | pushed 2022-08-01T11:27:18Z
ProbiusOfficial/BT7274
BT-7274，您优秀的蓝队助手！ | stars: 0 | forks: 0 | updated 2023-09-21T00:44:29Z | pushed 2023-06-30T10:55:48Z
KawaiiSh1zuku/nps_unauth
NPS未授权漏洞利用脚本 适合蓝队反制用 | language: Python | stars: 1 | forks: 0 | updated 2023-11-20T06:23:45Z | pushed 2023-11-18T07:20:52Z
N0Coriander/HW-BlueTeam-Alarm-Automatic-report
HW中蓝队成员每天都需要将告警转换成指定格式上报，同时在下班后还需要提交日报。该工具针对以上两个场景实现了自动化输出 Desc : 用户自己先在导出来的EXCEL告警表中进行筛选，复制要生成通告的数据(支持多行)，然后输入你想生成的格式对应的数字，脚本会自动将内容填充进你的剪贴板，你就可以打开微信群直接粘贴发送了！同时还会在脚本目录下创建word文档，将生成的通告追加进去，便于当天护网结束后可以直接提交日报！ | language: P...
shengshengli/tig
Threat Intelligence Gathering 威胁情报收集，旨在提高蓝队拿到攻击 IP 后对其进行威胁情报信息收集的效率。 | language: Python | stars: 4 | forks: 0 | updated 2024-11-15T09:32:07Z | pushed 2022-05-01T05:29:43Z
Jeromeyoung/DBJ-1
大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配） | stars: 6 | forks: 3 | updated 2026-04-02T16:15:38Z | pushed 2021-10-28T15:41:03Z | homepage: https://dbj.vercel.app/
ahisec/erict
蓝队应急响应信息采集工具 | language: Batchfile | stars: 8 | forks: 0 | updated 2026-08-06T10:42:48Z | pushed 2023-01-06T09:08:52Z
bladedream123/smartcrypto_V1.0-decode-crypto
一键报文解码，HVV，蓝队防守利器 | language: Python | stars: 23 | forks: 2 | updated 2026-06-25T01:25:33Z | pushed 2024-09-27T09:55:50Z