Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Ravi-lk/CVE-2026-10104-POC
Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated Stored Cross-Site Scripting Proof of Concept
ywh-jfellus/CVE-2026-48907
PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE | language: Shell
webshellseo8/CVE-2026-48907-Unauthenticated-RCE-in-JCE
CVE-2026-48907: Unauthenticated RCE in JCE (Proof Of Concept) | language: Python
bayu06802/CVE-2026-48908
language: Python
msaleme/red-team-blue-team-agent-fabric
540 security tests for AI agent systems — MCP, A2A, x402/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, CVE-2026-25253 reproduction. v4.9.0 | topics: a2a-proto...
shinthink/CVE-2026-49049
Read-only vulnerability scanner for CVE-2026-49049 — Helix3 Joomla plugin unauthenticated AJAX handler | topics: cve-2026-49049, helix3, joomla, joomshaper, pentesting, python, security-tools, vulnerability-scanner | lan...
0xBlackash/CVE-2026-8451
CVE-2026-8451 | language: Ruby
frada321/asdsadsadasdasdsadsad
CVE-2026-49049 - Unauthenticated File Deletion, Arbitrary Write & XSS Injection for Helix3 Joomla Extension
portbuster1337/CVE-2026-27771
CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication | topics: container-registry, cve, cve-2026-27771, exploit, forgejo, gitea, security, vulne...
willygailo/CVE-2026-41940-Linux
⚠️ DISCLAIMER: This tool is intended for authorized penetration testing and educational purposes only. Using this tool against systems without explicit written permission is illegal. The developers are not responsible fo...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
youyouhanshuang/FW-IP-Block
蓝队工具 清洗需要封禁的IOC情报（IP/域名），防止重复和误封。 | language: Go | stars: 0 | forks: 0 | updated 2025-07-23T02:17:45Z | pushed 2025-07-19T09:39:18Z
Di-duo/TrackAttacker
HW蓝队溯源工具，可以快速处理IP信息、威胁情报、基本信息查询、贴吧信息查询、确认攻击者是否从事安全行业。 | stars: 1 | forks: 0 | updated 2025-07-23T20:03:40Z | pushed 2025-07-21T15:37:59Z | homepage: https://github.com/Di-duo/TrackAttacker
Zer08Bytes/Monitoring
红蓝队病毒木马监控辅助工具 | stars: 6 | forks: 0 | updated 2025-08-15T03:07:22Z | pushed 2024-12-03T14:32:00Z
ahisec/nla
使用 Nuclei 进行日志痕迹检测 辅助蓝队人员检测WEB日志中的攻击痕迹 | stars: 4 | forks: 0 | updated 2025-09-05T08:49:46Z | pushed 2024-12-31T08:17:34Z
xingyunsec/IPTraceabilityTool
蓝队值守利器-IP白名单过滤与溯源工具 | topics: ipfilter, iptracer | stars: 85 | forks: 7 | updated 2026-05-27T07:42:08Z | pushed 2025-09-05T01:18:32Z
maybeyjb/blue-team
蓝队技能、流量特征、应急响应、内存马查杀 | stars: 7 | forks: 3 | updated 2026-08-13T03:39:56Z | pushed 2025-07-31T08:37:24Z
Synex93/NotMe
蓝队资产判断工具，资产判断提醒 | language: Go | stars: 3 | forks: 0 | updated 2025-10-20T01:20:09Z | pushed 2025-09-30T03:59:53Z
Bains-sec/BowserSecCheckingTool
浏览器数据清除脚本，可以检查浏览器中有没有存储特定网址的密码，然后实行数据的清除，主要是用于攻防演练中蓝队防止钓鱼获取浏览器密码。 | language: PowerShell | stars: 18 | forks: 1 | updated 2025-11-02T10:29:24Z | pushed 2024-07-08T07:25:25Z
Scorcsoft/MonkeyApp
monkey app - 在Mac状态栏显示蓝队吗喽们的下班倒计时 | language: Python | stars: 16 | forks: 4 | updated 2026-03-27T08:17:48Z | pushed 2024-08-07T01:49:31Z
Blue-Team-CN/Blue-Tools
收集一些有意思的蓝队项目 | language: Shell | stars: 22 | forks: 1 | updated 2026-07-01T18:26:59Z | pushed 2024-06-14T07:43:05Z