Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
BimaBalance/Cve-2026-27944-Tools-Exploit
Suka suka lah | language: Python
1beelze/CVE-2026-23550
language: Python
mooder1/dirtyclone-CVE-2026-43503
language: Python
tematemaru/CVE-2026-31431-simple-test
language: C
canyie/TransitionPlayer
CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb | language: Java
Sch8ill/CVE-2026-31309
Improper Access Control in Mysterium Node before v1.36.0 | homepage: https://cve.org/CVERecord?id=CVE-2026-31309
striga-ai/CVE-2026-34486
EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. | language: Java
timtimxs/CVE-2026-51947-Advisory
Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left TypeNameHandling set to 4 without implementing SerializationBinder, allowing att...
abdugafforov-bobur/CVE-2026-54415-PoC
PoC for CVE-2026-54415 — Azuriom CMS (<1.2.11) Broken Access Control → account takeover | language: Python
b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751
OpenSTAManager-RCE-Exploit-CVE-2026-38751 | language: Rust
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
Ms-yin/Network
该知识库是一些网络安全的文档,主要偏向蓝队的使用,尤其是在面对甲方的时候。 | stars: 5 | forks: 5 | updated 2026-04-13T05:05:30Z | pushed 2025-05-12T12:16:21Z
jeningogo/DBJ
大宝剑-信息收集和资产梳理工具(红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配) | stars: 7 | forks: 4 | updated 2025-12-04T07:14:43Z | pushed 2021-03-12T05:10:41Z
Lorna-Dane/Blue-Team
一些个人学习的蓝队以及取证笔记 | stars: 113 | forks: 20 | updated 2025-12-14T07:14:50Z | pushed 2021-02-19T01:10:25Z
Bywalks/TrackAttacker
TrackAttacker | 追踪攻击者工具 | HW蓝队 | 溯源必备 | language: Python | stars: 157 | forks: 25 | updated 2026-07-21T12:08:15Z | pushed 2021-04-22T01:32:07Z
M-Kings/cybersecurity-book
《红队vs.蓝队:网络攻防实战技术解析》资料仓库 | language: C++ | stars: 27 | forks: 8 | updated 2026-01-09T06:03:45Z | pushed 2024-07-15T07:39:09Z
8988-who/MY_AI_Agent
渗透测试Agent/蓝队防守Agent | stars: 0 | forks: 0 | updated 2026-01-23T15:18:12Z | pushed 2026-01-23T15:18:09Z
Am1azi3ng/BT_SuperTools
蓝队IP封禁Tools工具 | language: Go | stars: 53 | forks: 3 | updated 2026-07-08T02:53:16Z | pushed 2025-09-04T02:30:11Z
zhzyker/dismap
Asset discovery and identification tools 快速识别 Web 指纹信息,定位资产类型。辅助红队快速定位目标资产信息,辅助蓝队发现疑似脆弱点 | topics: cybersecurity, detection, fingerprint, fingerprint-scanner, golang-tools, identification, pentest-tool, pentest-tools, re...
yulate/IPCheck
检测IP地址是否为单位IP,用于蓝队溯源或者其他使用,可选择是否开启常见端口是否开放扫描 | language: Go | stars: 9 | forks: 0 | updated 2026-03-03T14:43:20Z | pushed 2024-03-28T17:36:49Z
misaki7in/ipfilter
IP地址白名单过滤器,可配合微步API分析,护网蓝队重保工具 | stars: 74 | forks: 8 | updated 2026-08-06T10:54:54Z | pushed 2023-06-29T01:49:18Z