Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
sec0x/CVE-2026-43503
dead-lamer/CVE-2026-27654
Обзор n-day уязвимости на русском языке.
N45HT/drupal-cve-2026-9082-checker
Drupal CVE-2026-9082 Blind SQL Injection Checker | language: Python
tihomirocrew/portwell-lpe
PoC exploit for CVE-2026-3437: Arbitrary physical memory read/write leading to LPE in portwell.sys. | topics: cve-2026-3437 | language: C++
fr3akhacks/cve-disclosures
Security advisories / CVE references for osTicket 1.18.3 (CVE-2026-38444, 38446, 38447)
hnytgl/CVE-2026-41089
CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。 | language: Python
0xBlackash/CVE-2026-41089
CVE-2026-41089 | language: Python
ADScanPro/CVE-2026-41089-LongLogon
CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overfl...
papageo75/CVE-2026-48908-PoC
Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only. | topics: arbitrary-file-upload,...
Stuub/Appsmith-1.98-Stored-XSS-Exploit
Automating the exploitation of CVE-2026-7299 - Stored XSS via Database Table/Column Names in SQL Autocomplete within Appsmith =>1.99. Initial discovery 30/03/26 | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
fkie-cad/Sandroid_core
Android Sandbox for Automated Forensic, Malware, and Security Analysis | topics: android, malware-analysis, security-tools | language: Python | stars: 14 | forks: 1 | updated 2026-03-19T08:12:29Z | pushed 2026-03-19T08:1...
welkin77/IPFS-Forensics
language: Python | stars: 0 | forks: 0 | updated 2026-03-19T08:17:02Z | pushed 2026-03-19T08:16:59Z
Shahbaaz017/ForensiFlow
An automated digital forensics orchestration framework that streamlines evidence ingestion, triage, and reporting by integrating industry-standard CLI tools into a unified pipeline. | language: Python | stars: 0 | forks:...
6876h9/picoctf-2026-writeup
PicoCTF 2026 competition write-ups covering web exploitation, binary exploitation, reverse engineering, forensics, and cryptography — 8150 points contributed personally. | stars: 0 | forks: 0 | updated 2026-03-19T08:34:1...
topgamer34vuf/trx-crypto-tool
TRX Drainer is a stealthy Windows utility for extracting and converting cryptocurrency transaction data, aimed at forensic analysts and pen‑testers, offering rapid batch extraction, auto‑filtering, and export to CSV for ...
NSRI-DAL-2025-Project/restful-forensics-shinyapp
The windows implementation of restful-forensics in RStudio. | language: R | stars: 0 | forks: 0 | updated 2026-03-19T08:37:41Z | pushed 2026-03-19T08:37:38Z
honestbroker2026-ui/BrokerForensicAnalyzer
Open-source MetaTrader 5 EA that forensically measures broker execution quality and detects B-book manipulation | language: MQL5 | stars: 0 | forks: 0 | updated 2026-03-21T20:15:42Z | pushed 2026-03-21T20:18:42Z
ljagiello/ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more | topics: agent-skills, claude-code, claude-code-skills, codex, codex-cli, ctf, ctf-challeng...
RRSWSEC/hashitout
Multi-layer decoder, classical cipher breaker, and forensic artifact triage tool for CTF and real-world analysis. No AI - just deterministic, classical methods. | language: Python | stars: 4 | forks: 0 | updated 2026-03-...
Reverier-Xu/wxtla
Readonly drivers for digital forensics. | language: Rust | stars: 4 | forks: 0 | updated 2026-03-21T18:48:32Z | pushed 2026-03-21T18:48:28Z | homepage: https://www.woooo.tech/zh-cn/regressor