Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
sh4den/CVE-2026-31431-copyfail-aarch64
language: Python
fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb
Este repositorio contiene un Proof of Concept (POC) para CVE-2026-49975, también conocida como HTTP/2 Bomb, una vulnerabilidad de denegación de servicio (DoS) remoto que afecta a la mayoría de los servidores web principa...
friparia/NGINX_RIFT_SCAN_CVE_2026_42945
Nginx Rewrite CVE Scan(CVE-2026-42945 nginx-rift CVE-2026-9256) | language: Python
eliHiHo/portfolio-drupal-cve-2026-9082
language: Shell
M8seven/cve-2026-11837-ansible-posix-authorized-key
CVE-2026-11837: local privilege escalation in the ansible.posix authorized_key module via symlink-following chown. Technical writeup; sibling of CVE-2024-9902. | topics: ansible, cve, linux, privilege-escalation, securit...
sec0x/CVE-2026-48907
language: Python
personnumber3377/dns_client_fuzzing
Fuzzing the Microsoft Windows DNS client library. Inspired by CVE-2026-41096.
gagaltotal/CVE-2026-10523-Ivanti-sentry
CVE-2026-10520 - CVE-2026-10523 - Ivanti Sentry | topics: cve, cve-2026-10523, cve-scanning, cve-search, go, golang, golang-cli, golang-tools, ivanti, ivantisentry | language: Go | homepage: https://www.ivanti.com/produc...
InertFluid/sk-cve-2026-26030-lab
Ethical, network-isolated Docker lab reproducing CVE-2026-26030 — Semantic Kernel in-memory vector store filter eval() RCE (patched in 1.39.4) | language: Python
5170Temp/CVE-2026-25212
POC for CVE-2026-25212 | topics: cve, cve-2026-25212, grafana, percona, pmm, poc, postgres, vulnerability | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
8988-who/MY_AI_Agent
渗透测试Agent/蓝队防守Agent | stars: 0 | forks: 0 | updated 2026-01-23T15:18:12Z | pushed 2026-01-23T15:18:09Z
Am1azi3ng/BT_SuperTools
蓝队IP封禁Tools工具 | language: Go | stars: 53 | forks: 3 | updated 2026-07-08T02:53:16Z | pushed 2025-09-04T02:30:11Z
zhzyker/dismap
Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点 | topics: cybersecurity, detection, fingerprint, fingerprint-scanner, golang-tools, identification, pentest-tool, pentest-tools, re...
yulate/IPCheck
检测IP地址是否为单位IP，用于蓝队溯源或者其他使用，可选择是否开启常见端口是否开放扫描 | language: Go | stars: 9 | forks: 0 | updated 2026-03-03T14:43:20Z | pushed 2024-03-28T17:36:49Z
misaki7in/ipfilter
IP地址白名单过滤器，可配合微步API分析，护网蓝队重保工具 | stars: 73 | forks: 7 | updated 2026-08-30T02:09:11Z | pushed 2023-06-29T01:49:18Z
weishen250/npscrack
蓝队利器、溯源反制、NPS 漏洞利用、NPS exp、NPS poc、Burp插件、一键利用 | language: Java | stars: 704 | forks: 71 | updated 2026-09-07T09:48:01Z | pushed 2025-04-26T11:51:31Z
RoomaSec/RmTools
蓝队应急工具 | language: YARA | stars: 544 | forks: 51 | updated 2026-08-22T20:39:08Z | pushed 2024-06-10T08:44:04Z
Am1azi3ng/WinTracePro
蓝队工具，一款小白都能用的Windows溯源Tools，支持AI一键分析 | stars: 71 | forks: 4 | updated 2026-09-06T14:20:57Z | pushed 2026-07-14T02:09:11Z
xiao-xian-ok/TingLan
一款基于流式处理架构的蓝队流量分析工具，集成Webshell检测、OWASP攻击识别、自动解码和隐写分析能力的工具/Stream-based Blue Team traffic analyzer with integrated Webshell detection, OWASP attack identification, auto-decoding, and steganography analysis. | language: Py...
Fausto-404/EFF-Monitoring
EFF-Monitoring（Efficient Monitoring，高效监控），是一款面向安全运营 / 蓝队的本地告警处理工具，聚焦“高效日志处理 + 自动化情报补全 + AI 研判”，帮助安全监测人员在攻防演练和日常值班中快速看懂告警、打通上下游。 | topics: monitoring-tool, security-operations | language: Python | stars: 20 | forks: 2 | u...