Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
mwager/nodejs_exploit
Simple demo of a Remote Code Execution (RCE) Vulnerability in Node.js and how using distroless prevents it. | language: JavaScript
przemytn/CVE-2026-24061
CVE-2026-24061 PoC - telnetd auth bypass | language: Python
joshuavanderpoll/CVE-2026-2991
PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction. | topics: auth-bypass, cve, cve-2026-2991, explo...
abds059/APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773
language: Python
sobanahmed6061/CVE-2021-41773-RedTeam
Apache 2.4.49 Path Traversal RCE | language: Python
n0isegat3/RegPwnBRc4BOF
Brute Ratel C4 BOF of the CVE-2026-24291 | language: C
fevar54/CVE-2026-3888-POC-all-from-the-Qualys-platform.
This script demonstrates a race condition vulnerability in snapd that allows a local, unprivileged user to gain root privileges. The exploit works by recreating snap's private /tmp directory after it's cleaned up by syst...
Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix (commit 5d3de60) addressed unauthenticated configuration secrets exposure on the `/api/v4/config` endpoints by introducing `as_dict_secur
CVE-2026-32609；650419fb42a1cbad12ae67f57aa355a5；Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix (commit 5d3de60) addressed unauthenticated configuration secrets exposure on the `/api/v4...
JackalThe1/CyberGuard-AI
AI-powered IPS + IDS platform built on Python & Flask. Autonomously detects DDoS, SQLi, XSS, RCE, Log4Shell & 15+ threat types. Correlates events into MITRE ATT&CK kill chains, predicts escalation, and blocks attackers i...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Nervi0z/blue-team-tools
Curated Blue Team toolkit for defensive cybersecurity: asset discovery, vulnerability management, network monitoring, DFIR, threat intelligence, cryptography, endpoint security and SIEM/log management. | topics: asset-di...
WizardBornov/DFIR-Threat-Intelligence-Investigations
A collection of DFIR/Threat Intelligence Cases that I solved. | language: HTML | stars: 1 | forks: 0 | updated 2026-03-15T17:29:58Z | pushed 2026-03-15T17:29:54Z | homepage: https://dfir-threat-intelligence-investigat.ve...
Himanshu-84a/dfir-investigations
stars: 0 | forks: 0 | updated 2026-03-18T08:22:41Z | pushed 2026-03-18T08:22:37Z
abdulqadir-004/USBTrace-DFIR
Automated digital forensics pipeline for analyzing USB-based infection scenarios using memory and log correlation. | language: Python | stars: 1 | forks: 0 | updated 2026-03-15T18:54:47Z | pushed 2026-03-15T18:54:44Z
brady-dfir/python-ids
language: Python | stars: 0 | forks: 0 | updated 2026-03-20T20:32:09Z | pushed 2026-03-20T20:32:05Z
Abdullah0417/dfir-labs
Cloud DFIR labs (Azure + Sentinel): telemetry, hunting, incident reconstruction | topics: azure, dfir, forensics, incident-response, kape, kql, microsoft-sentinel, sysmon | language: Python | stars: 0 | forks: 0 | update...
ryanliupie/Detection-Engineering
Personal Notes on Security (DFIR) | stars: 0 | forks: 0 | updated 2026-03-16T01:19:23Z | pushed 2026-03-16T01:18:52Z
redzeptech/bozkurt-izi-main
Modular Windows DFIR Framework for artifact analysis, timeline reconstruction, and automated incident response. Specializes in RDP forensics, normalized event correlation (JSONL), and integrity-verified evidence packagin...
LETHAL-FORENSICS/macos-collector
macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR | topics: apple, dfir, dfir-tools, digital-forensics, forensic-tools, incident-response, macos | language: Shell | stars: 37 | forks: 3 | update...
reuteras/dfirws
Do DFIR work in a Windows Sandbox | topics: malware-analysis, powershell, windows-sandbox | language: PowerShell | stars: 21 | forks: 3 | updated 2026-03-20T12:34:25Z | pushed 2026-03-20T12:34:21Z | homepage: https://reu...