English

← Back to list

WatchVuln-web: an open source loophole intelligence monitoring tool, 7x24 hours to secure you

itadol5j

In the area of cybersecurity, timely access to information on loopholes is crucial. However, in the face of more than 99 per cent of the CVE loophole that is not relevant, security personnel are often overwhelmed by various types of “threat information” from RSS and Public Code. I'd like to introduce to you today an open source.WatchVuln-webHelp you filter the noise and focus on the high-value holes that really need to be alert!

WatchVuln-web cover

• Project address

GitHub:Gythub.com/muyuanlove/WattVuln-web

Original items:I'm not sure if you're going to be able to do that.

Online presentation:http://watchvuln.muyuanhuck.cn/

WatchVuln-web?

WatchVuln-web Yes Visualize two-part version of WatchVuln, provides a whole house Web application dashboard for real-time viewing and monitoring of gap data.

Unlike the original Webbook push to nails/fly books, WatchVuln-web makes youCheck for leak information directly in the browser, does not need to open various IM tools, especially for safe transport personnel with fish screens.

Core characteristics

1. Real-time loophole transmission and presentation

Receive gap information from gap scanning tools or security data sources through the WebHOK mechanism and modern Web interfaceReal time presentationTo users.

2. Multi-dimensional screening and search

  • PressSerious levelScreening (high/medium/low/all)
  • Keyword Search(title, CVE, unique identifier)
  • Flexible query and filter functions

3. Presentation of detailed bullet windows

Fullscreen after card clickCan not open messageThe description of the gap, the scope of the impact and the recommendations for repair are clear.

4. Day/night pattern

SupportTheme SwitchTo fit the different uses, protect your eyes.

5. Response layout

Perfect fit.Superwidescreen(with fish screens), one screen shows more leaks.

6. New gap window alarms

When new loopholes are discoveredAutoBox AlarmTo ensure that important information is kept under review.

• An integrated source of information on loopholes (9 leading sources of authority)

SourceAddressSend Policy
Ali Yun HoleI'm sorry, avd.aliyun.comHigh-risk or serious
Nagato's hole.I'm sorry, Jack.High risk/serious + Chinese title
OSS Open Source Security InformationOScs1024.comHigh risk/serious + early warning label
Chiansin is threatening intelligence.Qianxin.comHigh risk/serious + POC public
Microstep Online Research Response CentreI don't know.High-risk or serious
Seebug.I'm sorry, seebug.High-risk or serious
The Celebrity Hole Alert.I don't know.High-risk or serious
CISA KEVI don't know, cisa.Send All
Struts2 Security BulletinsI'm sorry, apace.High-risk or serious

Supported delivery channels (10+)

WachVuln supports a rich way of sending:

  • Nail team robot.
  • Micro-Intelligence Cluster Robot
  • Flying Book Group Robot
  • Blue group robot.
  • Server
  • PushPlus
  • Slack Webhook
  • Telegram Bot
  • Custom Bark Service
  • Custom Webbook Service

• Technology warehouse

  • Node.js V22.8.0 - Server operating environment
  • Express.js — Web Frame
  • Sock. - Real-time communications
  • Better-SQLite3 - High performance lightweight database
  • React + TypeScript - Modern front-end framework
  • Lucide React - Icon Library

Rapid deployment

Mode 1: Docker Company (recommended)

git clone https://github.com/muyuanlove/WatchVuln-web.git
cd WatchVuln-web
docker-compose up -d

Mode 2: Manual deployment

git clone https://github.com/muyuanlove/WatchVuln-web.git
cd WatchVuln-web
npm install
npm start

Mode 3: Docker Run original WatchVuln

# 钉钉机器人
docker run --restart always -d \
  -e DINGDING_ACCESS_TOKEN=xxxx \
  -e DINGDING_SECRET=xxxx \
  -e INTERVAL=30m \
  -e ENABLE_CVE_FILTER=true \
  zemal/watchvuln:latest

Attention

If Docker is deployed, make sure data The directory has write permission:

sudo chown -R 1000:1000 ./data
sudo chmod -R 755 ./data

WatchVuln-web?

  • Filter noise - Only high-value holes to avoid overloading.
  • Multisource Aggregation - Nine major power loopholes, full coverage
  • Smart to weigh. - Same CVE, multiple sources only once.
  • Real time alarm - 7x24-hour surveillance.
  • Visualized viewer - Goodbye to the cumbersome IM tool, viewer directly
  • Open Source Free - MIT protocol, freely customised

Application of scenes

  • Corporate security teams
  • Security researchers
  • Hole Response Centre
  • Red team/Blue team members
  • Personal safety lovers

Summary

WatchVuln-web is a pieceLightweight, efficient, visualizedA leaky intelligence monitoring tool. It addresses the pains of security personnel being drowned by massive holes in information, allowing you to focus only on high-value loopholes that really require vigilance through smart filtering and aggregation.

Both corporate security teams and individual researchers deserve to be deployed.7x24 hours to keep you safe.I don't know.

Focus on valuable loopholes, not be drowned by CVE numbers!