SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Repository Index
47,133 repositories indexed
1–24 of 49 · Most stars
Exploitation Framework for Embedded Devices
The recursive internet scanner for hackers. 🧡
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
The repository host gives no description.
- threat-detection
- threat-hunting
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
- google-chrome
- hindsight
- chrome
- forensics
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
ThePhish: an automated phishing email analysis tool
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence