Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
47,133 repositories indexed
73–96 of 99 · Most stars
Open Source Threat Intelligence Platform
🗄EOS Tracker: Real time block explorer for EOS Blockchain
Public repository for improvements to the EXTRABACON exploit
Check a seller, recruiter or landlord against 3,400+ public sources before you trust them. A verdict in plain words and a saved receipt behind every finding. Runs on your PC.
A library for allowing apps to easily use different auth providers.
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
Integrates Spiffe and Vault to have secretless authentication
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
A mirror of the nettle repository
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
go-fasttld is a high performance effective top level domains (eTLD) extraction module.
ROP Wargame repository
The plugin repository for Honeycomb, the honeypot framework by Cymmetria
Medusa Repository: Transynther tool and Medusa Attack
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
Quickly look up hashes in your terminal using the HashMob API 🔥
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing