SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Repository Index
86,076 visible repositories in the index
1–22 of 22 · Most stars
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Open Cyber Threat Intelligence Platform
- cyber
- cti
- threat-intelligence
- security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Interesting APT Report Collection And Some Special IOCs
Vulnerability Intelligence Platform
- cve
- vulnerabilities
- security-tools
- nvd
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
JA4+ is a suite of network fingerprinting standards
- cybersecurity
- ja3
- ja3-fingerprint
- jarm
Real-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats
- blacklist
- cybersecurity
- domains
- drainer
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
- cisa-kev
- claude-ai
- cve
- cybersecurity
ThePhish: an automated phishing email analysis tool
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
- claude-code
- cti
- llm
- rag
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.