SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Repository Index
80,339 visible repositories in the index
1–24 of 24 · Most stars
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
Indicators of Compromise from Amnesty International's cyber investigations
ThePhish: an automated phishing email analysis tool
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Tool to gather Threat Intelligence indicators from publicly available sources
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
Machinae Security Intelligence Collector
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
A vulnerability patch gathering tool
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
- nextjs
- open-source
- phishing-detection
- scam-detection