Repository Index

DNS-Blocklists: For a better internet - keep the internet clean!

• dns
• ads
• blacklist
• blocklist

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

• ai-security
• alert-triage
• cybersecurity
• detection-engineering

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns

IntelOwl: manage your Threat Intelligence at scale

• security-tools
• python
• threat-intelligence
• ioc

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

• malware
• virustotal
• malpedia
• urlhaus

Indicators of Compromises (IOC) of our various investigations

• ioc
• malware
• yara
• misp

Phishing catcher using Certstream

• phishing
• threat-intelligence
• certificate-transparency
• osint

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

OpenSOC Apache Hadoop Code

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

Sandia Cyber Omni Tracker (SCOT)

• perl
• javascript
• cyber-security
• incident-response

List of Magento extensions with known security issues.

• magento
• extensions
• vulnerability

Protect your SIP Servers from bad actors at https://sentrypeer.org

• sip
• voip
• security-tools
• honeypot

Multithreaded threat Intelligence gathering built with Python3

• carbonblack
• python
• threatintel

A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.

Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain