SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Repository Index
47,133 repositories indexed
1–24 of 35 · Most stars
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- ai-security
- alert-triage
- cybersecurity
- detection-engineering
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
ThePhish: an automated phishing email analysis tool
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Online hash checker for Virustotal and other services
Tool to gather Threat Intelligence indicators from publicly available sources
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
Machinae Security Intelligence Collector
OASIS TC Open Repository: Python APIs for STIX 2
- python
- stix
- stix2
- cyber-threat-intelligence
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
Z-Hound — a CSV-first collector that finds public threat reports and extracts structured IoCs without a database, LLM, or API key.
Botnet command & control monitor
Multithreaded threat Intelligence gathering built with Python3
- carbonblack
- python
- threatintel
Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
A framework for receiving and redistributing abuse feeds
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity