SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Repository Index
84,583 visible repositories in the index
1–24 of 41 · Most stars
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Open Cyber Threat Intelligence Platform
- cyber
- cti
- threat-intelligence
- security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Interesting APT Report Collection And Some Special IOCs
YARA signature and IOC database for my scanners and tools
- signature
- yara-rules
- ioc
- scanner
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
JA4+ is a suite of network fingerprinting standards
- cybersecurity
- ja3
- ja3-fingerprint
- jarm
Cyber Threat Intelligence Repository expressed in STIX 2.0
- stix
- cti
- cyber-threat-intelligence
- attack
Real-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats
- blacklist
- cybersecurity
- domains
- drainer
一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
- dingding-bot
- vulnerability
- vulnerability-analysis
- lark-bot
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
Indicators of Compromise from Amnesty International's cyber investigations
Cortex: a Powerful Observable Analysis and Active Response Engine
- response
- dfir
- analysis
- analyzer
Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
- phishing
- phishing-sites
- phishing-reports
- phishing-servers
ThePhish: an automated phishing email analysis tool
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence