SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Repository Index
87,075 visible repositories in the index
1–24 of 46 · Most stars
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Open Cyber Threat Intelligence Platform
- cyber
- cti
- threat-intelligence
- security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Interesting APT Report Collection And Some Special IOCs
YARA signature and IOC database for my scanners and tools
- signature
- yara-rules
- ioc
- scanner
Vulnerability Intelligence Platform
- cve
- vulnerabilities
- security-tools
- nvd
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
Daily feed of bad IPs (with blacklist hit scores)
- security
- blacklist
- threats
- iptables
JA4+ is a suite of network fingerprinting standards
- cybersecurity
- ja3
- ja3-fingerprint
- jarm
A database of PHP security advisories
- composer
- packagist
- php
- vulnerabilities
Real-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats
- blacklist
- cybersecurity
- domains
- drainer
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
Microsoft Threat Intelligence Security Tools
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
- cisa-kev
- claude-ai
- cve
- cybersecurity
Cortex: a Powerful Observable Analysis and Active Response Engine
- response
- dfir
- analysis
- analyzer
Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
- phishing
- phishing-sites
- phishing-reports
- phishing-servers
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
- cisa-kev
- cve
- cve-poc
- cvss
ThePhish: an automated phishing email analysis tool
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc