1.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+4,350 stars
from 19,973 · score 8.38
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
22 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.hagezi / dns-blocklists
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
- coins
- domains
- +14 more
+3,314 stars
from 24,875 · score 8.11
3.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+1,061 stars
from 14,399 · score 6.97
4.MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
- malware-analysis
- stix
- +14 more
+205 stars
from 6,437 · score 5.33
5.elceef / dnstwist
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
+65 stars
from 5,709 · score 4.19
6.yeti-platform / yeti
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
- enrichment
- intelligence
- +1 more
+28 stars
from 2,011 · score 3.37
7.emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
- detection
- malware
- phishing
- cybersecurity
- misp
- +14 more
+25 stars
from 1,356 · score 3.26
8.x0rz / phishing_catcher
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
- threatintel
+24 stars
from 1,808 · score 3.22
+23 stars
from 1,970 · score 3.18
10.certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
- phishing
- cert
- +10 more
+13 stars
from 1,129 · score 2.64
11.oasis-open / cti-python-stix2
OASIS TC Open Repository: Python APIs for STIX 2
- python
- stix
- stix2
- cyber-threat-intelligence
- json
- cti
- +1 more
+12 stars
from 428 · score 2.56
12.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
- osint
- dfir
- +12 more
+10 stars
from 921 · score 2.40
13.Neo23x0 / munin
Online hash checker for Virustotal and other services
+6 stars
from 852 · score 1.95
14.tomchop / malcom
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
- malware-analysis
- infosec
- +1 more
+4 stars
from 1,170 · score 1.61
15.sansecio / magevulndb
List of Magento extensions with known security issues.
- magento
- extensions
- vulnerability
+3 stars
from 219 · score 1.39
16.karimhabush / cyberowl
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
- cisa
+2 stars
from 262 · score 1.10
17.mlsecproject / combine
Tool to gather Threat Intelligence indicators from publicly available sources
+1 stars
from 654 · score 0.69
+1 stars
from 584 · score 0.69
+1 stars
from 535 · score 0.69
20.DefensePointSecurity / threat_noteArchived
DPS' Lightweight Investigation Notebook
+1 stars
from 432 · score 0.69
21.tenzir / threatbusArchived
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
- threat-intelligence
- threatintel
- threat-hunting
- ids
- zeek
- misp
- +7 more
+1 stars
from 270 · score 0.69
22.rastrea2r / rastrea2r
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
+1 stars
from 237 · score 0.69