reconkg
xghst0/reconkgVulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…
threat-feeds-aggregatorsvulnerability-analysisnetwork-security+2
Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
xghst0/reconkgVulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
julioliraup/antiphishingAdvanced Phishing Protection: Suricata rulesets open and free
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
t-beckett/vulnbook-deletion_scheduled-85395299Offline-first vulnerability findings tracker that searches 11 CVE databases in parallel, adds EPSS/KEV enrichment, and manages coordinated disclosure…
t-beckett/vulnbookStatic vulnerability findings tracker with parallel search across 11 CVE databases, EPSS enrichment, CISA KEV badges, coordinated disclosure…
bruneaug/dshield-siemDShield Sensor Log Collection with ELK
soldier0x0/briefrOpen Vulnerability Intelligence platform, aggregated intel in one dashboard, with correlation and IOC lookups, completely self hosted. All resources…
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
opencti-platform/openctiOpen Cyber Threat Intelligence Platform
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
intelowlproject/intelowlScalable threat intelligence platform that enriches observables and files using 200+ analyzers, with built-in GUI, REST API, and automated workflows…
neo23x0/signature-baseYARA signature and IOC database for my scanners and tools
yeti-platform/yetiYour Everyday Threat Intelligence
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.