Threat Feeds & Aggregators

nomi-sec/nvd-database

📕NVD Database

julioliraup/antiphishing

Advanced Phishing Protection: Suricata rulesets open and free

nextronsystems/iocs

Indicators of compromise from to analysis and research by Nextron Threat Research team

mitre-attack/attack-stix-data

STIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…

circl/ail-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

misp/misp-objects

Curated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…

misp/misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

ransomlook/ransomlook

Yet another Ransomware gang tracker

katrielmoses/voidaccess

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

facebook/threatexchange

Trust & Safety tools for working together to fight digital harms.

soldier0x0/briefr

Open Vulnerability Intelligence platform, aggregated intel in one dashboard, with correlation and IOC lookups, completely self hosted. All resources…

virustotal/yara-x

A rewrite of YARA in Rust.

yeti-platform/yeti

Your Everyday Threat Intelligence

wiz-sec-public/wiz-research-iocs

Curated public database of indicators of compromise aggregated by Wiz Research for threat detection, hunting, and incident response workflows.

criticalpathsecurity/zeek-intelligence-feeds

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…