#1Tools for collecting, analyzing, and operationalizing threat feeds, indicators of compromise (IOCs), and attack trends.
Kitploit recommended
fevar54/cve-2026-76461-detection-kit-Defensive detection kit for CVE-2026-76461, a critical SQL injection in Cisco Secure Email Gateway, with Sigma and YARA rules, IOCs, and remediation…
duggytuxy/data-shield_ipv4_blocklistCurated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…
graphworlok/cve-2021-35394-ecosystemTracking the family of unrelated IoT botnets sharing CVE-2021-35394 as a delivery vector — findings, relationships, methodology.
michel-dv/xz-utils-backdoor-case-studyTechnical case study of the XZ Utils backdoor (CVE-2024-3094), covering supply-chain trust abuse, malicious release artifacts, build-stage injection,…
0xblackash/cve-2026-76461Research repository for CVE-2026-76461, a critical SQL injection in Cisco Secure Email Gateway leading to root RCE, with detection rules, mitigation…
ethan-andrews/threatintel-aggregatorSelf-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs…
joshhighet/ransomwatchthe transparent ransomware claim tracker 🥷🏼🧅🖥️
garethmsheldon/cve-2026-22557-unifi-detectionDetection content for CVE-2026-22557 — UniFi Network Application unauthenticated path traversal (CVSS 10.0). Includes YARA, Sigma, KQL, Splunk SPL,…
twintproject/twintAn advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following,…
michenriksen/gitrobReconnaissance tool for GitHub organizations
cuckoosandbox/cuckooCuckoo Sandbox is an automated dynamic malware analysis system
netflix/security_monkeySecurity Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
teler-sh/telerReal-time HTTP Intrusion Detection
mozilla/mozdefDEPRECATED - MozDef: Mozilla Enterprise Defense Platform
deepfence/packetstreamer⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐
maliceio/maliceVirusTotal Wanna Be - Now with 100% more Hipster
hasecuritysolutions/vulnwhispererCreate actionable data from your Vulnerability Scans
mandiant/threatpursuit-vmThreat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and…
