#1Tools for collecting, analyzing, and operationalizing threat feeds, indicators of compromise (IOCs), and attack trends.
Kitploit recommended
cisagov/vulnrichmentA repo to conduct vulnerability enrichment.
bushidouk/ransomware-tool-matrixA resource containing all the tools each ransomware gangs uses
owasp/www-project-top-10-for-large-language-model-applicationsOWASP Top 10 for Large Language Model Apps (Part of the GenAI Security Project)
tirrenotechnologies/tirrenoOpen-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…
bert-janp/open-source-threat-intel-feedsThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…
wddadk/offensive-osint-toolsCurated list of OSINT tools for offensive security, covering email harvesting, subdomain enumeration, threat intelligence, and social engineering for…
te-k/harpoonCLI tool for open source and threat intelligence
mrwadams/stride-gptAn AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE…
sophoslabs/iocsSophos-originated indicators-of-compromise from published reports
bhavsec/reconspider🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
amnestytech/investigationsIndicators of Compromise from Amnesty International's cyber investigations
ninoseki/mitakaBrowser extension for OSINT search and IoC analysis. Auto-detects and refangs indicators of compromise, then queries 65+ threat intelligence and…
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
xaitax/sploitscanAggregates CVE details, exploit databases, and EPSS scores with AI risk assessment and vulnerability scanner import for prioritized patching.
googleprojectzero/0days-in-the-wildRepository for information about 0-days exploited in-the-wild.
theresafewconors/sootyThe SOC Analysts all-in-one CLI tool to automate and speed up workflow.
