Threat Intelligence

ranguli/ioccheck

A tool for simplifying the process of researching IOCs.

soteria-security/hafnium-ioc

A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

kolya5544/bearftp

Honeypot FTP server written in .NET Core (C#) for both Linux and Windows.

m-mizutani/alertresponder

Automatic security alert response framework by AWS Serverless Application Model

mellow-hype/c2finder

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

jxlil/pwndb

Tor-based leaked credential search tool that queries the pwndb2 hidden service to find emails and passwords exposed in data breaches, with wildcard…

michaelsanford/log4shell-honeypot

Dockerized honeypot for CVE-2021-44228.

przemoc/xz-backdoor-links

apocalypxze: xz backdoor (2024) AKA CVE-2024-3094 related links

lopqto/cve-2021-41773_honeypot

Lightweight honeypot for Apache HTTP Server path traversal vulnerability CVE-2021-41773, designed to capture and log exploitation attempts.

insomnisec/detections-cve-2026-31431

Detection rules, YARA signatures, auditd/Wazuh rules, and MISP event templates for CVE-2026-31431 Linux kernel LPE vulnerability (Copy Fail).…

spinfosecurity/bas-guardian

Free BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS…

leetxyz/cve-2021-44228-advisories

List of company advisories log4j

insomnisec/detections-cve-2026-23918

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl

below0day/honeypot-logs-cve-2025-5777

CitrixBleed 2 NetScaler honeypot logs

sucuri-labs/cve-2025-57819-ioc-check

This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819

tracehound/tracehound

Operational security controls with forensic guarantees