pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
abhinavbom/threat-intelligence-hunterCLI tool to search, aggregate, and store IOCs from multiple open security feeds and APIs, enabling local threat intelligence database creation and…
cve-search/cve-searchLocal CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.
certtools/intelmqMessage-queue-based threat intelligence feed collector and processor for CSIRTs. Automates ingestion, normalization, and sharing of security…
expel-io/expel-intelCurated repository of IOCs and threat intelligence from the Expel Intel Team, providing actionable indicators for detection and response workflows.
destiny-creates/goxlr-malware-familyReverse engineering repository for malware samples from goxlr.net and related domains, focusing on stealer variants, C2 infrastructure analysis, and…
amnestytech/investigationsCurated indicators of compromise (IOCs) from Amnesty International's technical investigations into targeted threats against human rights defenders,…
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
honeylabshq/spip-goLightweight low-interaction network honeypot sensor that captures TCP payloads, performs passive TLS/HTTP/SSH fingerprinting, and outputs structured…
rollwagen/abusechCommand-line client for abuse.ch threat intelligence APIs, enabling query and retrieval of Indicators of Compromise (IOCs) for threat hunting and…
niklasmato/fortileak-01-2025-beRepository documenting the Fortigate firewall vulnerability CVE-2022-40684 and publicly disclosed affected data for security research and defensive…
ciscocsirt/gosintFramework for collecting, processing, and exporting high-quality indicators of compromise (IOCs) to enrich security operations with structured threat…
thehive-project/cortexAutomated observable analysis engine for threat intelligence, digital forensics, and incident response, integrating with diverse analyzers via a…
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
grayxploit/cve-2026-0257Automated vulnerability scanner for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass) with TLS certificate enumeration, authentication…
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
inquest/omnibusModular OSINT framework for artifact investigation, session management, and multi-source intelligence collection across IPs, domains, hashes, and…
c3-h2/log4j_attacker_iplistCurated list of attacker IP addresses targeting the Log4j vulnerability (CVE-2021-44228) for threat intelligence, incident response, and network…
