
MANTIS
Multi-Sources Analysis & Threat Intelligence Search

Multi-Sources Analysis & Threat Intelligence Search

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

LD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.

Scans websites for SocGholish JavaScript injections, deobfuscates malicious payloads, and reports shadowing domain URLs used in malvertising…

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Centralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…

Install the tools and start Attacking , black-tool v5.5.5 ! ⬛

Malware/IOC ingestion and processing engine

Generates unique fingerprints of malware HTTP requests from pcap files using Tshark, enabling identification and grouping of malware families through…

IBM Security utilitary library in python. Search and query all sources: threat_activities and groups, malware_analysis, industries

Different methods to get current username without using whoami

Telegram Desktop Session Stealer

Suspicious DGA from PDNS and Sandbox.

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB…

RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically.