Tools

xghst0/reconkg

Vulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…

crowdsecurity/crowdsec

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

hackinghippo/log4shell_ioc_ips

log4j / log4shell IoCs from multiple sources put together in one big file (IPs) more coming soon (CVE-2021-44228)

mfmokbel/crawlector

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

the-art-of-hacking/h4cker

Curated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…

mandiant/capa

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

patrowl/patrowlhears

PatrowlHears - Vulnerability Intelligence Center / Exploits

nict-csl/exist

EXIST is a web application for aggregating and analyzing cyber threat intelligence.

watchguard-threat-lab/log4shell-iocs

A collection of IOCs for CVE-2021-44228 also known as Log4Shell

bushidouk/ransomware-tool-matrix

A resource containing all the tools each ransomware gangs uses

olivsec/loboguara

Cyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…

katrielmoses/voidaccess

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)