Tools

fastfire/deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

ransomlook/ransomlook

Yet another Ransomware gang tracker

aquasecurity/vuln-list-redhat

Red Hat security advisories

gnomeman/badbanana-threat-observatory

Threat intel observatory aggregating CISA KEV, ThreatFox, URLhaus, and MalwareBazaar feeds with search, change tracking, and STIX/CSV/JSONL export.

nomi-sec/nvd-database

📕NVD Database

functori/argos/argos

Analysis and Representation of Graphs of Suspicious Operations (Analyse et Représentation des Graphes des Opérations Suspectes)

expel-io/expel-intel

This is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums…

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

ninoseki/mihari

A query aggregator for OSINT based threat hunting

aquasecurity/secfixes-tracker

Forked from https://gitlab.alpinelinux.org/kaniini/secfixes-tracker

hurricanelabs/machinae

Automated security intelligence collector that queries public feeds and APIs for threat data on IPs, domains, URLs, hashes, and SSL fingerprints,…

pedramamini/threatingestor

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

emergingthreats/threatresearch

Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation

certtools/intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

pirxthepilot/wtfis

Passive hostname, domain and IP lookup tool for non-robots

montysecurity/c2-tracker

Live Feed of C2 servers, tools, and botnets

inquest/threatkb

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)