aquasecurity/vuln-list-redhatStructured repository of Red Hat security advisories and vulnerability metadata, designed for integration into automated vulnerability scanning and…
gnomeman/badbanana-threat-observatoryThreat intel observatory aggregating CISA KEV, ThreatFox, URLhaus, and MalwareBazaar feeds with search, change tracking, and STIX/CSV/JSONL export.
functori/argos/argosAnalysis and Representation of Graphs of Suspicious Operations (Analyse et Représentation des Graphes des Opérations Suspectes)
ransomlook/ransomlookAutomated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…
expel-io/expel-intelCurated repository of IOCs and threat intelligence from the Expel Intel Team, providing actionable indicators for detection and response workflows.
cve-search/cve-searchLocal CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.
aquasecurity/secfixes-trackerWeb-based vulnerability fix tracker for Alpine Linux that ingests security databases and NVD feeds to monitor CVE fix status across packages.
hurricanelabs/machinaeAutomated security intelligence collector that queries public feeds and APIs for threat data on IPs, domains, URLs, hashes, and SSL fingerprints,…
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
emergingthreats/threatresearchProofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
certtools/intelmqMessage-queue-based threat intelligence feed collector and processor for CSIRTs. Automates ingestion, normalization, and sharing of security…
pirxthepilot/wtfisPassive hostname, domain and IP lookup tool for non-robots
montysecurity/c2-trackerLive Feed of C2 servers, tools, and botnets
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
kaal22/darkgrid3D threat intelligence dashboard that visualizes malicious infrastructure from OSINT sources like AbuseIPDB and OpenPhish, with a live threat feed,…
patrowl/patrowlhearsReal-time vulnerability intelligence platform aggregating CVE, exploits, and threat news for SOC and threat hunting teams.
mfmokbel/crawlectorThreat hunting framework that scans websites for malicious objects using Yara rules, URLhaus feeds, TLSH hashing, and deep object extraction, with…
rollwagen/abusechCommand-line client for abuse.ch threat intelligence APIs, enabling query and retrieval of Indicators of Compromise (IOCs) for threat hunting and…
