stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
arpsyndicate/vedas-signaturesVEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 12000 CVEs
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
olizimmermann/phishcollectorPhishCollector is a research framework for collecting, analysing, and tracking phishing sites.
expel-io/expel-intelThis is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums…
nict-csl/existEXIST is a web application for aggregating and analyzing cyber threat intelligence.
ciscocsirt/gosintThe GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
neo23x0/signature-baseYARA signature and IOC database for my scanners and tools
phishdestroy/destroylistReal-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats
