CyberThreatIntel
strangerealintel/cyberthreatintelAnalysis of malware and Cyber Threat Intel of APT and cybercriminals groups
curated-resourcesdigital-forensicsmalware-analysis+3
725
strangerealintel/cyberthreatintelAnalysis of malware and Cyber Threat Intel of APT and cybercriminals groups
typosquatter/ail-typo-squattingGenerate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.
chpratik/cve-2026-54121Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
oguz-kagan-akar/cve-2026-41940-analysisTechnical analysis of the cPanel/WHM auth bypass
garethmsheldon/cve-2025-60787-detection-motioneye-rce-via-config-injection
elceef/dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
opfour/coeus-ciCompetitive Intelligence from public data sources. Named after Coeus, the Greek Titan of the inquisitive mind.
infostealers-stats/data-breachA continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…
cybergabisoft/depalertDepAlert is an open-source security gate for your CI/CD pipeline. It analyzes SBOMs against malware intelligence data and quickly tells you whether…
rezmoss/sbomlyzeGit diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
zypherion-technologies/hallwatchUsermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.
neo23x0/lokiIOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…
aau-network-security/richkitDomain Enrichment Toolkit $ pip install richkit
edoardogerosa/dnsmorphDomain name permutation engine written in Go
alt3kx/wafarayEnhance your malware detection with WAF + YARA (WAFARAY)
fundacio-i2cat/infohoundInfoHound is an OSINT to extract a large amount of data given a web domain name.