Tools

katrielmoses/mailaccess

Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

center2055/onionhop

Privacy-first Desktop app that routes your traffic through Tor - Anonymous browsing made simple

ni5arga/sightline

An OSINT search engine for mapping real-world infrastructure from OpenStreetMap data

elastic/agent-skills

Official Elastic Skills

defenxor/dsiem

Security event correlation engine for ELK stack

prodaft/malware-ioc

This repository contains indicators of compromise (IOCs) of our various investigations.

shipsecai/studio

Workflow automation for Security Teams

a3sal0n/falcongate

A smart gateway to stop cyber criminals - Sponsored by Falcon Guard

ttlab-research/awesome-wazuh

🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM

mcp-shark/mcp-shark

Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between…

nicolasriverocorvalan/cloud-sniper

Virtual Security Operations Center

bushidouk/abused-legitimate-services

Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups

expert21/hermes-osint

Hermes — an ephemeral, Docker-powered OSINT framework for testing, tinkering, and secure investigative automation.

laugiov/scambuster

Defensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…

00gxd14g/misp-extractor

Extracts selected MISP attributes, including IP addresses, URLs, and hashes, into reusable output files.

malvuln/sigint-hombre

Dynamically generated Suricata rules from real-time threat feeds

ares-sys/uefi_bootkit_softlanding

First public analysis of SoftLanding UEFI bootkit: Ring -2 implant, CVE-2025-7029, 240+ Gigabyte boards, GPU AI evasion, dual C2. YARA + Sigma +…

clark-prog/blackout-public

Blackout — The Official Blackout Public FAFO Repo.