#1用于收集、分析和操作威胁源、危害指标（IOC）和攻击趋势的工具。
Kitploit 推荐
aikidosec/safe-chainProtect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
trufflesecurity/trufflehog查找、验证和分析泄露的凭证
xaitax/sploitscan整合CVE详情、漏洞利用数据库和EPSS评分，结合AI风险评估与漏洞扫描器导入，实现优先级修补。
cisco-ai-defense/skill-scannerSecurity Scanner for Agent Skills
nolabs-ai/nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxing
misp/misp-objectsCurated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
crowdsecurity/crowdsec开源IDS/IPS和WAF引擎，通过分析日志和HTTP请求来检测和阻止恶意IP，利用众包社区黑名单实现实时威胁情报。
aquasecurity/vuln-listNVD, Ubuntu, Alpine
themittenmac/truetree一个用于在 macOS 上生成类似 pstree 输出的命令行工具，具有额外的 PID 捕获功能。
tenzir/tenzir使用基于管道的数据流，大规模收集、解析、规范化、聚合、存储、查询和路由安全遥测数据，用于威胁检测和事件响应。
domcyrus/rustnet针对终端进行按进程的网络监控，具备深度包检测功能。跨平台，沙箱化。
vpierre/ndaal_public_sbom_auditorOffline single-binary web app that ingests CycloneDX, SPDX and syft SBOMs, runs an ensemble of CVE scanners, enriches findings with EPSS, CISA-KEV…
elastic/detection-rules开发、验证并发布适用于 Elastic Security 的 SIEM 检测规则，提供 Python CLI 工具、KQL 解析、Kibana 集成以及打包好的威胁狩猎查询。
luckypipewrench/pipelockOpen-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…
duggytuxy/data-shield_ipv4_blocklistCurated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…
0xblackash/cve-2026-109618关于 PHP2Shell 远程代码执行漏洞（CVE-2026-109618、CVE-2026-109619）的技术公告，涵盖根本原因、利用途径、检测方法以及 PHP 缓解措施指导。
