KoodousFinder

KoodousFinder A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities Account and API Key Create a Koodous account and get your api key https://koodous.com/settings/developers Install $ pip install koodousfinder Arguments Param|...

dugganusa-ietf

DugganUSA — IETF Hackathon Contributions Real-world threat-intelligence contributions from DugganUSA LLC to the IETF Hackathon, offered to project champions as empirical grounding for standards work. We are a bootstrapped threat-intelligence shop. We run a public STIX 2.1 feed, an edge-blocking...

darwis-taxii

DARWIS TAXII A high-performance TAXII Trusted Automated eXchange of Indicator Information server written in Rust. Rust port of EclecticIQ OpenTAXII with full database compatibility. Features TAXII 1.x - Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 - Full REST API with...

attackintel

ОБНОВЛЕНИЕ 26 Nov 2018 MITRE объявил о прекращении поддержки API ATT&CK и вскоре полностью откажется от него. Организация перешла на использование STIX. Мой код останется доступным для ознакомления, но вы можете воспользоваться моим веб-приложением ATT&CK Intel, которое находится на начальной...

attack-stix-data

ATT&CK® STIX 数据 MITRE ATT&CK 是一个全球可访问的知识库，收录了基于真实世界观察得出的对手战术和技术。 ATT&CK 知识库被用作私营部门、政府以及网络安全产品和服务社区中开发特定威胁模型和方法论的基础。 本仓库包含以 STIX 2.1 JSON 集合形式表示的 MITRE ATT&CK 数据集。 如果您正在寻找表示 ATT&CK 的 STIX 2.0 JSON，请参阅我们的 MITRE/CTI GitHub 仓库， 其中包含相同的数据集，但使用 STIX 2.0，并且不提供本仓库所提供的集合功能。 仓库结构 root@kitploit: . ├─...

zettelforge

ZettelForge O único sistema de memória agêntica construído para inteligência de ameaças cibernéticas. Quando um analista sênior sai, dois ou três anos de contexto vão junto com ele — ambientes de clientes, investigações anteriores, TTPs de atores, padrões de falso positivo, cada "espera, já vimos...

ThreatPad

ThreatPad Una piattaforma collaborativa di prendere appunti in tempo reale, costruita per i team di Cyber Threat Intelligence CTI e operazioni di sicurezza. ThreatPad combina la velocità degli strumenti di produttività moderni con funzionalità specifiche per CTI: estrazione automatica di IOC,...

bandjacks

Bandjacks Cyber Threat Defense World Modeling System Übersicht Bandjacks ist ein umfassendes Cyber-Bedrohungsinformationssystem CTI, das: MITRE ATT&CK-Techniken aus Bedrohungsberichten in 12-40 Sekunden extrahiert Einen Wissensgraphen von Bedrohungsakteuren, Techniken und Abwehrmaßnahmen erstellt...

cart

CaRT Trasporto Compresso e RC4 Il formato di file CaRT viene utilizzato per archiviare/trasferire malware e i relativi metadati. Neutralizza il malware rendendolo non eseguibile e lo cifra in modo che i software antivirus non possano segnalare il file CaRT come malware. Vantaggi VELOCE: CaRT è...

scambuster

Piattaforma automatizzata di honeypot per scambaiting e threat intelligence...

CVE-2026-77761

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77751

A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining the configured MISP object-template...

CVE-2026-77755

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

CVE-2026-77761

misp-stix is a Python library for converting STIX documents to MISP events. A parser state isolation flaw allows per-document state (galaxies, galaxy clusters, passive DNS records, references, package titles, dates, and timestamps) to persist across conversions when the same parser instance is re...

CVE-2026-77761 Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

EUVD-2026-63883

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77761 Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77755 Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

CVE-2026-77755 Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

EUVD-2026-63881

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...