788 matches found
investigations
Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...
pftriage
pftriage pftriage es una herramienta para ayudar a analizar archivos durante el triaje de malware. Permite a un analista ver y extraer rápidamente propiedades de un archivo para ayudar durante el proceso de triaje. La herramienta también tiene una función de análisis que puede detectar indicadore...
CVE-2019-19781_IOCs
CVE-2019-19781IOCs IOCs for CVE-2019-19781 citrixhoneypotnslookup.txt contains whois results for the IP addresses listed in ips.txt. these were the addresses that showed up most frequently in the logs of the honeypot discussed here:...
CVE-2022-22972-
CVE-2022-22972-IOC List IP ADRESSES • 23.36.163.250 • 64.32.6.143 • 217.175.49.100 HASH • 6f17c8af555321cca16fe1695cc420eb9079fd187b8fa71d840f3cfd1f796117 • 040db8eacbd482c12ba03ab1a7c738be • 97ac734b671c815c43ea3287732046d2177e5bdad63e12315acc4902b8baa04d •...
cve-2023-4966-iocs
Escanear IoCs de CVE-2023-4966 Script: check-cve-2023-4966.py El script busca en los registros de Citrix NetScaler posibles indicios de explotación de CVE-2023-4966. Uso root@kitploit: usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for possible...
xioc
xioc Extrae indicadores de compromiso de texto, incluyendo aquellos "escapados" como hxxp://banana.com, 1.1.1.1 y phish at malicious dot com. Instalación Descarga un binario precompilado desde https://github.com/assafmo/xioc/releases O... Usa go get: root@kitploit: go get -u github.com/assafmo/xi...
CVE-2021-44228_IoCs
CVE-2021-44228IoCs Public IoCs for log4j framework vulnerability CVE-2021-44228 log4shell based on multiple public sources...
wp-user-registration-vuln-checker
WordPress User Registration Checker for CVE-2026-1492 Read-only checker for owned WordPress sites that may be affected by CVE-2026-1492 in the User Registration & Membership plugin. It helps a site owner confirm plugin exposure and look for compromise indicators such as hidden administrator...
Zirconium
ZIRCONIUM ZIRCONIUM has been created to scan for Indicators of Compromise IOCs on Exchange Servers for signs of Zero-Day exploits used by HAFNIUM. ZIRCONIUM will search for: CVE-2021-26855 CVE-2021-26958 CVE-2021-26857 CVE-2021-27027065 Suspicious .dmp Files .aspnet Files Found in inetpub and...
Log4j-IOCs
Log4j log4shell CVE-2021-44228 Lista de IOCs públicos IOCs públicos sobre log4j CVE-2021-44228 Lista de IPssh 45.83.64.237 92.223.89.187 45.83.67.157 45.83.66.8 51.210.175.24 51.75.161.78 185.220.101.62 139.177.178.141 45.83.66.111 94.23.251.77 51.210.175.87 68.183.198.247 185.107.56.121...
Open-Source-Threat-Intel-Feeds
Free Threat Intel/IOC Feeds This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. The CSV ThreatIntelFeeds is stored in a structured manner based on the Vendor, Description, Category and URL. The vendors offering ThreatIntelFeeds a...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
cve-2025-55182-scanner
CVE-2025-55182 Indicator Scanner This repository provides a Python-based scanner for indicators of compromise related to CVE-2025-55182 React Server Components RCE and the specific multi-stage malware described in the Asleepace incident report. It is designed to run on Linux and macOS and focuses...
Malware-IOCs
Malware-IOCs This is where I'll post IOCs from malware investigations...
IOCs
This repository does not have a README...
akamai-security-research
Akamai Security Research This repository includes code and IoCs that are the product of research done in Akamai's various security research teams. You can read about our research in Akamai's Security blog. Copyright 2024 Akamai Technologies Inc. Licensed under the Apache License, Version 2.0 the...
Zeek-Intelligence-Feeds
Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...
Log4Shell
Log4Shell Este repositorio contiene IoCs que están asociados con la explotación de CVE-2021-4428...
MSRPC-to-ATTACK
MSRPC-To-ATT&CK A repository that maps commonly used MSRPC protocols to Mitre ATT&CK while providing context around potential indicators of activity, prevention opportunities, and related RPC information. List of MSRPC Protcols: MS-SCMR: Service Control Manager Remote Protocol MS-SCMR.md MS-DRSR:...