RansomLook

RansomLook RansomLook は、ランサムウェアグループとマーケットを監視し、その被害者情報を抽出するためのツールです。 機能 ransomwatch をベースとしています。 主な変更点: すべてのデータは Valkey に保存されます スクレイピングはマルチスレッド化されています スクレイピングは Playwright で行われ、同時にスクリーンショットが撮影されます パーサーは現在 BeautifulSoup を使用しており、独立しています ローカルアカウントを作成すると、Web インターフェースを使用してグループの追加/編集/削除ができます すべての Web サイトは...

statecraftcyber

Statecraft Cyber Intelligence Threat intelligence platform in Portuguese built from scratch as a personal Blue Team project. It aggregates data from global open sources and turns it into technical briefings, classified news, enriched CVEs, and structured IOCs — all in PT-BR, continuously updated...

ioc

IoC 위협 인텔리전스 IoC + 다크 매터의 조각들. Gen Threat Labs에 의해 게시됨. 라이선스 이 저장소의 콘텐츠는 Detection Rule License DRL 1.1에 따라 배포됩니다...

standalone_tdo

TDO Standalone Extractor A powerful, standalone command-line tool for extracting Cyber Threat Intelligence CTI from documents using Large Language Models with advanced structured output capabilities. 🚀 Features Multi-format Document Support : PDF, DOCX, TXT, and Markdown files Advanced LLM...

ssh-honeypot-research

🍯 SSH Honeypot — Research & Threat Intelligence A medium-interaction Cowrie honeypot deployed on a rented public-internet Linux VPS, designed to attract, log and analyse real-world SSH brute-force traffic. Over an 8-day capture window the sensor recorded 37,477 sessions from 1,582 unique attacker...

osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, email and username OSINT, image intelligence, image authenticity checks and AI image detection. Website · OSINT Tools · Best OSINT Tools · AI OSINT Tools · llms.txt · AI Prompt Map OsintNET ...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

GOSINT

GOSINT - Open Source Threat Intelligence Gathering and Processing Framework The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

ioccheck

ioccheck 파일 해시, IP 주소 및 기타 손상 지표IOC를 조사하는 과정을 간소화하는 도구입니다. 기능 단일 명령어 또는 몇 줄의 Python 코드로 여러 위협 인텔리전스 서비스에서 해시를 조회합니다. 현재 지원하는 서비스: VirusTotal MalwareBazaar Shodan.io 계획된 지원: URLhaus OTX InQuest Labs MalShare Malpedia Maltiverse 빠른 시작 pip install ioccheck 코드를 직접 실행할 수도 있습니다. git clone...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

DepAlert

DepAlert Agent CTWall This tool is part of the CTWall platform. See: CTWall Description DepAlert is an open-source security gate for your CI/CD pipeline. It analyzes SBOMs against malware intelligence data and quickly tells you whether your build includes known malicious packages. DepAlert solves...

recon

The project has moved to monorepo. See https://github.com/pownjs/pown for more information. Recon Recon is a target reconnaissance framework powered by knowledge graphs. Using knowledge graphs instead of flat table representation is easier to find the relationships between different types of...

Katana

Katana-ds Katana-ds ds for dork scan is a simple python tool that automates Google Hacking/Dorking and supports Tor. It becomes a more powerful in combination with GHDB Note 25/09/2021 : This Repo is New but the script it self is old back when google dorking was something, i wrote this script bac...

ThreatPursuit-VM

/ || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT THREAT INTELLIGENCE VM Version 2020.1 [email protected] Created by: Dan Kennedy Jake Barteaux @day1player Blaine Stancill @MalwareMechanic...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

attackmapper

AttackMapper Attack Path Visualization & Threat Intelligence Platform Features • Installation • Usage • Threat Intel • Contributing Overview AttackMapper is a CLI tool for red team operations that generates attack paths, maps techniques to the MITRE ATT&CK framework, and integrates real-time thre...

vFeed

새 라이브러리 확인 https://github.com/vfeedio/pyvfeed vFeed 상호 연관 취약점 및 위협 인텔리전스 데이터베이스 래퍼 vFeed Python Wrapper / Database 는 확장 가능한 XML/JSON 스키마를 통해 CVE 항목에 대한 추가 구조화된 상세 타사 참조 및 기술적 특성을 제공하는 CVE, CWE, OVAL 호환 명명 체계 개념입니다. 또한 다른 표준 및 보안 참조와의 관계를 설명하기 위한 유연하고 포괄적인 어휘를 제공하여 CVE의 신뢰성을 향상시킵니다. vFeed API는 취약점...

NetSpecter

NetSpecter NetSpecter is a lightweight yet powerful asynchronous OSINT and reconnaissance engine built in Python. It combines multi-source intelligence gathering DNS, WHOIS, Web, TLS, HTTP, Geo, Reverse DNS with Shodan-powered security intelligence and full raw data access, providing a complete...

BlueBox

BlueBox 악성코드 분석 박스 및 사이버 위협 헌팅 무엇인가요? 악성코드, IP, 도메인, URL에 대한 위협 인텔리전스 데이터? 의심스러운 파일 또는 악성코드에 대한 빠른 분석! BlueBox는 특정 파일, IP, 도메인, URL에 대한 위협 인텔리전스 데이터를 수집하고 분석하는 OSINT오픈소스 인텔리전스 솔루션입니다. 포함된 기능 / 특징 악성코드 및 관측 가능한 지표IP, 도메인, URL, 해시에 대한 위협 인텔리전스 강화 제공 확장성 과 위협 정보 검색 속도 향상 을 위해 설계된 애플리케이션 Python3,...