7974 matches found
ioc2rpz
ioc2rpz™ makes your threat intelligence actionable Table of Contents Short Summary Overview ioc2rpz™ is a place where threat intelligence meets DNS Architecture Overview How to use ioc2rpz™ ioc2rpz™ web interface Protocol Support Port Summary UDP Port 53 TCP Port 53 DNS over TLS / DoT Port 853 DN...
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...
cybersecurity-projects
Research Landscape Research Domains 01 — WEB SECURITY Application Security API Security Authentication Browser Security Security Controls | 02 — NETWORK SECURITY Reconnaissance Protocol Security Enterprise Networks Traffic Analysis Detection | 03 — MALWARE & RE Malware Analysis Reverse Engineerin...
spyder-osint
Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...
user-scanner
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 2720+ total scan vectors —including 210+ email-integrated sites and 2510+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...
Vanguard-Map
VANGUARD1 — Multi-Domain Tactical Intelligence Map A real-time 3D map of the world's moving things: live ship traffic AIS, aircraft, satellites, submarine cables, ports, chokepoints, and space weather — rendered as a 1.5M-point terrain cloud with day/night, ocean simulation, and cinematic camera...
puncia
PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...
recon-ng
The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...
Shadowbroker
🛰️ S H A D O W B R O K E R Global Threat Intercept — Real-Time Geospatial Intelligence Platform ShadowBroker ShadowBroker is a decentralized intelligence platform that aggregates real-time, multi-domain OSINT telemetry from 60+ live intelligence feeds into a single dark-ops map interface. Aircraft...
MISP
MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...
IoCs
IoCs Sophos-originated indicators-of-compromise from published reports /@&&@ . @ @ %@%, ./&@@&@@@@ @@ @%&@@& .@, @. @ @% @ && %@ .@@@@. &@&@//@& @/ @ @@ @ %@. ,%@@@@@@@@@&/ ., @% @@ @@,&@@ ,@ .@. @ , @& ,@@@@& .@ @ .@. @ .@ @& @@. %@@% ./. @,...
metabigor
Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...
0days-in-the-wild
0-days Exploited In-The-Wild This repository is a reference of documents about 0-day vulnerabilities detected as exploited in-the-wild. It includes both root cause analyses RCAs for each 0-day exploit as well as a table tracking each 0-day. These documents are intended to be viewed via the Github...
depx
depx Malicious package & supply-chain intelligence Features • Installation • Usage • Running depx • JSON • Join Discord depx is a fast, passive supply-chain intelligence CLI. It tells you whether a package is known malicious hijacked publishes, credential stealers, install-script backdoors by...
yara
!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...
misp-dashboard
misp-dashboard A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of...
public-research
Public Research Open source research and talks on threat intelligence, fingerprinting, and fraud detection. Talks 10/25/2024 - Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies 03/27/2025 - Anti-Fraud W3 Community Group - Mitigating Fingerprint Impersonation 10/23/2025...
CaA
Insight into information, exploring with intelligence in a thousand ways. First Author: EvilChen Second Author: 0chenccMystery Security Team Third Author: MingXiMystery Security Team README Version: English | 简体中文 Project Introduction CaA is an auxiliary project in the field of cybersecurity...
Awesome-FOFA
Awesome-FOFA Library 📒 中文 README Get Started with FOFA A Beginner’s Guide How to Get Free F-point from FOFA? FOFA and AI Next-Generation Attack Surface Inventory: Free Trial Available! Basic scenario How to use FOFA to discover free LLM resources? Elevating FOFA Search Efficiency through Novel...