domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

Domain Hunter 作者：Joe Vest @joevest 和 Andrew Chiles @andrewchiles 域名选择是渗透测试尤其是红队行动准备中的重要环节。通常，那些先前用于合法用途且已被正确分类的域名，只需几美元即可购买。这类域名可以帮助团队绕过基于信誉的Web过滤器和网络出口限制，用于钓鱼和C2相关任务。 这款基于Python的工具旨在快速查询Expireddomains.net搜索引擎，寻找已过期/可用的、具有先前使用历史的域名。然后，它可以选择性地针对Symantec Site Review（BlueCoat）、IBM X-Force和Cisco...

maps_scanner

MAPS Cloud Scanner 一款用于与 Windows Defender 的 MAPS （Microsoft Active Protection Service，微软主动保护服务）云文件信誉及动态签名交付系统交互的研究工具。 MAPS 是驱动 Defender 实时防护判定、样本提交流水线以及动态签名（SDN/DSS）交付的云后端。该工具使用与 Defender 客户端在线上相同的 Bond CompactBinaryV1 协议，能够直接与 MAPS 端点进行交互，用于安全研究目的。 功能特性 文件扫描 - 向 MAPS...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

cyberbro

Cyberbro Una aplicación simple que extrae tus IoCs de datos basura y verifica su reputación usando múltiples servicios. 🌐demo.cyberbro.net...

geo-recon

Geo-Recon Una herramienta CLI de OSINT diseñada para agilizar la consulta de reputación IP y geolocalización para analistas de seguridad. Prerrequisitos para Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip Si no usas Debian o Ubuntu, busca en sus respectivas...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

sage

Sage AI智能体安全 — AI编码助手的代理检测与响应 Sage 是一个轻量级安全层，用于保护 AI 代理免于执行危险操作。它拦截工具调用（shell 命令、URL 获取、文件写入），并在执行前通过多层威胁检测进行检查。 注意： Sage 可能以不同的产品名称出现（例如 Norton Sage、Avast Sage），具体取决于安装方式。详见品牌。 主要特性 URL 信誉 — 基于云端的恶意软件、钓鱼和诈骗 URL 检测 本地启发式规则 — 300+ 个基于 YAML 的威胁模式，用于检测危险命令、可疑 URL、凭证泄露和混淆行为 提示注入检测 —...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

Threat-Intelligence-Hunter

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own set of indicators. Threat-Intelligence-Hunter...

SIPI

Simple IP Information Tools sIPI for IP Reputation Data Analysis @st2labs Simple IP Information Tool @st2labs Author : Julian J. Gonzalez Caracuel - Twitter: @rhodius | @seguriadxato2 | @st2labs Vesion : 0.1 Abstracts This tool is aimed for Incident Response Team and anyone what's want to know th...

ARTIF

ARTIF ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collectin...

net-Shield

net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...

IP-reputation-snort-rule-generator

IP-reputation-snort-rule-generator 基于公共IP/域名信誉数据生成Snort规则或Cisco IDS签名的工具 由NCC Group Plc以开源形式发布 - http://www.nccgroup.com/ 由Will Alexander开发，will dot alexander at nccgroup dot com https://github.com/nccgroup/IP-reputation-snort-rule-generator 以AGPL协议发布，详见LICENSE文件了解更多信息 用法 ./tepig.pl...

revera

Revera La calificación crediticia de los paquetes npm. Revera te ayuda a decidir si vale la pena instalar un paquete antes de ejecutar npm install. Analiza la calidad del paquete, el mantenimiento, la seguridad, la salud del ecosistema y la confianza del publicador — y ahora propaga el riesgo de...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Threat actors are acquiring expired domains to inherit their website traffic and reputation with an aim to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain...

CVE-2026-12698

The wpForo Forum WordPress plugin before 3.1.3 does not restrict which profile fields a member may set when editing their own account, allowing users with a subscriber-level account to write administrator-controlled account-state and reputation fields on their own profile, including self-activati...