threat-intelligence

ThePhish: an automated phishing email analysis tool

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

CLI tool for open source and threat intelligence

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

A curated list of annual cyber security reports

Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil

openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

A query aggregator for OSINT based threat hunting

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

Extract and aggregate threat intelligence.

A collection of resources for Threat Hunters

Comprehensive 2026 OSINT guide — 450+ tools, AI intelligence, methodologies & ethics across 35 sections for investigation & threat intel.

The Big Brother V6.0 is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.

Automatically created C2 Feeds

Kaspersky's GReAT KLara

Collection of knowledge about information security

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and Flare.

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Awesome list of keywords and artifacts for Threat Hunting sessions

Yet another Ransomware gang tracker

Warning lists to inform users of MISP about potential false-positives or other information in indicators

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Real-time OSINT command center for the Iran/Israel and Russia/Ukraine theaters — 50+ live open-source intelligence sources (news, Telegram, military aircraft & naval tracking, missile alerts, prediction & defense markets) in one dashboard. No API keys. Free. Next.js + TypeScript.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Clusters and elements to attach to MISP events or attributes (like threat actors)