LindseyGray

whois

cyberchef-recipes

A list of cyber-chef recipes and curated links

openvpn

OpenVPN is an open source VPN daemon

pi-hole

A black hole for Internet advertisements

PENTESTING-BIBLE

articles

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

harpoon

CLI tool for open source and threat intelligence

vFeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

SysmonTools

Utilities for Sysmon

malcom

Malcom - Malware Communications Analyzer

IntelOwl

IntelOwl: manage your Threat Intelligence at scale

phishing_catcher

Phishing catcher using Certstream

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

maltrail

Malicious traffic detection system

yeti

Your Everyday Threat Intelligence

Fnord

Pattern Extractor for Obfuscated Code

CrowdFMS

CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the Private API system. This framework automatically downloads recent samples, which triggered an alert on the users YARA notification feed.

clara

Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets

CAPE

Malware Configuration And Payload Extraction

yaraml_rules

Security ML models encoded as Yara rules

qs_old

Command line tool for scanning streams within office documents plus xor db attack

IOCs

Repository containing IOCs, CSV and MISP JSON from our blogs

binsequencer

BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified pattern.

APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

AIL-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.