Threat-intelligence Libraries

14 Components & Libraries

Sortby

Threat-intelligence Libraries

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Cortex: a Powerful Observable Analysis and Active Response Engine

Cortex is written in Scala. The front-end uses AngularJS with Bootstrap. Its REST API is stateless which allows it to be horizontally scalable. The provided analyzers are written in Python. Additiona…

ThePhish: an automated phishing email analysis tool

The following diagram shows how ThePhish works at high-level: This example aims to demonstrate how a user can send an email to ThePhish for it to be analyzed and how an analyst can actually analyze t…

DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs.

DaProfiler is an OSINT tool capable of tracing the digital identity of a target via social networks, emails, public information such as directories, business listings, etc. DaProfiler is also able to…

Scripts and a (future) library to improve users' interactions with the ATT&CK content

This repository contains standalone scripts and utilities for working with ATT&CK. ATT&CK® is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of…

Cortex Analyzers Repository

OASIS TC Open Repository: Python APIs for STIX 2

This repository provides Python APIs for serializing and de-serializing STIX2 JSON content, along with higher-level APIs for common tasks, including data markings, versioning, and for resolving STIX …

The OSINT Omnibus (beta release)

By providing an easy to use interactive command line application, users are able to create sessions to investigate various artifacts such as IP addresses, domain names, email addresses, usernames, fi…

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

STIX-shifter is an open source python library allowing software to connect to products that house data repositories by using STIX Patterning, and return results as STIX Observations. This library tak…

🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

To overcome the filesize limit of 100mb on GitHub, the dataset is split by year as: We recommend using Pandas to load the dataset. Example to load a single year: Or to load everything as one big Data…

A toolkit for Security Researchers

1 positional arguments needed: Optional arguments: Optional arguments: 3 positional arguments needed: Optional arguments: 1 positional argument needed: Optional arguments: Please fork, create merge r…

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

cti-taxii-client is a minimal client implementation for the TAXII 2.X server. It supports the following TAXII 2.X API services: The easiest way to install the TAXII client is with pip The TAXII clien…