Threat Libraries

20 Components & Libraries

Sortby

Threat Libraries

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Cortex: a Powerful Observable Analysis and Active Response Engine

Cortex is written in Scala. The front-end uses AngularJS with Bootstrap. Its REST API is stateless which allows it to be horizontally scalable. The provided analyzers are written in Python. Additiona…

ThePhish: an automated phishing email analysis tool

The following diagram shows how ThePhish works at high-level: This example aims to demonstrate how a user can send an email to ThePhish for it to be analyzed and how an analyst can actually analyze t…

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

IntelMQ is frequently used for: It follows the following basic meta-guidelines:

DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs.

DaProfiler is an OSINT tool capable of tracing the digital identity of a target via social networks, emails, public information such as directories, business listings, etc. DaProfiler is also able to…

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

fingerprint all the things! More info about the fingerprinting methods, sample use-cases and research results will be added to the repo soon. Stay tuned! OR just install pyshark if you don't want to …

Scirius is a web application for Suricata ruleset management and threat hunting.

Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. Scirius will take care of refreshing the sources and comp…

Scripts and a (future) library to improve users' interactions with the ATT&CK content

This repository contains standalone scripts and utilities for working with ATT&CK. ATT&CK® is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of…

Python library using the MISP Rest API

PyMISP allows you to fetch events, add or update events/attributes, add or update samples or search for attributes. Only basic dependencies: And there are a few optional dependencies: Example: If you…

Cortex Analyzers Repository

OASIS TC Open Repository: Python APIs for STIX 2

This repository provides Python APIs for serializing and de-serializing STIX2 JSON content, along with higher-level APIs for common tasks, including data markings, versioning, and for resolving STIX …

The OSINT Omnibus (beta release)

By providing an easy to use interactive command line application, users are able to create sessions to investigate various artifacts such as IP addresses, domain names, email addresses, usernames, fi…

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

This is version 3 (beta) A (relatively) Unopinionated framework that faciliates Threat Modeling as Code married with Application Security Automation on a single Fabric A unified DevSecOps Framework t…

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

STIX-shifter is an open source python library allowing software to connect to products that house data repositories by using STIX Patterning, and return results as STIX Observations. This library tak…

Computer Aided Integration of Requirements and Information Security - Server

CAIRIS (Computer Aided Integration of Requirements and Information Security) is a platform for modelling secure and usable systems. CAIRIS was built from the ground-up to support usability, requireme…

🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

To overcome the filesize limit of 100mb on GitHub, the dataset is split by year as: We recommend using Pandas to load the dataset. Example to load a single year: Or to load everything as one big Data…

A toolkit for Security Researchers

1 positional arguments needed: Optional arguments: Optional arguments: 3 positional arguments needed: Optional arguments: 1 positional argument needed: Optional arguments: Please fork, create merge r…

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

cti-taxii-client is a minimal client implementation for the TAXII 2.X server. It supports the following TAXII 2.X API services: The easiest way to install the TAXII client is with pip The TAXII clien…