Threat Libraries

21 Components & Libraries

Sortby

Threat Libraries

Computer Aided Integration of Requirements and Information Security - Server

CAIRIS (Computer Aided Integration of Requirements and Information Security) is a platform for modelling secure and usable systems. CAIRIS was built from the ground-up to support usability, requireme…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Python library using the MISP Rest API

PyMISP allows you to fetch events, add or update events/attributes, add or update samples or search for attributes. Only basic dependencies: And there are a few optional dependencies: Example: If you…

Scirius is a web application for Suricata ruleset management and threat hunting.

Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. Scirius will take care of refreshing the sources and comp…

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

IntelMQ is frequently used for: It follows the following basic meta-guidelines:

Information about my experiences in cybersecurity :skull:

Information about my cybersecurity experiences ... This repository is divided by the next sections: Bibliography

Cortex: a Powerful Observable Analysis and Active Response Engine

Cortex is written in Scala. The front-end uses AngularJS with Bootstrap. Its REST API is stateless which allows it to be horizontally scalable. The provided analyzers are written in Python. Additiona…

Cortex Analyzers Repository

OASIS TC Open Repository: Python APIs for STIX 2

This repository provides Python APIs for serializing and de-serializing STIX2 JSON content, along with higher-level APIs for common tasks, including data markings, versioning, and for resolving STIX …

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

cti-taxii-client is a minimal client implementation for the TAXII 2.X server. It supports the following TAXII 2.X API services: The easiest way to install the TAXII client is with pip The TAXII clien…

The OSINT Omnibus (beta release)

By providing an easy to use interactive command line application, users are able to create sessions to investigate various artifacts such as IP addresses, domain names, email addresses, usernames, fi…

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

This is version 3 (beta) A (relatively) Unopinionated framework that faciliates Threat Modeling as Code married with Application Security Automation on a single Fabric A unified DevSecOps Framework t…

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

STIX-shifter is an open source python library allowing software to connect to products that house data repositories by using STIX Patterning, and return results as STIX Observations. This library tak…

A toolkit for Security Researchers

1 positional arguments needed: Optional arguments: Optional arguments: 3 positional arguments needed: Optional arguments: 1 positional argument needed: Optional arguments: Please fork, create merge r…

Scripts and a (future) library to improve users' interactions with the ATT&CK content

This repository contains standalone scripts and utilities for working with ATT&CK. ATT&CK® is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of…

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

fingerprint all the things! More info about the fingerprinting methods, sample use-cases and research results will be added to the repo soon. Stay tuned! OR just install pyshark if you don't want to …

:wolf: Malware analysis platform

Freki is a free and open-source malware analysis platform. Freki was presented at the XXI Brazilian Symposium on Information and Computational Systems Security (SBSeg 2021). This project is licensed …

DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs.

DaProfiler is an OSINT tool capable of tracing the digital identity of a target via social networks, emails, public information such as directories, business listings, etc. DaProfiler is also able to…

ThePhish: an automated phishing email analysis tool

The following diagram shows how ThePhish works at high-level: This example aims to demonstrate how a user can send an email to ThePhish for it to be analyzed and how an analyst can actually analyze t…

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

To overcome the filesize limit of 100mb on GitHub, the dataset is split by year as: We recommend using Pandas to load the dataset. Example to load a single year: Or to load everything as one big Data…