Lists (10)
Stars
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
An OSINT tool to search for accounts by username and email in social networks.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
IntelOwl: manage your Threat Intelligence at scale
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, …
The AI automation platform built for security teams and agents.
A DNS meta-query spider that enumerates DNS records, and subdomains.
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Malware Configuration And Payload Extraction
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.
SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.
AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident resp…
In this repository you will find sample code files for each day of the course "Python for OSINT. A 21-day course for beginners".
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
STIX data representing MITRE ATT&CK
Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for m…
IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix related
A Python RESTful API framework for online malware analysis and threat intelligence services.
Microsoft ICSpector (ICS Forensics Tools framework) is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files.
A Python library for parsing, manipulating, and generating STIX content.