Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Actionable analytics designed to combat threats

This repository contains indicators of compromise (IOCs) of our various investigations.

A collection of intelligence about Log4Shell and its exploitation activity.

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

A platform for hreat intelligence & brand monitoring, dark web intelligence, osint, and more.

A reverse search tool for OSINT (Open Source Intelligence) gathering & facial recognition via Google Custom Search & Google Vision API's.

Interactive Threat Intelligence Bot that leverages serverless framework, AWS/GCP, and Slack

Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.

Collect, process, and automatically distribute Cyber Threat Intelligence from RSS feeds across multiple platforms.

A comprehensive security tool for detecting malicious domains that bypass DNS security controls. DNS Gap Hunter evaluates the effectiveness of DNS Firewalls and sinkhole mechanisms by testing them against domains from multiple threat intelligence sources, identifying security gaps, and providing detailed reports.

A self-hosted honeypot deployment platform that simplifies honeypot creation and management for security professionals, researchers, and educational institutions.

The Telegram Channel monitor with a full UI - can pull telegram channel messages, translate them, and preserve imagaes and video..

A Storm service that facilitates Yara scanning from a Synapse Cortex

YoungerSibling is an OSINT command-line tool designed for educational purposes, featuring web scraping, DNS lookups, EXIF data extraction, and username availability checks to help users learn and explore networking and cybersecurity concepts.

Enhancing MISP (Malware Information Sharing Platform & Threat Sharing)

ttpnav is a Python library that simplifies navigating MITRE ATT&CK data, enabling users to effortlessly retrieve comprehensive information about specific techniques with a single query. It provides details on mitigations, detections, procedure examples, groups, and related software/tools, streamlining cybersecurity analysis.

OSINT Multi Recon Tool is an advanced open-source intelligence (OSINT) gathering tool designed for ethical hackers, penetration testers, and cybersecurity professionals. This tool automates reconnaissance by collecting valuable information from various sources, including GitHub, LinkedIn, WHOIS, subdomains, and phone number lookups.

SecForge is a collection of practical cybersecurity and blue team projects focused on threat detection, intrusion detection, secure coding, vulnerability assessment, and security automation. It demonstrates real-world defensive security implementations using Python, Linux, and modern security tools in controlled lab environments.

AI-powered SOC tool for log analysis, incident detection, and response recommendations