CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code. 67+ commands, 35 techniques, no API keys required.
☆452Aug 6, 2026Updated this week
Alternatives and similar repositories for cti-expert
Users that are interested in cti-expert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path tem…☆2,260Updated this week
- 🔌 A curated list of OSINT MCP servers. Pull requests are welcomed!☆444Updated this week
- Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connec…☆293May 12, 2026Updated 2 months ago
- High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.☆323May 6, 2026Updated 3 months ago
- Awesome Security lists for SOC/CERT/CTI☆1,852Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- MCP to help Defenders Detection Engineer Harder and Smarter☆471Jun 16, 2026Updated last month
- Passive OSINT engine: one seed domain → full infrastructure cluster. Automates Ryan McDonald's scam-kit fingerprinting methodology. crt.s…☆25May 25, 2026Updated 2 months ago
- ThreatCheck - Select any indicator of compromise on any web page - or highlight an entire paragraph from a threat report - and instantly …☆34May 6, 2026Updated 3 months ago
- A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based be…☆263Updated this week
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆2,884May 8, 2026Updated 3 months ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- Terraform-deployable Azure security lab with intentionally vulnerable resources for learning and practicing attack paths in your own tena…☆37Jul 24, 2026Updated 2 weeks ago
- Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed atta…☆1,701Updated this week
- A collection of practical SOC investigation playbooks for common security alerts including brute-force attacks, phishing incidents, suspi…☆20Mar 15, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag a…☆212Feb 26, 2026Updated 5 months ago
- A project designed to make the operationalization of open-source cyber threat intelligence more efficient.☆19Updated this week
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆68Jul 27, 2026Updated 2 weeks ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆321May 14, 2026Updated 2 months ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆304Jul 27, 2026Updated 2 weeks ago
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆268Updated this week
- Finding ClickFix and FakeCAPTCHA like it's 1999☆152Updated this week
- A curated toolkit for Open-Source Intelligence (OSINT) investigations. This repository contains a collection of scripts, resources, and m…☆397Jul 29, 2026Updated last week
- A list of articles, videos, and tools related to the use of AI for OSINT.☆741May 5, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM.…☆1,574Updated this week
- A comprehensive PowerShell toolkit for RDP forensics analysis, tracking connection attempts, authentication, sessions, and logoffs across…☆18May 27, 2026Updated 2 months ago
- AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone —…☆960Updated this week
- Run TTPs, with AI!☆140Feb 23, 2026Updated 5 months ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17May 11, 2025Updated last year
- Repo to hold mcp server for velociraptor☆39Apr 15, 2026Updated 3 months ago
- OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.☆1,688Jul 21, 2026Updated 2 weeks ago
- ☆367Jul 19, 2026Updated 3 weeks ago
- Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools…☆796Jun 12, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆23Updated this week
- A list of useful CyberChef recipes☆16Jun 20, 2025Updated last year
- An OSINT Mapping tool for research.☆626Jul 5, 2026Updated last month
- A collection of CVEs weaponized by ransomware operators☆149Jun 28, 2026Updated last month
- Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&C…☆1,112Updated this week
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆16Jan 17, 2026Updated 6 months ago
- Open-source LLM red-teaming technique toolkit (162 transforms, 36 mutators, 25 tool surfaces). MIT.☆337Jun 9, 2026Updated 2 months ago