CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
☆599Sep 16, 2026Updated this week
Alternatives and similar repositories for cti-expert
Users that are interested in cti-expert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path tem…☆2,629Aug 30, 2026Updated 3 weeks ago
- 🔌 A curated list of OSINT MCP servers. Pull requests are welcomed!☆493Updated this week
- Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connec…☆296May 12, 2026Updated 4 months ago
- High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.☆326May 6, 2026Updated 4 months ago
- Awesome Security lists for SOC/CERT/CTI☆1,917Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- MCP to help Defenders Detection Engineer Harder and Smarter☆489Jun 16, 2026Updated 3 months ago
- A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based be…☆272Updated this week
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- ThreatCheck - Select any indicator of compromise on any web page - or highlight an entire paragraph from a threat report - and instantly …☆34May 6, 2026Updated 4 months ago
- Passive OSINT engine: one seed domain → full infrastructure cluster. Automates Ryan McDonald's scam-kit fingerprinting methodology. crt.s…☆26May 25, 2026Updated 3 months ago
- Open-source AI-powered offensive security harness for automated penetration testing.☆2,814Updated this week
- A project designed to make the operationalization of open-source cyber threat intelligence more efficient.☆21Updated this week
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆70Jul 27, 2026Updated last month
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆6,272Aug 30, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag a…☆213Feb 26, 2026Updated 6 months ago
- Terraform-deployable Azure security lab with intentionally vulnerable resources for learning and practicing attack paths in your own tena…☆38Jul 24, 2026Updated last month
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆323May 14, 2026Updated 4 months ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆368Sep 8, 2026Updated last week
- A list of articles, videos, and tools related to the use of AI for OSINT.☆786May 5, 2026Updated 4 months ago
- A curated toolkit for Open-Source Intelligence (OSINT) investigations. This repository contains a collection of scripts, resources, and m…☆416Aug 24, 2026Updated 3 weeks ago
- AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone —…☆990Aug 10, 2026Updated last month
- Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can repla…☆1,684Sep 13, 2026Updated last week
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆323Sep 1, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Finding ClickFix and FakeCAPTCHA like it's 1999☆158Updated this week
- A collection of practical SOC investigation playbooks for common security alerts including brute-force attacks, phishing incidents, suspi…☆20Mar 15, 2026Updated 6 months ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17May 11, 2025Updated last year
- Repo to hold mcp server for velociraptor☆41Apr 15, 2026Updated 5 months ago
- OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.☆2,871Aug 29, 2026Updated 3 weeks ago
- Run TTPs, with AI!☆142Feb 23, 2026Updated 6 months ago
- A list of useful CyberChef recipes☆17Jun 20, 2025Updated last year
- ☆394Updated this week
- Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools…☆953Jun 12, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 8 months ago
- Security automation with n8n ideas: 100+ Red/Blue/AppSec workflows, integrations, and ready-to-run playbooks.☆959Sep 20, 2025Updated last year
- A comprehensive PowerShell toolkit for RDP forensics analysis, tracking connection attempts, authentication, sessions, and logoffs across…☆18Aug 26, 2026Updated 3 weeks ago
- An OSINT Mapping tool for research.☆656Jul 5, 2026Updated 2 months ago
- Automatically created C2 Feeds☆741Updated this week
- FWT is a security analysis and file monitoring tool that utilizes Sysmon events.☆29Jul 15, 2024Updated 2 years ago
- Username intelligence across 13+ platforms with confidence scoring, proxy support, and headless browser rendering.☆100Updated this week