Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers
☆18Sep 24, 2026Updated last month
Alternatives and similar repositories for Open_Source-CTI-Tooling
Users that are interested in Open_Source-CTI-Tooling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A agentic Intel to hunt pipeline. Get hunting faster☆15Oct 19, 2026Updated last week
- Ransomware related materials, links, and technical stuff.☆15Sep 18, 2025Updated last year
- Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syn…☆34Aug 7, 2024Updated 2 years ago
- A pentest reporting tool written in Python. Free yourself from Microsoft Word.☆14Jun 13, 2023Updated 3 years ago
- Emails classification template using python. Technology stack: docker-compose, jupyter notebooks, fastapi, airflow, posgreSQL, superset, …☆11May 8, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Track C2 servers, tools, and botnets over time by framework and location☆44Feb 9, 2025Updated last year
- Google Dorks and keywords for bug hunters.☆17Aug 16, 2021Updated 5 years ago
- Jasmin ransomware web panel path traversal PoC☆20Apr 9, 2024Updated 2 years ago
- ☆10Oct 22, 2026Updated last week
- Latest PoC exploit & Writeups☆14Apr 8, 2025Updated last year
- Threat Hunting Malware Infrastructure☆12Dec 3, 2023Updated 2 years ago
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Oct 15, 2026Updated 2 weeks ago
- A simple script to create folders and a notes file. I use it for Tryhackme and Hackthebox☆20Jan 10, 2022Updated 4 years ago
- Server / egress IP lists for major commercial VPN services — one plain-text file per service, one IP per line.☆15Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆54Oct 23, 2024Updated 2 years ago
- CHAOS RAT web panel path RCE PoC☆29Apr 15, 2024Updated 2 years ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated 2 weeks ago
- Construct triage artifact based on rules☆20Oct 14, 2026Updated 2 weeks ago
- Passcrow is a system for community-assisted secure password recovery.☆14Jul 18, 2022Updated 4 years ago
- Hardware hacking of TL-WR841N router. Gained root shell access via the router's UART port. Extracted the file system via TFTP and extract…☆24Jun 16, 2024Updated 2 years ago
- A threat hunting process☆147Oct 2, 2026Updated 3 weeks ago
- A Model Context Protocol (MCP) server that integrates with the MISP (Malware Information Sharing Platform) to provide threat intelligence…☆12Apr 9, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 🔍 erroreyes – Lightweight Subdomain Enumeration Tool A Python-based tool that queries crt.sh certificate logs to discover subdomains ass…☆17May 8, 2025Updated last year
- Script to check for CVE-2023-36884 hardening☆15Jul 18, 2023Updated 3 years ago
- A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the r…☆25Updated this week
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- Firepit - STIX Columnar Storage☆18Jun 5, 2024Updated 2 years ago
- Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: …☆26Updated this week
- 🪛 Rust powered precision file tools for AI agents thats minimize context use: patch-based edits, kernel-enforced path confinement. Dram…☆26Mar 7, 2026Updated 7 months ago
- Elyzer is an email header analyzer, written in python, capable of detecting potential spoofing attempts.☆51Jun 27, 2026Updated 4 months ago
- Kunai Sandbox UI☆17Mar 2, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- An example ISMS created with Claude for a fictious organisation.☆21Apr 3, 2026Updated 6 months ago
- ☆22Jul 13, 2026Updated 3 months ago
- A CTI program management and production platform built around MISP☆51Updated this week
- The EPSS Calculator is a user-friendly web application that calculates the EPSS (Exploit Prediction Scoring System) score based on a prov…☆18Nov 11, 2024Updated last year
- Python for Defenders Course Resources☆21Oct 8, 2026Updated 3 weeks ago
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human…☆35Sep 22, 2026Updated last month