WhatHitMe is a Python3 tool which provides the possible Groups and their attributed Campaigns that may have attacked you in an incident, based on specific Techniques and Software you have identified (MITRE ATT&CK). It supports both enterprise, mobile and ICS matrixes. It also provides searches to known sources for these Groups for insight!
☆18Jun 29, 2023Updated 3 years ago
Alternatives and similar repositories for WhatHitMe
Users that are interested in WhatHitMe are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆84Aug 18, 2022Updated 4 years ago
- Most Responder's configuration power in your hand.☆54Jan 19, 2025Updated last year
- Less sugar (entropy) for your binaries☆33Sep 10, 2025Updated last year
- Your Skyfall Infrastructure Pack☆104Aug 1, 2026Updated 2 months ago
- COM Hijacking VOODOO☆388Sep 27, 2026Updated 2 weeks ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- TRC20 Wallet Listen Events☆11Aug 30, 2023Updated 3 years ago
- Sandbox samples and monitor them with kunai☆31Jul 21, 2026Updated 2 months ago
- Construct triage artifact based on rules☆16Oct 7, 2026Updated last week
- Sniffing files generator☆62Feb 24, 2025Updated last year
- Cleanup of older MISP events can require some work until now☆29Apr 5, 2026Updated 6 months ago
- Reports of cyber threat intelligence☆14Feb 15, 2023Updated 3 years ago
- Ransomware Chat Simulation☆23Mar 18, 2025Updated last year
- reveal xored strings in mirai binary☆12Oct 24, 2018Updated 7 years ago
- The EPSS Calculator is a user-friendly web application that calculates the EPSS (Exploit Prediction Scoring System) score based on a prov…☆17Nov 11, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆34Apr 29, 2026Updated 5 months ago
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syn…☆33Aug 7, 2024Updated 2 years ago
- Kunai Sandbox UI☆18Mar 2, 2026Updated 7 months ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- Firepit - STIX Columnar Storage☆18Jun 5, 2024Updated 2 years ago
- ☆10Aug 29, 2023Updated 3 years ago
- Static Decryptor for IcedID Malware☆18Oct 1, 2022Updated 4 years ago
- ☆12Jun 24, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 3 months ago
- Track C2 servers, tools, and botnets over time by framework and location☆44Feb 9, 2025Updated last year
- ☆19Dec 18, 2024Updated last year
- Rust procedural macro to insert a few asm! calls full of junk instructions in between every line of code.☆13May 27, 2023Updated 3 years ago
- Developed a model to detect Phished emails from legitimate ones using the Spam Assassin dataset. Extracted relevant features by processi…☆17Feb 20, 2022Updated 4 years ago
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆507Dec 19, 2023Updated 2 years ago
- reducing the entropy of your payload☆11Aug 15, 2022Updated 4 years ago
- Socks5 Proxy based on Websocket.☆15Jul 10, 2020Updated 6 years ago
- Semantic prefix map registry☆14Jul 2, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- Damn Vulnerable Rails app☆16Sep 20, 2012Updated 14 years ago
- A streaming multipart parser for Python.☆12Feb 9, 2024Updated 2 years ago
- ☆18May 27, 2023Updated 3 years ago
- Bypassing antivirus detection: old-school malware, new tricks☆69May 10, 2023Updated 3 years ago
- Defanger is a Notepad++ plugin that defangs/refangs malicious IOCs.☆25Jun 18, 2023Updated 3 years ago
- Python script to extract shellcode from object/executable files☆15Nov 7, 2022Updated 3 years ago