Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving to other types of threats.
☆415Jan 29, 2026Updated 7 months ago
Alternatives and similar repositories for ThreatActors-TTPs
Users that are interested in ThreatActors-TTPs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of CVEs weaponized by ransomware operators☆153Aug 30, 2026Updated 2 weeks ago
- An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz☆430Aug 13, 2026Updated last month
- A resource containing all the tools each ransomware gangs uses☆1,442Aug 29, 2026Updated 2 weeks ago
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆124Oct 29, 2024Updated last year
- IOCs collected during day-to-day activities☆151Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Yet another Ransomware gang tracker☆670Updated this week
- Telegram Monitor☆374Jun 10, 2025Updated last year
- A collection of phishing samples for researchers and detection developers.☆462Sep 8, 2026Updated last week
- Collection of Cyber Threat Intelligence sources from the deep and dark web☆7,281Updated this week
- Extract C2 Traffic☆255Nov 25, 2024Updated last year
- Automatically created C2 Feeds☆741Updated this week
- TL;DR: Mutate a binary to identify potential exploit candidates☆11Jan 12, 2026Updated 8 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆673Aug 4, 2025Updated last year
- Encoder PHP webshell to bypass WAF using XOR operations.☆56Aug 2, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- the transparent ransomware claim tracker 🥷🏼🧅🖥️☆1,118Mar 3, 2026Updated 6 months ago
- Live Feed of C2 servers, tools, and botnets☆785Apr 13, 2026Updated 5 months ago
- OpenCTI.BR ThreatFeeds Public Repository☆124Updated this week
- MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs☆761Feb 1, 2026Updated 7 months ago
- A curated list of Awesome Threat Intelligence Blogs☆558Jun 12, 2026Updated 3 months ago
- Interesting APT Report Collection And Some Special IOCs☆3,093Sep 8, 2026Updated last week
- eml metadata parser.☆17Jan 24, 2023Updated 3 years ago
- ☆13Mar 28, 2026Updated 5 months ago
- A repo containing some tooling build to assist with reverse engineering malware samples☆16Jul 22, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Indicators of compromise☆19May 18, 2026Updated 3 months ago
- CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd☆13Feb 8, 2023Updated 3 years ago
- Capture screenshots of onion services on an onion service.☆73Jun 11, 2024Updated 2 years ago
- Awesome Security lists for SOC/CERT/CTI☆1,915Updated this week
- A command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embed…☆111Dec 8, 2025Updated 9 months ago
- Experience the power of a PHP webshell designed to overcome the limitations of blacklisted system/exec functions.☆26Jul 14, 2024Updated 2 years ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆83Jan 6, 2026Updated 8 months ago
- ☆16May 3, 2024Updated 2 years ago
- EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offer…☆375Apr 6, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆19Oct 1, 2025Updated 11 months ago
- Documentation and scripts to properly enable Windows event logs.☆719Oct 3, 2025Updated 11 months ago
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,088Aug 7, 2026Updated last month
- A collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence☆734Apr 25, 2026Updated 4 months ago
- Repository for sharing examples of our artifacts data and for use in new analyst recruitment.☆110Apr 22, 2025Updated last year
- Explore CVE 2023-30845 automatically across multiple subdomains☆16Sep 30, 2023Updated 2 years ago
- Map tracking ransomware, by OCD World Watch team☆495Feb 20, 2026Updated 6 months ago