Malware, tooling, logs, IOCs and intelligence
☆57Aug 31, 2026Updated 2 months ago
Alternatives and similar repositories for intelligence
Users that are interested in intelligence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Mar 27, 2026Updated 7 months ago
- IoCs and YARA rules from Threatray's Threat Research☆23Updated this week
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆30Sep 9, 2026Updated 2 months ago
- Cyber Threat Defense World Modeling☆26May 13, 2026Updated 6 months ago
- ☠️ rupurt — Advanced Linux rootkit hunter | 250+ signatures, eBPF kernel analysis, memory forensics, APT detection | NullSec☆13Apr 16, 2026Updated 6 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 8 months ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Nov 13, 2022Updated 4 years ago
- BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…☆104Sep 30, 2026Updated last month
- some leaked src code for known and unknown malwares☆23Aug 15, 2025Updated last year
- AI-powered Windows Event Log analyzer that learns from your feedback. Uses Claude AI with RAG to detect suspicious activity, improve ac…☆40Dec 18, 2025Updated 10 months ago
- COM-based folder creation via Shell Window process POC reverse-engineered from Turla’s Kazuar v3 loader.☆12Jan 14, 2026Updated 10 months ago
- Malware written in bash to serve as an initial dropper script that will provide a strong foothold on the target device via reverse shells…☆22Sep 18, 2023Updated 3 years ago
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 4 months ago
- PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.☆13Aug 4, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 15k CVEs☆24Nov 5, 2026Updated last week
- A repo to hold KQL queries as part of my 100 days of KQL effort.☆19Aug 5, 2026Updated 3 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- ☆16Sep 4, 2026Updated 2 months ago
- Terraform-deployable Azure security lab with intentionally vulnerable resources for learning and practicing attack paths in your own tena…☆38Oct 26, 2026Updated 2 weeks ago
- Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , …☆40Sep 28, 2022Updated 4 years ago
- Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry …☆52Jun 3, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Rules shared by the community from 100 Days of YARA 2026☆12Apr 16, 2026Updated 6 months ago
- ☆44Sep 9, 2026Updated 2 months ago
- Change hash for a signed pe☆18Jul 18, 2023Updated 3 years ago
- Kudzu is a Go C2 platform with an emphasis on extensibility.☆11Mar 30, 2021Updated 5 years ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.☆58Oct 22, 2026Updated 3 weeks ago
- ☆26Jul 15, 2023Updated 3 years ago
- Proof-of-Concept to evade auditd by writing /proc/PID/mem☆25Aug 21, 2023Updated 3 years ago
- Extract DPAPI CREDHIST and Masterkey hashes☆23May 28, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Ludus range for the Constructing Defense Lab☆144Jul 28, 2026Updated 3 months ago
- ☆22Nov 1, 2026Updated last week
- End-to-end ransomware attack simulation logs for DFIR/SOC analysts☆11Nov 19, 2025Updated 11 months ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Oct 30, 2026Updated 2 weeks ago
- AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments☆37Sep 17, 2025Updated last year
- Lorex 2K Indoor Wi-Fi Security Camera: RCE Exploit Chain☆22Dec 3, 2024Updated last year
- A command line tool that turns NVD CVE records into STIX 2.1 Objects.☆14Updated this week
Are these results useful?