Malware, tooling, logs, IOCs and intelligence
☆57Aug 31, 2026Updated last month
Alternatives and similar repositories for intelligence
Users that are interested in intelligence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Oct 14, 2026Updated last week
- ☆15Mar 27, 2026Updated 6 months ago
- IoCs and YARA rules from Threatray's Threat Research☆23Updated this week
- ☠️ rupurt — Advanced Linux rootkit hunter | 250+ signatures, eBPF kernel analysis, memory forensics, APT detection | NullSec☆13Apr 16, 2026Updated 6 months ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Sep 9, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Cyber Threat Defense World Modeling☆26May 13, 2026Updated 5 months ago
- AI-powered Windows Event Log analyzer that learns from your feedback. Uses Claude AI with RAG to detect suspicious activity, improve ac…☆38Dec 18, 2025Updated 10 months ago
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 7 months ago
- Malware written in bash to serve as an initial dropper script that will provide a strong foothold on the target device via reverse shells…☆22Sep 18, 2023Updated 3 years ago
- BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…☆101Sep 30, 2026Updated 3 weeks ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Nov 13, 2022Updated 3 years ago
- some leaked src code for known and unknown malwares☆23Aug 15, 2025Updated last year
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 3 months ago
- VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 14,000 CVEs☆23Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.☆13Aug 4, 2026Updated 2 months ago
- A repo to hold KQL queries as part of my 100 days of KQL effort.☆19Aug 5, 2026Updated 2 months ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry …☆50Jun 3, 2026Updated 4 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ☆43Sep 9, 2026Updated last month
- Terraform-deployable Azure security lab with intentionally vulnerable resources for learning and practicing attack paths in your own tena…☆38Jul 24, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- RunPE implementation with multiple evasive techniques (2)☆13Sep 25, 2025Updated last year
- Proof-of-Concept to evade auditd by writing /proc/PID/mem☆24Aug 21, 2023Updated 3 years ago
- Rules shared by the community from 100 Days of YARA 2026☆12Apr 16, 2026Updated 6 months ago
- ☆22Aug 13, 2026Updated 2 months ago
- Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.☆57Updated this week
- Change hash for a signed pe☆18Jul 18, 2023Updated 3 years ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated 3 weeks ago
- Kudzu is a Go C2 platform with an emphasis on extensibility.☆11Mar 30, 2021Updated 5 years ago
- Operational Relay Box Intelligence, Tracking, & Analysis Lexicon (ORBITAL)☆38Aug 30, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆21Updated this week
- ☆26Jul 15, 2023Updated 3 years ago
- Ludus range for the Constructing Defense Lab☆139Jul 28, 2026Updated 2 months ago
- Extract DPAPI CREDHIST and Masterkey hashes☆23May 28, 2026Updated 4 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- Dump LSASS like you mean it☆11Oct 15, 2026Updated last week
- Rules shared by the community from 100 Days of YARA 2025☆39Jan 2, 2026Updated 9 months ago