IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics
☆190Apr 24, 2025Updated 10 months ago
Alternatives and similar repositories for IOK
Users that are interested in IOK are comparing it to the libraries listed below
Sorting:
- Repository of Yara rules dedicated to Phishing Kits Zip files☆238Mar 8, 2026Updated last week
- Exposing phishing kits seen from phishunt.io☆266Jun 13, 2025Updated 9 months ago
- Yara scan Phishing Kit's Zip archive(s)☆61Jun 20, 2025Updated 9 months ago
- A phishing kit collector for scavengers☆221Jan 22, 2026Updated 2 months ago
- Pollute phishing kits with fake credentials☆12Dec 17, 2021Updated 4 years ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆14May 22, 2024Updated last year
- A Go implementation and parser for Sigma rules.☆96May 15, 2025Updated 10 months ago
- A basic phishing kit scanner for dedicated and semi-dedicated hosting☆109Jan 7, 2023Updated 3 years ago
- The simplest way to find how to report abusive domains☆53May 8, 2023Updated 2 years ago
- A free tool for learning about a domain's DNS☆22Oct 7, 2025Updated 5 months ago
- The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonati…☆942Mar 13, 2026Updated last week
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 3 years ago
- StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.☆661Mar 11, 2024Updated 2 years ago
- Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing dom…☆1,525Mar 13, 2026Updated last week
- Tool to analyze and detect MITM phishing toolkits on the web.☆83Dec 1, 2021Updated 4 years ago
- This repository regroups the Yara Rules for the Unprotect Project☆26Nov 19, 2020Updated 5 years ago
- Search Engines ADs scanner - spotting malvertising in search engines has never been easier!☆45Nov 10, 2025Updated 4 months ago
- A tool designed to hunt for Phishing Kit source code☆230Jan 29, 2026Updated last month
- Python script to hunt phishing kits☆138Jul 25, 2023Updated 2 years ago
- Yet another way to find where to report an abuse☆31Jan 25, 2025Updated last year
- Ayashige provides a list of suspicious newly updated domains as a JSON feed☆39Jun 29, 2024Updated last year
- Python framework for collecting and analyzing TLS certificate data via the Certificate Transparency Network☆12May 25, 2025Updated 9 months ago
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated 6 months ago
- Turn a supported list of filetypes (e.g. .docx) into a markdown structured text file. Also optionally defangs indicators and extract text…☆12Mar 4, 2026Updated 2 weeks ago
- Storage for the IOCs I collect☆11Mar 26, 2025Updated 11 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆113Jan 24, 2026Updated last month
- TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains…☆640Updated this week
- IOC Stream and Command and Control Database Containing Command and Control (C2) Servers Detected Daily by ThreatMon.☆69Dec 27, 2023Updated 2 years ago
- Source code used at TweetFeed.live☆47Nov 21, 2022Updated 3 years ago
- Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…☆128Sep 24, 2023Updated 2 years ago
- Machine Learning basics with phishing dataset☆10Apr 19, 2021Updated 4 years ago
- Phishing catcher using Certstream☆1,794Aug 13, 2024Updated last year
- Turn any blog into structured threat intelligence.☆54Updated this week
- YARA rule analyzer to improve rule quality and performance☆113Jan 18, 2026Updated 2 months ago
- Extract machine readable cyber threat intelligence from unstructured data (inc. PDFs, Word docs, and HTML pages)☆35Updated this week
- A query aggregator for OSINT based threat hunting☆932Mar 7, 2026Updated 2 weeks ago
- Sublime rules for email attack detection, prevention, and threat hunting.☆352Updated this week
- BigPhish - An all-in-one solution to identify and monitor phishing kit deployment☆13Dec 31, 2025Updated 2 months ago
- Find abuse contacts for observables☆69Nov 10, 2022Updated 3 years ago