A meta-list of public references to threat actor profiles and APT group datasets.
☆88Oct 2, 2025Updated 11 months ago
Alternatives and similar repositories for awesome-threat-actor-resources
Users that are interested in awesome-threat-actor-resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Python-based backdoor and server communication tool for ethical hacking and reverse shell practice using socket programming.☆29May 21, 2025Updated last year
- ExeRay AI detects malicious Windows executables using ML. Analyzes entropy, imports, and metadata for rapid classification, aiding incide…☆63Mar 30, 2026Updated 5 months ago
- ☆61Dec 10, 2025Updated 8 months ago
- HTTP/S Service Monitor Script This Bash script periodically monitors the availability and content of web services (HTTP/HTTPS) specified…☆15Sep 29, 2025Updated 11 months ago
- LSTAR - CobaltStrike Translated to EN☆23Jun 15, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The official repository of PowersheLLM, a model for Powershell maliciousness detection using fine-tuned LLM☆14Jun 6, 2024Updated 2 years ago
- A collection of CVEs weaponized by ransomware operators☆153Aug 30, 2026Updated last week
- Convert Sigma Rules to different formats☆15Aug 12, 2024Updated 2 years ago
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 2 months ago
- Linux-based botnet builder designed for creating advanced botnet payloads.☆111Nov 2, 2025Updated 10 months ago
- Поиск информации о людях в интернете и по закрытым базам данных.☆12Jan 3, 2025Updated last year
- service to convert nfcapd files clickhouse as they are created☆10Mar 22, 2025Updated last year
- A collection of tools and resources useful for OSINT investigations in the cryptocurrency. This is a dynamic list. —most resources here a…☆91Jun 25, 2025Updated last year
- An AI-driven vulnerability scanner that uses Nmap to discover open services on a user-supplied IP, matches each service to relevant CVEs …☆46Jun 1, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated 2 years ago
- A collection of BASH-Python scripts for different scenarios using loops, field processors and clever commands.☆33Jun 25, 2018Updated 8 years ago
- A list of OSINT resources and tools that may be useful to you when conducting investigations related to the Democratic People's Republic …☆36May 1, 2025Updated last year
- Who needs authentication? This cache purge vulnerability finder doesn't!☆10Apr 20, 2023Updated 3 years ago
- Awesome Security Feeds a curated, structured and automation-friendly collection of security RSS/Atom sources. Based on https://securityfe…☆37Updated this week
- ip-nose is a Matrix-themed IP geolocation CLI tool built with C++. It offers IP detection, search history, a vibrant, colorized interface…☆39Jul 15, 2025Updated last year
- This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.☆342Feb 17, 2023Updated 3 years ago
- The CTI-CMM assessment is a stand-alone spreadsheet intended for users to download and use locally.☆25Jan 20, 2026Updated 7 months ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- ☆10Sep 11, 2021Updated 4 years ago
- ☆19Sep 18, 2023Updated 2 years ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated 10 months ago
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆44Mar 24, 2026Updated 5 months ago
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,124Aug 31, 2026Updated last week
- ☆15Mar 24, 2025Updated last year
- A complete security assessment tool that supports common web security issues scanning and custom POC | Be sure to read the document befor…☆20Sep 27, 2024Updated last year
- A tool to easily perform GitLab Device Code Phishing on red team engagements☆51Feb 9, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Compare LLMs in one click☆40Aug 8, 2025Updated last year
- Inboxfuscation is an advanced offensive & defensive framework for mailbox rule obfuscation and detection in Exchange environments.☆83Sep 11, 2025Updated 11 months ago
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆54Feb 4, 2026Updated 7 months ago
- All in 1 phishing framework☆37May 23, 2026Updated 3 months ago
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 8 months ago
- Thermal pocket printer - BLE protocol reverse engineering, Python CLI, and web GUI☆19Updated this week
- 🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.☆1,012Feb 28, 2026Updated 6 months ago