A meta-list of public references to threat actor profiles and APT group datasets.
☆90Oct 2, 2025Updated last year
Alternatives and similar repositories for awesome-threat-actor-resources
Users that are interested in awesome-threat-actor-resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Python-based backdoor and server communication tool for ethical hacking and reverse shell practice using socket programming.☆29May 21, 2025Updated last year
- ExeRay AI detects malicious Windows executables using ML. Analyzes entropy, imports, and metadata for rapid classification, aiding incide…☆63Mar 30, 2026Updated 7 months ago
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- Python toolkit for DCC pipelines: files, math, geometry, images, video and audio, plus PBR texture, glTF/USD export and shot-timeline eng…☆14Updated this week
- OsintIA_Tools.py is an automated tool for collecting and analyzing public information that combines OSINT techniques with artificial inte…☆64Sep 1, 2026Updated 2 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- DracoLure — Dragon Vector Honeypot: polyglot deception honeypot with real-time detection, threat scoring, and quarantine.☆19Jul 28, 2026Updated 3 months ago
- ☆61Dec 10, 2025Updated 10 months ago
- Linux-based botnet builder designed for creating advanced botnet payloads.☆111Nov 2, 2025Updated last year
- LSTAR - CobaltStrike Translated to EN☆21Jun 15, 2023Updated 3 years ago
- Telegram bot for inline whisper to current user☆12Dec 10, 2025Updated 10 months ago
- Construct triage artifact based on rules☆20Oct 14, 2026Updated 3 weeks ago
- Interactive Python CLI that wraps Hashcat with guided menus for wordlist, rule-based, brute-force, and hybrid attacks. Supporting 300+ ha…☆225Aug 29, 2026Updated 2 months ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- HTTP/S Service Monitor Script This Bash script periodically monitors the availability and content of web services (HTTP/HTTPS) specified…☆15Sep 29, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Convert Sigma Rules to different formats☆15Aug 12, 2024Updated 2 years ago
- A collection of CVEs weaponized by ransomware operators☆156Aug 30, 2026Updated 2 months ago
- The official repository of PowersheLLM, a model for Powershell maliciousness detection using fine-tuned LLM☆14Jun 6, 2024Updated 2 years ago
- Maltego Transforms for generating screenshots from Websites and URLs☆16Apr 24, 2023Updated 3 years ago
- Repository contains a collection of scripts designed to demonstrate and exploit various vulnerabilities in HTTP and related protocols☆31Nov 24, 2025Updated 11 months ago
- A collection of tools and resources useful for OSINT investigations in the cryptocurrency. This is a dynamic list. —most resources here a…☆96Jun 25, 2025Updated last year
- This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.☆343Feb 17, 2023Updated 3 years ago
- A collection of BASH-Python scripts for different scenarios using loops, field processors and clever commands.☆33Jun 25, 2018Updated 8 years ago
- service to convert nfcapd files clickhouse as they are created☆10Mar 22, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A service designed to provide users with a set of intuitive web forms for reporting various types of cyber attack to MISP.☆11Jun 4, 2025Updated last year
- An AI-driven vulnerability scanner that uses Nmap to discover open services on a user-supplied IP, matches each service to relevant CVEs …☆47Jun 1, 2025Updated last year
- A list of OSINT resources and tools that may be useful to you when conducting investigations related to the Democratic People's Republic …☆37Oct 19, 2026Updated 2 weeks ago
- A resource containing all the tools each ransomware gangs uses☆1,466Aug 29, 2026Updated 2 months ago
- Slides and link to recording for my defcon34 talk☆14Aug 19, 2026Updated 2 months ago
- A list of OSINT resources and tools that may be useful when conducting investigations related to the Kingdom of Saudi Arabia☆18May 12, 2025Updated last year
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated 2 years ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- ☆10Sep 11, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Локальная панель управления для Telegram-ботов. Массовый менеджмент py проектов☆13Jul 8, 2026Updated 3 months ago
- A simple Go program that detects whether the current Windows system is running inside a Hyper-V virtual machine environment(Guest) using …☆11Oct 27, 2024Updated 2 years ago
- A modular C2 framework developed in Python for cybersecurity research and adversary emulation. Features encrypted communication, agent bu…☆20Updated this week
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,161Oct 27, 2026Updated last week
- A high-performance port spoofing tool built in Rust. Confuse port scanners with dynamic service emulation across all ports. Features cus…☆496Jul 30, 2026Updated 3 months ago
- ☆35Nov 14, 2024Updated last year
- The CTI-CMM assessment is a stand-alone spreadsheet intended for users to download and use locally.☆25Jan 20, 2026Updated 9 months ago