A meta-list of public references to threat actor profiles and APT group datasets.
☆88Oct 2, 2025Updated 9 months ago
Alternatives and similar repositories for awesome-threat-actor-resources
Users that are interested in awesome-threat-actor-resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Python-based backdoor and server communication tool for ethical hacking and reverse shell practice using socket programming.☆29May 21, 2025Updated last year
- ExeRay AI detects malicious Windows executables using ML. Analyzes entropy, imports, and metadata for rapid classification, aiding incide…☆62Mar 30, 2026Updated 3 months ago
- ☆61Dec 10, 2025Updated 7 months ago
- HTTP/S Service Monitor Script This Bash script periodically monitors the availability and content of web services (HTTP/HTTPS) specified…☆15Sep 29, 2025Updated 9 months ago
- OsintIA_Tools.py is an automated tool for collecting and analyzing public information that combines OSINT techniques with artificial inte…☆64May 4, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- LSTAR - CobaltStrike Translated to EN☆23Jun 15, 2023Updated 3 years ago
- The official repository of PowersheLLM, a model for Powershell maliciousness detection using fine-tuned LLM☆14Jun 6, 2024Updated 2 years ago
- A collection of CVEs weaponized by ransomware operators☆148Jun 28, 2026Updated last month
- Convert Sigma Rules to different formats☆15Aug 12, 2024Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated last month
- Linux-based botnet builder designed for creating advanced botnet payloads.☆111Nov 2, 2025Updated 8 months ago
- Maltego Transforms for generating screenshots from Websites and URLs☆16Apr 24, 2023Updated 3 years ago
- Поиск информации о людях в интернете и по закрытым базам данных.☆12Jan 3, 2025Updated last year
- service to convert nfcapd files clickhouse as they are created☆10Mar 22, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A collection of tools and resources useful for OSINT investigations in the cryptocurrency. This is a dynamic list. —most resources here a…☆90Jun 25, 2025Updated last year
- An AI-driven vulnerability scanner that uses Nmap to discover open services on a user-supplied IP, matches each service to relevant CVEs …☆45Jun 1, 2025Updated last year
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated last year
- A collection of BASH-Python scripts for different scenarios using loops, field processors and clever commands.☆33Jun 25, 2018Updated 8 years ago
- A list of OSINT resources and tools that may be useful to you when conducting investigations related to the Democratic People's Republic …☆37May 1, 2025Updated last year
- Who needs authentication? This cache purge vulnerability finder doesn't!☆10Apr 20, 2023Updated 3 years ago
- Awesome Security Feeds a curated, structured and automation-friendly collection of security RSS/Atom sources. Based on https://securityfe…☆37Updated this week
- ip-nose is a Matrix-themed IP geolocation CLI tool built with C++. It offers IP detection, search history, a vibrant, colorized interface…☆39Jul 15, 2025Updated last year
- This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.☆341Feb 17, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- The CTI-CMM assessment is a stand-alone spreadsheet intended for users to download and use locally.☆25Jan 20, 2026Updated 6 months ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- ☆19Sep 18, 2023Updated 2 years ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆487Oct 29, 2025Updated 9 months ago
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,096Updated this week
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆43Mar 24, 2026Updated 4 months ago
- ☆15Mar 24, 2025Updated last year
- A complete security assessment tool that supports common web security issues scanning and custom POC | Be sure to read the document befor…☆20Sep 27, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A tool to easily perform GitLab Device Code Phishing on red team engagements☆51Feb 9, 2026Updated 5 months ago
- Compare LLMs in one click☆40Aug 8, 2025Updated 11 months ago
- Inboxfuscation is an advanced offensive & defensive framework for mailbox rule obfuscation and detection in Exchange environments.☆84Sep 11, 2025Updated 10 months ago
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆48Feb 4, 2026Updated 5 months ago
- All in 1 phishing framework☆36May 23, 2026Updated 2 months ago
- EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…☆145Feb 25, 2026Updated 5 months ago
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 7 months ago