Awesome Intelligence threat (1-40 / 121)
Exploit Observer
https://www.exploit.observer GLOBAL
Exploit Observer aggregates & interprets exploit/vulnerability data from all over the Internet. Consequently, it has evolved into The World's Largest Exploit & Vulnerability Intelligence Database and is freely accessible to all.
VEDAS Advisories
https://vedas.arpsyndicate.io GLOBAL
Automated Advisories by Vulnerability & Exploit Data Aggregation System (VEDAS)
Shodan
https://shodan.io GLOBAL
Search Engine that lets users search for various types of servers connected to the internet using a variety of filters.
Hudson Rock
https://www.hudsonrock.com/threat-intelligence-cybercrime-tools GLOBAL
Check if a digital asset (username, email, domain) was compromised in global Infostealer attacks
Malcore
https://malcore.io GLOBAL
Malcore is the fastest commercial sandbox built with a reverse engineering platform at its core. Its speed allows seamless integration in browser, desktop, and email.
Censys Search
https://search.censys.io GLOBAL
Censys helps organizations, individuals, and researchers find and monitor every server on the Internet to reduce exposure and improve security.
Netlas
https://netlas.io GLOBAL
Internet intelligence apps that provide accurate technical information on IP addresses, domain names, websites, web applications, IoT devices, and other online assets.
CriminalIP
https://www.criminalip.io GLOBAL
Search for information on anything connected to public internet
Kaspersky OpenTIP
https://opentip.kaspersky.com GLOBAL
Kaspersky Threat Intelligence Portal allows you to scan files, domains, IP addresses, and URLs for threats, malware, viruses.
GreyNoise
https://www.greynoise.io GLOBAL
GreyNoise captures data on IPs that scan the internet and saturate security tools with internet noise, so SOC teams can focus on threats that matter and ignore those that don't.
Intezer Analyze
https://analyze.intezer.com GLOBAL
Malware analysis platform quickly classifying malware and unknown files. Unlike Antivirus and EDRs which mostly produce generic results and can only classify specific hashes, Intezer analyzes the code itself in order to categorize the threat and classify variants from the same malware family.
AlienVault OTX
https://otx.alienvault.com GLOBAL
A Threat data platform that allows security researchers and threat data producers to share research and investigate new threats.
ExploitDB
https://www.exploit-db.com GLOBAL
An archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers.
Dehashed
https://dehashed.com GLOBAL
DeHashed provides free deep-web scans and protection against credential leaks. A modern personal asset search engine to help secure accounts and provide insight on compromised assets.
WhiteIntel
https://whiteintel.io GLOBAL
WhiteIntel provides free deep-web scans which are focused on compromised devices via stealer malwares. Additional to credentials, it also provide information about compromised devices.
ManyPasswords
https://github.com/many-passwords/many-passwords GLOBAL
Default passwords for IoT devices and for web applications (for ex. MySQL and PostgreSQL admin panels)
Ransom Wiki
https://ransom.wiki GLOBAL
Check if your company or partner appears in a claimed ransom attack breach.
ProjectDiscovery
https://github.com/projectdiscovery GLOBAL
An open-source software company that builds tools to detect and remediate vulnerabilities from development to production.
BeVigil
https://bevigil.com GLOBAL
The internet's first and only security search engine for mobile apps.
CINS Army List
http://cinsscore.com/#list GLOBAL
CINS Army shares valuable threat intelligence harvested from their CINS system. The CINS Army list is a subset of the CINS Active Threat Intelligence ruleset, and consists of IP addresses having poor recent Rogue Packet score factor or have tripped a designated number of trusted alerts across a given number of their Sentinels deployed around the world.
MalwareBazaar
https://bazaar.abuse.ch GLOBAL
MalwareBazaar is a project from abuse.ch with the goal of sharing malware samples with the infosec community, AV vendors and threat intelligence providers.
BD Banlist
https://www.binarydefense.com/banlist.txt GLOBAL
Binary Defense Systems Artillery Threat Intelligence Feed and Banlist Feed
AbuseIPDB
https://www.abuseipdb.com GLOBAL
AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet.
Yara Rules
https://github.com/Yara-Rules/rules GLOBAL
This project covers the need of a group of IT Security Researchers to have a single repository where different Yara signatures are compiled, classified and kept as up to date as possible, and began as an open source community for collecting Yara rules.
CrowdSec
https://www.crowdsec.net GLOBAL
CrowdSec is an open-source and collaborative security stack leveraging the crowd power. Analyze behaviors, respond to attacks & share signals across the community. Gain crowd-sourced protection against malicious IPs. Benefit from the most accurate CTI in the world.
Botvrij
https://www.botvrij.eu GLOBAL
Botvrij provides different sets of open source IOCs that you can use in your security devices to detect possible malicious activity. The information contains network info (IPs), file hashes, file paths, domain names, URLs.
CIRCL BGP
https://bgpranking.circl.lu GLOBAL
BGP Ranking is a free software to calculate the security ranking of Internet Service Providers. The system is gathering external datasources (e.g. dshield, shadowserver, Arbor ATLAS) in order to evaluate the ranking over time.
IntelligenceX
https://intelx.io GLOBAL
IntelligenceX delivers fast, high-quality results and make the deepest parts of the internet accessible with a few clicks. It searches billions of selectors in a matter of milliseconds. The search works with selectors, i.e. specific search terms such as email addresses, domains, URLs, IPs, CIDRs, Bitcoin addresses, IPFS hashes, etc. It searches in places such as the darknet, document sharing platforms, whois data, public data leaks and others. It keeps a historical data archive of results, similar to how the Wayback Machine from archive.org stores historical copies of websites.
DefaultCreds
https://github.com/ihebski/DefaultCreds-cheat-sheet GLOBAL
One place for all the default credentials
PayloadAllTheThings
https://github.com/swisskyrepo/PayloadsAllTheThings GLOBAL
A list of useful payloads and bypass for Web Application Security and Pentest/CTF.
HardwareAllTheThings
https://github.com/swisskyrepo/HardwareAllTheThings GLOBAL
A list of useful payloads and bypasses for Hardware and IOT Security.
MITRE ATT&CK
https://attack.mitre.org GLOBAL
MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
Exploit Alert
https://www.exploitalert.com GLOBAL
Exploits found on the INTERNET
XSS Payloads
http://www.xss-payloads.com GLOBAL
The wonderland of JavaScript unexpected usages, and more.
LOLBAS
https://lolbas-project.github.io GLOBAL
The goal of the LOLBAS project is to document every binary, script, and library that can be used for Living Off The Land techniques.
GTFOBins
https://gtfobins.github.io GLOBAL
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.
0day Today
https://0day.today GLOBAL
0day Today is the ultimate database of exploits and vulnerabilities and a great resource for vulnerability researchers and security professionals.
Rapid7 DB
https://www.rapid7.com/db GLOBAL
Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review.
Sploitus
https://sploitus.com GLOBAL
Sploitus is a convenient central place for identifying the newest exploits and finding attacks that exploit known vulnerabilities. The search engine is also a good resource for finding security and vulnerability discovery tools.
Rescure
https://rescure.me/feeds.html GLOBAL
Enhance your cyber security capabilities with highly tailored, accurate and relevant threat intelligence which integrates seamlessly with your detection workflows.