Python package template for building command-line OSINT tools with a reusable project structure.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat models and methodologies in the private sector, government and cybersecurity community, and is available for use at no charge.
ThreatFox is a project from abuse.ch and Spamhaus for sharing indicators of compromise associated with malware with the infosec community, AV vendors and cyber threat intelligence providers. Users can upload IOCs, browse the database, and use APIs to push and pull signals and automate bulk queries. Spamhaus datasets are enhanced with malware samples from ThreatFox.
A project providing Markdown templates for Offensive Security exam reports, covering exams including OSCP, OSWE, OSCE, OSEE and OSWP. It aims to replace LaTeX, Microsoft Office Word and LibreOffice Writer for report writing. Report generation uses a script and requires Pandoc, LaTeX and p7zip. Optional Pandoc Lua filters can be passed.
Frida is a dynamic instrumentation toolkit for developers, reverse-engineers and security researchers. It lets users inject their own scripts into black box processes to hook functions and trace application code, and it runs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD and QNX.
mCaptcha is a proof-of-work based captcha system described as privacy focused and fully automated. It states that it does not track or profile users and does not use IP addresses for rate limiting. The project offers an xCaptcha drop-in replacement, and its APIs are described as compatible with reCAPTCHA and hCaptcha. A guide covers installing the captcha on a website.
IP Intelligence is a free real-time service that determines how likely an IP address is a proxy, VPN, hosting or bad IP, returning a probabilistic value between 0 and 1. It uses machine learning and probability theory with dynamic checks against large datasets. The API requires no key or sign-up, and an optional residential proxy detection flag is available.
Community notes
Be the first to share how this project worked for you.
Sign in with a verified account to leave a review or join the discussion.
Sign in to reviewKeep exploring
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat models and methodologies in the private sector, government and cybersecurity community, and is available for use at no charge.
ThreatFox is a project from abuse.ch and Spamhaus for sharing indicators of compromise associated with malware with the infosec community, AV vendors and cyber threat intelligence providers. Users can upload IOCs, browse the database, and use APIs to push and pull signals and automate bulk queries. Spamhaus datasets are enhanced with malware samples from ThreatFox.
A project providing Markdown templates for Offensive Security exam reports, covering exams including OSCP, OSWE, OSCE, OSEE and OSWP. It aims to replace LaTeX, Microsoft Office Word and LibreOffice Writer for report writing. Report generation uses a script and requires Pandoc, LaTeX and p7zip. Optional Pandoc Lua filters can be passed.
Frida is a dynamic instrumentation toolkit for developers, reverse-engineers and security researchers. It lets users inject their own scripts into black box processes to hook functions and trace application code, and it runs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD and QNX.
mCaptcha is a proof-of-work based captcha system described as privacy focused and fully automated. It states that it does not track or profile users and does not use IP addresses for rate limiting. The project offers an xCaptcha drop-in replacement, and its APIs are described as compatible with reCAPTCHA and hCaptcha. A guide covers installing the captcha on a website.
IP Intelligence is a free real-time service that determines how likely an IP address is a proxy, VPN, hosting or bad IP, returning a probabilistic value between 0 and 1. It uses machine learning and probability theory with dynamic checks against large datasets. The API requires no key or sign-up, and an optional residential proxy detection flag is available.
