Threat-hunting tool for Linux

Forensic toolkit for iOS sysdiagnose feature

BSides Prishtina 2024 Malware Development and Persistence workshop

Step-by-step documentation on how to decrypt SCCM database secrets offline

Lacus is a capturing system using playwright, as a web service.

Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure …

A pure Python steganography module.

A self-hosted news reader.

A collection of useful .gitignore templates

Test data editor for Robot Framework

AI client MCP integration that supports multiple MISP instances

This repository is a collection of JavaScript gadgets that can be used to bypass XSS mitigations such as Content Security Policy (CSP) and HTML sanitizers like DOMPurify.

Mapping the information system / Cartographie du système d'information

Get started with some ways to automate your MISP operations

Generic automation framework for acceptance testing and RPA

misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push) based on a set of customizable block rules.

SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in best practices for information management and protective to…

Malware Configuration And Payload Extraction

An open source platform to support analysts to organise their case and tasks

MISP Playbooks

A collective list of public APIs for use in security. Contributions welcome

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

Extract and Visualize Data from URLs using Unfurl

A real-time Grafana dashboard using MISP ZeroMQ message queue and InfluxDB

Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results

mmdb-server is an open source fast API server to lookup IP addresses for their geographic location.

A 'Universal WHOIS' proxy server - you query it, it gives back the correct details

Lazarus analysis tools and research report

nin is ninjatool