Cyber Threat Intelligence Indicator Search

This website employs a local json based search function to reduce the attack surface and keep this website static, please be patient while the search.json loads, this may take up to 30 seconds before the function becomes available.

Cyber Threat Intelligence

• AICRIOC - An LLM and OCR based Indicator of Compromise extraction and context tool built with Python and compatible with openAI compatible API endpoints
• IOCOCRExtractor - A pure regex and OCR (tesseract) Indicator of Compromise extractor tool built in Python for comparison to LLM extractions (see above)
• Threat Feed Endpoint - Updated Daily
• Daily STIX2 Reports - Updated Every Day
• STIX2 Validator - An online STIX2 JSON validator
• Anonymous Proxies - Daily List
• Forum Spam - Daily List
• Phishing Domains - Daily List
• PulseDive Feed
• Alienvault OTX Feed
• MISP Default Feed
• All CTI

Deception Tech

As featured in Risky Biz, Help Net Security, tldr;sec, GreyNoise Storm Watch, NCSC, Detection Engineering Weekly and so on

• Deception Mindmap - Overview of topics from upcoming book on Deception Technology and Cyber Threat Intelligence

Original Tools

• modpot - A modular web-application honeypot platform built with Golang and Gin
• Honeydet - A universal honeypot detector written in Go!
• honeypage - A golang tool for flattening HTML, CSS, JS into a single file for use with modpot
• Sinon - A tool for automating with AI, burn in and variability tasks on Windows deception hosts including personalisation, application installation, web browsing, and much more
• SSH-Honey-Gateway - A lightweight SSH appliance that forwards connections with matching credentials and ssh-keys to deception envirnments and others to a target server
• OpenAIPot - A lightweight OpenAI compatible API gateway that proxies requests utilising defined API key lures with prompt injection to facilitate adversarial engagement while allowing valid connections to pass.
• SMTPLLMPot - An SMTP honeypot that uses OpenAI compatible APIs
• Canary Token Detector - A Thinkst Canarytoken detector and nullifier tool
• HoneyFS (LLM Honeypot Filesystem Creator) - A tool for generating realistic and random filesystems using GPT3.5
• Howls-moving-docker - A moving target defence docker orchestration system built with Python and DockerAPI
• Proxmox-moving-castle - A moving target defence LXC and VM orchestration system built with Python and ProxmoxAPI
• cupspot - A simple CUPS Honeypot PoC targetting CVE-2024-47177, 41476.

Forks and Ports

• Honeypot-ftp-python3 - A fork of Alex Bredo’s FTP honeypot with python3 support and added features
• AMTHoneypot-ng - A fork of Haxrob’s AMT Firmware Vulnerability (CVE-2017-5689) honeypot with added features
• DSHP-ng - A fork of Damn Simple HoneyPot rebuilt for python3 with verbose output
• honeyprint-ng - A fork of Glaslos’ printer honeypot - migrated to python3 with added features. Includes a port of pkipplib to python3
• glastopf-ng - A fork of Glastopf web application honeypot - migrated to python3
• DNP3Pot-python3 - A fork of Art Watchowski’s DNP3Pot ported to Python3, with Python3 ports of DNBP3 library (by Nicholas Rodofile) and DNP3Crafter (by David Olano)
• Schneider Electric Triconex Honeypot - A fork of NozomiNetwork’s Original Triconex Honeypot ported to Python3
• mailoney-ng - A fork of phin3has’s SMTP honeypot with working async libraries, detection mitigation, daemonisation, extended logging and additional CLI parameters
• SpamHAT-ng - A fork of the SpamHAT tool by Miguel Bautista modernised with carton, MariaDB and docker for simple deployment
• spamhole-ng - A fork of the spamhole honeypot by Dustin Trammell, with memory safety updates
• Troje-ng - Modernisation of Remco Verhoef’s Golang LXC honeypot tool, implementing packet capture, logging and container garbage collection, defaulting to Alpine Linux for performance

Other Projects

• Rusty-Telpehone - A loopback audio covert channel data exfiltration PoC written in Rust
• gitdoorcheck - A git repo static code analyser using OpenAI LLMs written in Python
• Vulnonym.org - An (offensive) unique name generator for vulnerabilities, in contrast to Carnegie Mellon and NIST’s approach
• HACK THE UNIVERSE - A book on the topic of the simulated universe, information theory, and consciousness
• Toddler Recipes Australia - A long running generative website that writes recipes complete with recipe schema markup
• AI OCR Recipe Convertor - A simple web app for converting hand written or printed recipes into HTML and markup for paperless migration
• Go-Cheat-Check - Python tool for simple comparison check on generated code vs suspected generated code
• Crypto Solver - Fuzzy logic crypto solver, best guess algorithm using NLP to estimate succses given english language result. Because cyberchef wasn’t easy enough already.

AI and Art/Music

• Seeded Cube - Continually generated mutating AI art - javascript, css3 and html5. Weirdness awaits!
• ucor - GenAI digital audio workstation - Eurorack style modular synths, filters, samplers, sequences, drum machines, AI sample generation and more
• VoiceMIDI - Convert microphone voice input into MIDI/transcription using CREPE model machine learning in browser
• BaroqueGenerator - Baroque music generator
• Doughnuts - An ultimate extension of agentic AI - Consciousness and civilisation simulator. Metaprogramming multi-model (language, sight, audio) ray clustered containers, genetic style combination and reproduction, empathy, emotion, self preservation, hormonal and endocrine systems, political and religious systems, tool creating and sharing, information collection dissemination, group coordination, object concept attribution, short and long term memory, physical presence, compute/resources discovery, harvesting and economy through virtual resources, positioning and awareness. Due to the nature of this project it may never be made public. If genuinely interested contact for consideration of collaboration/sharing.

General

• Privacy Policy
• FAQ

Cyber Threat Intelligence