OPENHUNTING.IO Threat Library alternatives
6 tools in the catalogue cover the same ground as OPENHUNTING.IO Threat Library and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- abuse.ch HuntingfreeCross-search over the abuse.ch feeds: malicious URLs, samples, botnet command servers and SSL fingerprints, from one of the most cited non-profit sources.
- BI.ZONE Threat IntelligencefreemiumThreat portal with strong coverage of groups active in the post-Soviet space, an area where Western sources are thin.
- Feodo TrackerfreeTracks command-and-control servers of banking trojans such as Emotet, Dridex and TrickBot.
- GitGuardian Public MonitoringfreemiumWatches public repositories for credentials leaked by an organisation's developers. Catches keys published by mistake, often within minutes.
- GreyNoisefreemiumThreat intelligence platform that classifies IP addresses scanning the internet as malicious, benign, or noise using a global sensor network. 50 free daily API calls.
- GTFOBinsfreeCurated list of Unix binaries that can bypass local security restrictions in misconfigured systems.
OPENHUNTING.IO Threat Library
Threat Intelligence
Also written OPENHUNTING IO Threat Library
Open library of threat actors, malware families and campaigns, cross-referenced and sourced. A free alternative to commercial platforms.
RECOMMENDED USE
Getting a sourced profile on a threat actor for free
Information
Video tutorials
Learn to use OPENHUNTING.IO Threat Library
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
Malpedia
Threat IntelligenceAcademic reference on malware families and the groups that use them, maintained by Fraunhofer. Each entry cites the public reports it rests on.
ETDA Threat Actor Encyclopedia
Threat IntelligenceEncyclopaedia of attack groups with their aliases, tools and campaigns. Its main value is untangling the many names the industry gives the same group.
MISP Galaxy
Threat IntelligenceOpen, machine-readable knowledge base of threat actors, tools and techniques, used to share intelligence between organisations in a common vocabulary.
Dark Web Informer
Threat IntelligenceDatabase of threat actors observed on criminal forums and leak sites, with their aliases, claimed victims and activity timeline.
User reviews
Be the first to leave a review