IntelOwl
pagodo
| IntelOwl | pagodo | |
|---|---|---|
| 13 | 8 | |
| 3,111 | 2,576 | |
| 0.9% | - | |
| 9.8 | 5.2 | |
| 6 days ago | 21 days ago | |
| Python | Python | |
| GNU Affero General Public License v3.0 | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
IntelOwl
- Monthly Security Checklist
-
To GSoC and beyond...
Allowed bulk analysis of files as well as observables, leading to a more efficient workflow for IntelOwl users. #1032
-
IntelOwl 101
If you want to know how IntelOwl works and its underlying architecture visit their github and website
-
Threat detection
One thing I ran for a while was security onion and utilized port mirroring to mirror the uplink port from my primary switch to my LAN on my router, so I was catching anything coming into/out of my network destined for internet. I've also used ElastiFlow ( https://github.com/robcowart/elastiflow ) which is absolutely phenomenal and awesome, I did the same and it provides some great data. You could also leverage IntelOwl ( https://github.com/intelowlproject/IntelOwl ) , one thing I have added to all my VMs is a OSSEC agent, Wazuh to be specific which is free ( https://github.com/wazuh/wazuh ) and while I am not using it to its full potential such as monitoring file deletions/modifications etc it is a powerful tool.
- [Tool] Intel Owl new release v3.0.0 (FOSS threat intel solution)
- [Tool] Intel Owl v3.0.0, free and open source threat intelligence solution
- [FOSS] IntelOwl v2.3.0 is out!
- Intel Owl is an OSINT solution to get threat intelligence data about a specific file, an IP or a domain from a single API at scale (OS TIP)
-
IOCs Validation
https://github.com/intelowlproject/IntelOwl And MISP - however they both require a little bit of setup and such.
- Threat Intelligence
pagodo
- proxyless google searcher
- GitHub - opsdisk/pagodo: pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
- Fast-Google-Dorks-Scan
- Automate Google Python
- pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
- Passive Google Scrape+Dork
-
go-dork - The fastest dork scanner written in Go.
Haven't tried it yet. Just wondering if anyone has personally had success with it. I know I set up the below dork tool and the captchas never stopped. https://github.com/opsdisk/pagodo
- Google dork using python
What are some alternatives?
Cortex - Cortex: a Powerful Observable Analysis and Active Response Engine
github-dorks - Find leaked secrets via github search
TheHiveDocs - Documentation of TheHive
yagooglesearch - Yet another googlesearch - A Python library for executing intelligent, realistic-looking, and tunable Google searches.
intelmq - IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Osintgram - Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
PatrowlManager - PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
go-dork - The fastest dork scanner written in Go.
dumpulator - An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).
IVRE - Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.
pyintelowl - Robust Python SDK and Command Line Client for interacting with IntelOwl's API.
GHunt - 🕵️♂️ Offensive Google framework.