GitHub repo leaderboard by stars, growth rate and activity.

• intelowlproject

  #1intelowlproject/IntelOwl

  IntelOwl: manage your Threat Intelligence at scale

  Python4,707 starslast pushed 18 hours ago
• mitre-attack

  #2mitre-attack/attack-navigator

  Web app that provides basic navigation and annotation of ATT&CK matrices

  TypeScript2,456 starslast pushed 9 hours ago
• center-for-threat-informed-defense

  #3center-for-threat-informed-defense/adversary_emulation_library

  An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

  C2,160 starslast pushed 1 year ago
• mytechnotalent

  #4mytechnotalent/Hacking-Windows

  A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

  C1,626 starslast pushed 16 hours ago
• mitre-attack

  #5mitre-attack/car

  Cyber Analytics Repository

  Python1,025 starslast pushed 1 year ago
• center-for-threat-informed-defense

  #6center-for-threat-informed-defense/attack-flow

  Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

  TypeScript772 starslast pushed Yesterday
• mitre-attack

  #7mitre-attack/mitreattack-python

  A python module for working with ATT&CK

  HTML740 starslast pushed 1 month ago
• stanfrbd

  #8stanfrbd/cyberbro

  A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

  Python686 starslast pushed 3 weeks ago
• mitre-attack

  #9mitre-attack/attack-stix-data

  STIX data representing MITRE ATT&CK

  Python657 starslast pushed 1 month ago
• 7onez

  #107onez/cti-expert

  CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

  Python593 starslast pushed 6 days ago

#	Repo	Language	Stars	30-day trend	Last updated
1	intelowlproject intelowlproject/IntelOwl IntelOwl: manage your Threat Intelligence at scale	Python	4,707		last pushed 18 hours ago
2	mitre-attack mitre-attack/attack-navigator Web app that provides basic navigation and annotation of ATT&CK matrices	TypeScript	2,456		last pushed 9 hours ago
3	center-for-threat-informed-defense center-for-threat-informed-defense/adversary_emulation_library An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.	C	2,160		last pushed 1 year ago
4	mytechnotalent mytechnotalent/Hacking-Windows A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.	C	1,626		last pushed 16 hours ago
5	mitre-attack mitre-attack/car Cyber Analytics Repository	Python	1,025		last pushed 1 year ago
6	center-for-threat-informed-defense center-for-threat-informed-defense/attack-flow Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.	TypeScript	772		last pushed Yesterday
7	mitre-attack mitre-attack/mitreattack-python A python module for working with ATT&CK	HTML	740		last pushed 1 month ago
8	stanfrbd stanfrbd/cyberbro A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.	Python	686		last pushed 3 weeks ago
9	mitre-attack mitre-attack/attack-stix-data STIX data representing MITRE ATT&CK	Python	657		last pushed 1 month ago
10	7onez 7onez/cti-expert CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.	Python	593		last pushed 6 days ago

All · 11,658