{"slug": "threat-intel", "title": "Threat Intel", "description": "Discover where the threats begin.", "sections": [{"title": "", "groups": [{"title": "APT Research", "tools": [{"name": "Cybercrime Campaign Collections", "url": "https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections", "description": "APT & CyberCriminal Campaign Collection.", "repo": "CyberMonitor/APT_CyberCriminal_Campagin_Collections", "_anchor": "cybercrime-campaign-collections", "_section": "", "_group": "APT Research", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/cybercrime-campaign-collections/"}]}, {"title": "Frameworks/Platforms", "tools": [{"name": "ARTIF", "url": "https://github.com/CRED-CLUB/ARTIF", "description": "An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.", "repo": "CRED-CLUB/ARTIF", "_anchor": "artif", "_section": "", "_group": "Frameworks/Platforms", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/artif/"}, {"name": "MISP", "url": "https://github.com/MISP/MISP", "description": "MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform).", "repo": "MISP/MISP", "_anchor": "misp", "_section": "", "_group": "Frameworks/Platforms", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/misp/"}, {"name": "ThreatIngestor", "url": "https://github.com/InQuest/ThreatIngestor", "description": "A flexible, configuration-driven, extensible framework for consuming threat intelligence.", "repo": "InQuest/ThreatIngestor", "_anchor": "threatingestor", "_section": "", "_group": "Frameworks/Platforms", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/threatingestor/"}]}, {"title": "Pastes", "tools": [{"name": "Ghostbin", "url": "https://ghostbin.com/", "description": "Ghostbin is a website where you can store and share text online.", "_anchor": "ghostbin", "_section": "", "_group": "Pastes", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/ghostbin/"}, {"name": "Pastebin", "url": "https://pastebin.com/", "description": "Pastebin is a website where you can store text online for a set period of time.", "_anchor": "pastebin", "_section": "", "_group": "Pastes", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/pastebin/"}]}, {"title": "Ransomware Group Feeds", "tools": [{"name": "Arvin Club", "url": "http://3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onion/", "description": "Arvin ransomware team homepage.", "tags": ["tor"], "_anchor": "arvin-club", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/arvin-club/"}, {"name": "Avaddon", "url": "http://avaddongun7rngel.onion", "description": "Avaddon ransomware team homepage.", "tags": ["tor"], "_anchor": "avaddon", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/avaddon/"}, {"name": "Babuk Locker", "url": "http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/", "description": "Babuk Locker ransomware team homepage.", "tags": ["tor"], "_anchor": "babuk-locker", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/babuk-locker/"}, {"name": "CL0P", "url": "http://ekbgzchl6x2ias37.onion/", "description": "CL0P ransomware team homepage.", "tags": ["tor"], "_anchor": "cl0p", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/cl0p/"}, {"name": "CONTI", "url": "https://continews.icu/", "description": "CONTI ransomware team homepage.", "links": [{"label": "TOR", "url": "http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion"}], "tags": ["tor"], "_anchor": "conti", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/conti/"}, {"name": "Cuba", "url": "http://cuba4mp6ximo2zlo.onion/", "description": "Cuba ransomware team homepage.", "tags": ["tor"], "_anchor": "cuba", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/cuba/"}, {"name": "DarkSide", "url": "http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/", "description": "Darkside ransomware team homepage.", "tags": ["tor"], "_anchor": "darkside", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/darkside/"}, {"name": "DoppelPaymer", "url": "http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/", "description": "DoppelPaymer ransomware team hompage.", "tags": ["tor"], "_anchor": "doppelpaymer", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/doppelpaymer/"}, {"name": "Everest", "url": "http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/", "description": "Everest ransomware team homepage.", "tags": ["tor"], "_anchor": "everest", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/everest/"}, {"name": "Lorenz", "url": "http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/", "description": "Lorenz ransomware team hompage.", "tags": ["tor"], "_anchor": "lorenz", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/lorenz/"}, {"name": "LV", "url": "http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion/", "description": "LV ransomware team homepage.", "tags": ["tor"], "_anchor": "lv", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/lv/"}, {"name": "Mount Locker", "url": "http://mountnewsokhwilx.onion", "description": "Mount Locker ransomware team homepage.", "tags": ["tor"], "_anchor": "mount-locker", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/mount-locker/"}, {"name": "N3tw0rm", "url": "http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/", "description": "N3tw0rm ransomware team homepage.", "tags": ["tor"], "_anchor": "n3tw0rm", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/n3tw0rm/"}, {"name": "Nefilim (Corporate Leaks)", "url": "http://edteebo2w2bvwewbjb5wgwxksuwqutbg3lk34ln7jpf3obhy4cvkbuqd.onion/", "description": "Nefilm/Corporate Leaks ransomware team hompage.", "tags": ["tor"], "_anchor": "nefilim-corporate-leaks", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/nefilim-corporate-leaks/"}, {"name": "Pay2Key", "url": "http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/", "description": "Pay2Key ransomware team homepage.", "tags": ["tor"], "_anchor": "pay2key", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/pay2key/"}, {"name": "PYSA", "url": "http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/", "description": "PYSA ransomware team homepage.", "tags": ["tor"], "_anchor": "pysa", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/pysa/"}, {"name": "Ragnar Locker", "url": "http://p6o7m73ujalhgkiv.onion/", "description": "Ragnar Locker ransomware team homepage.", "tags": ["tor"], "_anchor": "ragnar-locker", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/ragnar-locker/"}, {"name": "Ragnarok", "url": "http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/", "description": "Ragnarok ransomware team homepage.", "tags": ["tor"], "_anchor": "ragnarok", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/ragnarok/"}, {"name": "RansomEXX", "url": "http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/", "description": "RansomEXX ransomware team homepage.", "tags": ["tor"], "_anchor": "ransomexx", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/ransomexx/"}, {"name": "Ranzy Locker", "url": "http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/", "description": "Ranzy Locker ransomware team hompage.", "tags": ["tor"], "_anchor": "ranzy-locker", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/ranzy-locker/"}, {"name": "Sodinokibi (REvil)", "url": "http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion", "description": "REvil ransomware team hompage.", "tags": ["tor"], "_anchor": "sodinokibi-revil", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/sodinokibi-revil/"}, {"name": "Sunscrypt", "url": "http://nbzzb6sa6xuura2z.onion/", "description": "Sunscrypt ransomware team homepage.", "tags": ["tor"], "_anchor": "sunscrypt", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/sunscrypt/"}, {"name": "SynAck", "url": "http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/index.html", "description": "SynAck ransomeware team hompage.", "tags": ["tor"], "_anchor": "synack", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/synack-threat-intel/"}, {"name": "Xing Team", "url": "http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/", "description": "Xing ransomware team hompage.", "tags": ["tor"], "_anchor": "xing-team", "_section": "", "_group": "Ransomware Group Feeds", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/xing-team/"}]}, {"title": "Dashboards & Indexes", "tools": [{"name": "ICHI (Internet Cyber Health Index)", "url": "https://ichi.global", "description": "Free daily index scoring internet cyber health from 20+ public sources (CISA KEV, Shodan, CVE/NVD, abuse.ch).", "_anchor": "ichi-internet-cyber-health-index", "_section": "", "_group": "Dashboards & Indexes", "_tabs": [""], "_tab_titles": [""], "_page": "/tools/ichi-internet-cyber-health-index/"}]}], "notices": [{"type": "warning", "text": "Certain resources mentioned in the following section necessitate the use of TOR for access. It is imperative to bear in mind that participating in unlawful activities is explicitly forbidden, and adhering to the pertinent local and state regulations rests solely upon your individual responsibility."}]}, {"title": "TOR", "groups": [{"title": "Directory Listings", "tools": [{"name": "Dark Dir", "url": "http://l7vh56hxm3t4tzy75nxzducszppgi45fyx2wy6chujxb2rhy7o5r62ad.onion", "description": "TOR Link Directory.", "tags": ["tor"], "_anchor": "dark-dir", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/dark-dir/"}, {"name": "Hidden Links", "url": "http://wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion/", "description": "TOR Link Directory.", "tags": ["tor"], "_anchor": "hidden-links", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/hidden-links/"}, {"name": "Onion Link Directory", "url": "http://torlinkszegvxqb6.onion/", "description": "TOR Link Directory.", "tags": ["tor"], "_anchor": "onion-link-directory", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/onion-link-directory/"}, {"name": "Onion Scanner", "url": "http://4r4zaei5qa7qq5ha.onion/", "description": "Onion Scanner is a unique deepweb shops crawler which gathers reviews for customers convenience.", "tags": ["tor"], "_anchor": "onion-scanner", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/onion-scanner/"}, {"name": "Paul's Onion Links", "url": "http://paullzqj3ntil7vyar3gxeks7bz5haiteeehz5vdk5fadvtto7q7liid.onion/", "description": "TOR Link Directory.", "tags": ["tor"], "_anchor": "paul-s-onion-links", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/paul-s-onion-links/"}, {"name": "Shops Dir", "url": "http://vxmua4uvg7vp5ssnvx5gexrr2nxso3wwvjwagdub67vcombj4kf4i4qd.onion/", "description": "ShopsDir is a growing catalogue of all DeepWeb/DarkNet shops, stores and markets.", "tags": ["tor"], "_anchor": "shops-dir", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/shops-dir/"}, {"name": "Tornode", "url": "http://e6wzjohnxejirqa2sgridvymv2jxhrqdfuyxvoxp3xpqh7kr4kbwpwad.onion/", "description": "TOR Link Directory.", "tags": ["tor"], "_anchor": "tornode", "_section": "TOR", "_group": "Directory Listings", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/tornode/"}]}, {"title": "Inspection", "tools": [{"name": "Onioff", "url": "https://github.com/k4m4/onioff", "description": "An onion url inspector for inspecting deep web links.", "repo": "k4m4/onioff", "_anchor": "onioff", "_section": "TOR", "_group": "Inspection", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/onioff/"}]}, {"title": "Search Engines", "tools": [{"name": "Ahmia", "url": "https://ahmia.fi/", "description": "Ahmia's mission is to create the premier search engine for services residing on the Tor anonymity network.", "_anchor": "ahmia", "_section": "TOR", "_group": "Search Engines", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/ahmia/"}, {"name": "Hoodle", "url": "http://nr2dvqdot7yw6b5poyjb7tzot7fjrrweb2fhugvytbbio7ijkrvicuid.onion", "description": "A DeepWeb search engine with clear interface and accurate link database.", "tags": ["tor"], "_anchor": "hoodle", "_section": "TOR", "_group": "Search Engines", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/hoodle/"}, {"name": "Sentor", "url": "http://e27slbec2ykiyo26gfuovaehuzsydffbit5nlxid53kigw3pvz6uosqd.onion/index.php", "description": "TOR Search Engine.", "tags": ["tor"], "_anchor": "sentor", "_section": "TOR", "_group": "Search Engines", "_tabs": ["tor"], "_tab_titles": ["TOR"], "_page": "/tools/sentor/"}]}], "notices": [{"type": "warning", "text": "Some resources in the below section require TOR to access them. Remember, engaging in illegal activities is strictly prohibited, and compliance with local state laws is your sole responsibility."}, {"type": "warning", "text": "Some resources in the below section require TOR to access them. Remember, engaging in illegal activities is strictly prohibited, and compliance with local state laws is your sole responsibility."}]}], "tools": [{"name": "Ahmia", "url": "https://ahmia.fi/", "description": "Ahmia's mission is to create the premier search engine for services residing on the Tor anonymity network.", "category": "threat-intel", "section": "TOR", "group": "Search Engines", "repo": null, "links": [], "tags": [], "path": "/tools/ahmia/", "listing": "/threat-intel/#ahmia"}, {"name": "ARTIF", "url": "https://github.com/CRED-CLUB/ARTIF", "description": "An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.", "category": "threat-intel", "section": "", "group": "Frameworks/Platforms", "repo": "CRED-CLUB/ARTIF", "links": [], "tags": [], "path": "/tools/artif/", "listing": "/threat-intel/#artif"}, {"name": "Arvin Club", "url": "http://3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onion/", "description": "Arvin ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/arvin-club/", "listing": "/threat-intel/#arvin-club"}, {"name": "Avaddon", "url": "http://avaddongun7rngel.onion", "description": "Avaddon ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/avaddon/", "listing": "/threat-intel/#avaddon"}, {"name": "Babuk Locker", "url": "http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/", "description": "Babuk Locker ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/babuk-locker/", "listing": "/threat-intel/#babuk-locker"}, {"name": "CL0P", "url": "http://ekbgzchl6x2ias37.onion/", "description": "CL0P ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/cl0p/", "listing": "/threat-intel/#cl0p"}, {"name": "CONTI", "url": "https://continews.icu/", "description": "CONTI ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [{"label": "TOR", "url": "http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion"}], "tags": ["tor"], "path": "/tools/conti/", "listing": "/threat-intel/#conti"}, {"name": "Cuba", "url": "http://cuba4mp6ximo2zlo.onion/", "description": "Cuba ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/cuba/", "listing": "/threat-intel/#cuba"}, {"name": "Cybercrime Campaign Collections", "url": "https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections", "description": "APT & CyberCriminal Campaign Collection.", "category": "threat-intel", "section": "", "group": "APT Research", "repo": "CyberMonitor/APT_CyberCriminal_Campagin_Collections", "links": [], "tags": [], "path": "/tools/cybercrime-campaign-collections/", "listing": "/threat-intel/#cybercrime-campaign-collections"}, {"name": "Dark Dir", "url": "http://l7vh56hxm3t4tzy75nxzducszppgi45fyx2wy6chujxb2rhy7o5r62ad.onion", "description": "TOR Link Directory.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/dark-dir/", "listing": "/threat-intel/#dark-dir"}, {"name": "DarkSide", "url": "http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/", "description": "Darkside ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/darkside/", "listing": "/threat-intel/#darkside"}, {"name": "DoppelPaymer", "url": "http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/", "description": "DoppelPaymer ransomware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/doppelpaymer/", "listing": "/threat-intel/#doppelpaymer"}, {"name": "Everest", "url": "http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/", "description": "Everest ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/everest/", "listing": "/threat-intel/#everest"}, {"name": "Ghostbin", "url": "https://ghostbin.com/", "description": "Ghostbin is a website where you can store and share text online.", "category": "threat-intel", "section": "", "group": "Pastes", "repo": null, "links": [], "tags": [], "path": "/tools/ghostbin/", "listing": "/threat-intel/#ghostbin"}, {"name": "Hidden Links", "url": "http://wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion/", "description": "TOR Link Directory.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/hidden-links/", "listing": "/threat-intel/#hidden-links"}, {"name": "Hoodle", "url": "http://nr2dvqdot7yw6b5poyjb7tzot7fjrrweb2fhugvytbbio7ijkrvicuid.onion", "description": "A DeepWeb search engine with clear interface and accurate link database.", "category": "threat-intel", "section": "TOR", "group": "Search Engines", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/hoodle/", "listing": "/threat-intel/#hoodle"}, {"name": "ICHI (Internet Cyber Health Index)", "url": "https://ichi.global", "description": "Free daily index scoring internet cyber health from 20+ public sources (CISA KEV, Shodan, CVE/NVD, abuse.ch).", "category": "threat-intel", "section": "", "group": "Dashboards & Indexes", "repo": null, "links": [], "tags": [], "path": "/tools/ichi-internet-cyber-health-index/", "listing": "/threat-intel/#ichi-internet-cyber-health-index"}, {"name": "Lorenz", "url": "http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/", "description": "Lorenz ransomware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/lorenz/", "listing": "/threat-intel/#lorenz"}, {"name": "LV", "url": "http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion/", "description": "LV ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/lv/", "listing": "/threat-intel/#lv"}, {"name": "MISP", "url": "https://github.com/MISP/MISP", "description": "MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform).", "category": "threat-intel", "section": "", "group": "Frameworks/Platforms", "repo": "MISP/MISP", "links": [], "tags": [], "path": "/tools/misp/", "listing": "/threat-intel/#misp"}, {"name": "Mount Locker", "url": "http://mountnewsokhwilx.onion", "description": "Mount Locker ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/mount-locker/", "listing": "/threat-intel/#mount-locker"}, {"name": "N3tw0rm", "url": "http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/", "description": "N3tw0rm ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/n3tw0rm/", "listing": "/threat-intel/#n3tw0rm"}, {"name": "Nefilim (Corporate Leaks)", "url": "http://edteebo2w2bvwewbjb5wgwxksuwqutbg3lk34ln7jpf3obhy4cvkbuqd.onion/", "description": "Nefilm/Corporate Leaks ransomware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/nefilim-corporate-leaks/", "listing": "/threat-intel/#nefilim-corporate-leaks"}, {"name": "Onioff", "url": "https://github.com/k4m4/onioff", "description": "An onion url inspector for inspecting deep web links.", "category": "threat-intel", "section": "TOR", "group": "Inspection", "repo": "k4m4/onioff", "links": [], "tags": [], "path": "/tools/onioff/", "listing": "/threat-intel/#onioff"}, {"name": "Onion Link Directory", "url": "http://torlinkszegvxqb6.onion/", "description": "TOR Link Directory.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/onion-link-directory/", "listing": "/threat-intel/#onion-link-directory"}, {"name": "Onion Scanner", "url": "http://4r4zaei5qa7qq5ha.onion/", "description": "Onion Scanner is a unique deepweb shops crawler which gathers reviews for customers convenience.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/onion-scanner/", "listing": "/threat-intel/#onion-scanner"}, {"name": "Pastebin", "url": "https://pastebin.com/", "description": "Pastebin is a website where you can store text online for a set period of time.", "category": "threat-intel", "section": "", "group": "Pastes", "repo": null, "links": [], "tags": [], "path": "/tools/pastebin/", "listing": "/threat-intel/#pastebin"}, {"name": "Paul's Onion Links", "url": "http://paullzqj3ntil7vyar3gxeks7bz5haiteeehz5vdk5fadvtto7q7liid.onion/", "description": "TOR Link Directory.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/paul-s-onion-links/", "listing": "/threat-intel/#paul-s-onion-links"}, {"name": "Pay2Key", "url": "http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/", "description": "Pay2Key ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/pay2key/", "listing": "/threat-intel/#pay2key"}, {"name": "PYSA", "url": "http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/", "description": "PYSA ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/pysa/", "listing": "/threat-intel/#pysa"}, {"name": "Ragnar Locker", "url": "http://p6o7m73ujalhgkiv.onion/", "description": "Ragnar Locker ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/ragnar-locker/", "listing": "/threat-intel/#ragnar-locker"}, {"name": "Ragnarok", "url": "http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/", "description": "Ragnarok ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/ragnarok/", "listing": "/threat-intel/#ragnarok"}, {"name": "RansomEXX", "url": "http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/", "description": "RansomEXX ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/ransomexx/", "listing": "/threat-intel/#ransomexx"}, {"name": "Ranzy Locker", "url": "http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/", "description": "Ranzy Locker ransomware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/ranzy-locker/", "listing": "/threat-intel/#ranzy-locker"}, {"name": "Sentor", "url": "http://e27slbec2ykiyo26gfuovaehuzsydffbit5nlxid53kigw3pvz6uosqd.onion/index.php", "description": "TOR Search Engine.", "category": "threat-intel", "section": "TOR", "group": "Search Engines", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/sentor/", "listing": "/threat-intel/#sentor"}, {"name": "Shops Dir", "url": "http://vxmua4uvg7vp5ssnvx5gexrr2nxso3wwvjwagdub67vcombj4kf4i4qd.onion/", "description": "ShopsDir is a growing catalogue of all DeepWeb/DarkNet shops, stores and markets.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/shops-dir/", "listing": "/threat-intel/#shops-dir"}, {"name": "Sodinokibi (REvil)", "url": "http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion", "description": "REvil ransomware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/sodinokibi-revil/", "listing": "/threat-intel/#sodinokibi-revil"}, {"name": "Sunscrypt", "url": "http://nbzzb6sa6xuura2z.onion/", "description": "Sunscrypt ransomware team homepage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/sunscrypt/", "listing": "/threat-intel/#sunscrypt"}, {"name": "SynAck", "url": "http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/index.html", "description": "SynAck ransomeware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/synack-threat-intel/", "listing": "/threat-intel/#synack"}, {"name": "ThreatIngestor", "url": "https://github.com/InQuest/ThreatIngestor", "description": "A flexible, configuration-driven, extensible framework for consuming threat intelligence.", "category": "threat-intel", "section": "", "group": "Frameworks/Platforms", "repo": "InQuest/ThreatIngestor", "links": [], "tags": [], "path": "/tools/threatingestor/", "listing": "/threat-intel/#threatingestor"}, {"name": "Tornode", "url": "http://e6wzjohnxejirqa2sgridvymv2jxhrqdfuyxvoxp3xpqh7kr4kbwpwad.onion/", "description": "TOR Link Directory.", "category": "threat-intel", "section": "TOR", "group": "Directory Listings", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/tornode/", "listing": "/threat-intel/#tornode"}, {"name": "Xing Team", "url": "http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/", "description": "Xing ransomware team hompage.", "category": "threat-intel", "section": "", "group": "Ransomware Group Feeds", "repo": null, "links": [], "tags": ["tor"], "path": "/tools/xing-team/", "listing": "/threat-intel/#xing-team"}]}