GitHub Trends
Blue-team, red-team, and dual-use phishing security projects found by the scheduled GitHub scanner. The radar is meant to help defenders, testers, and researchers track useful tooling without turning the feed into a credential-theft kit directory.
HTMLDual-use project
Real-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats Primary language: HTML. 1,762 stars.
Read:README previewGitHub project
#anti-phishing#blacklist#blocklist#crypto-scam#cybersecurity#dns-blocklist#domains#drainer
DIGITAL Command LanguageBlue team tool
Aggregation of lists of malicious domains (phishing) that can be integrated into FortiGate firewalls and other products. Primary language: DIGITAL Command Language. 115 stars.
Read:README previewGitHub project
#blocklist#blocklists#domains-blacklist#domains-list#fortigate#fortinet#malicious-domains#phishing
RepositoryBlue team tool
Aggregation of lists of malicious IP addresses (C2, malware, phishing), to be blocked in the LAN > WAN direction, integrated into firewalls: FortiGate, Palo Alto, pfSense, IPtables 40 stars.
Read:README previewGitHub project
#blocklist#blocklists#c2#firewall#fortinet#malware#malware-protection#phishing
RepositoryDual-use project
TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes. 681 stars.
Read:README previewGitHub project
#blueteam#malware#malware-detection#malware-research#osint#phishing#phishing-attacks#phishing-detection
ShellBlue team tool
🐟 PhishTank Blocklist for Pi-hole Primary language: Shell. 13 stars.
Read:README previewGitHub project
#blocklist#hosts#phishing#pihole#pihole-phishtank
ZeekBlue team tool
Zeek-Formatted Threat Intelligence Feeds Primary language: Zeek. 400 stars.
Read:README previewGitHub project
#malware#phishing#threat-intelligence#threatintel#zeek#zeek-ids
PythonBlue team tool
Fire-AV is a collection of lists that you can use to block av providers and bad ips Primary language: Python. 24 stars.
Read:README previewGitHub project
#anti-av#firewall#phishing#wordlists
RepositoryBlue team tool
oisd blocklist 247 stars.
Read:README previewGitHub project
#adblocking#adblocking-dns#adblocking-list#adblocklist#adblockplus#adguardhome#blocklist#dns
RepositoryBlue team tool
Pi-hole and AdguardHome Block lists updated every 24Hrs, we aim for less than 0.01% false positive rate, block malware, C&C infrastructure, phishing and banking threats 56 stars.
Read:README previewGitHub project
#adguard-blocklist#adguard-blocklists#adguard-home-blocklist#botnet-blocklist#malware-protection#malware-research#phishing#phishing-detection
RepositoryDual-use project
Archive of phishing kits captured from suspicious domains detected by phishunt.io, with a sha256 manifest 278 stars.
Read:README previewGitHub project
#malware#osint#phishing#phishing-attacks#phishing-detection#phishing-kit#phishing-sites#scam
PythonBlue team tool
AI-powered phishing & threat-analysis platform to automatically inspect, classify, and report suspicious emails, files, URLs, IPs, and hashes built for teams and organizations Primary language: Python. 91 stars.
Read:README previewGitHub project
#django#django-project#docker#docker-compose#javascript#mail#mail-analysis#python
RepositoryBlue team tool
Custom SpamAssassin rules I and others have made and contributed with - To mitigate spam mails and phishing mails now also with cool Phishtank rules 59 stars.
Read:README previewGitHub project
#cf#phishing#phishtank#rules#spam-detection#spam-filtering#spamassassin
PythonBlue team tool
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash. Primary language: Python. 945 stars.
Read:README previewGitHub project
#c2#ioc#iocfeed#malware#misp#phishing#threat-hunting#threat-intelligence
ShellBlue team tool
Enhanced v2ray/xray and v2ray/xray-clients routing rules with built-in Iranian domains and a focus on security and adblocking. Primary language: Shell. 767 stars.
Read:README previewGitHub project
#adblock#domains#geoip#geosite#gfw#iran#malware#phishing
RepositoryDual-use project
A public, research-focused dataset of expired, and recently dropped domains curated for cybersecurity analysis, brand monitoring, threat intelligence, and market research. 11 stars.
Read:README previewGitHub project
#daily-dropped-domains#daily-expired-domains#domain-intelligence#drop-lists#dropped-domains#expired-domains#expiring-domains#osint
YAMLBlue team tool
Sublime rules for email attack detection, prevention, and threat hunting. Primary language: YAML. 373 stars.
Read:README previewGitHub project
#email-security#phishing#threat-hunting
PythonDual-use project
Machine-readable .txt blocklist of scam URLs and IP Addresses from the Global Anti Scam Organization (https://www.globalantiscam.org) website, updated once a day. Primary language: Python. 34 stars.
Read:README previewGitHub project
#blocklist#dnsbl#ip#ipv4#osint#pfblockerng#phishing#pihole
Adblock Filter ListBlue team tool
Wersja hosts, PiHole, dnsmasq, domenowa (Forti Guard) filtrów KAD Primary language: Adblock Filter List. 62 stars.
Read:README previewGitHub project
#kad#kadhole#malware#phishing#phishing-sites#pi-hole#polish#polskie
Adblock Filter ListBlue team tool
Filtry do uBlocka Origin i AdGuarda, chroniące przed różnymi zagrożeniami w polskiej sieci, takimi jak wirusy, fałszywe sklepy i subskrypcje SMS. Primary language: Adblock Filter List. 67 stars.
Read:README previewGitHub project
#adguard#blocker#filter-lists#filterlist#filters#filtr#filtry#kad
RepositoryBlue team tool
Unified EasyList hosts blacklist for use with DNS and domain blocking tools as pi-hole for the purpose of blocking bad domains used for serving ads, tracking, mining, malware and other nasty content. 15 stars.
Read:README previewGitHub project
#adblock#adblock-plus#adguard#blacklist#blocklist#dns#dnsforge#domains
PythonBlue team tool
A collection of unified blocklists designed to provide complete filtering capabilities for different online threats. Curated from multiple sources (click 🔴 The Sources 🔴 in README.md to view), these blocklists offer a robust solution for blocking ads, malware, trackers, and other unwanted content. Primary language: Python. 129 stars.
Read:README previewGitHub project
#adblock#adguard#adguard-home#ads#blocklist#crypto#dnsmasq#domains
JavaScriptBlue team tool
Canadian threat feeds updated every 12 hours. Primary language: JavaScript. 22 stars.
Read:README previewGitHub project
#blocklist#canada#phishing#threat-intelligence
AppleScriptBlue team tool
Spam filter for Apple's Mail.app on macOS Primary language: AppleScript. 34 stars.
Read:README previewGitHub project
#apple-mail#applescript#blacklist#email#extension#javascript#js#junkmail
JavaScriptBlue team tool
One extension. Every defence. - the all-in-one privacy, security & anti-scam extension for Chromium browsers (MV3). 106 on-device protections: ad & tracker blocking, anti-fingerprinting, phishing/scam & credential-theft defence, cookie-wall lifting, download scanning, IP-leak protection, plus YouTube & Twitch tools. No account, no telemetry. GPLv3. Primary language: JavaScript. 8 stars.
Read:README previewGitHub project
#adblock#adblocker#anti-fingerprinting#anti-phishing#anti-scam#anti-tracking#browser-extension#chrome-extension
PythonBlue team tool
P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle Primary language: Python. 33 stars.
Read:README previewGitHub project
#browser-in-the-middle#cybersecurity#defcon#ofensive-security#offensive#phishing#spear-phishing
TypeScriptRed team tool
Tyto-PhishShield is an AI-powered phishing awareness and simulation platform. Tyto-PhishShield is an enterprise-grade Human Risk Management (HRM) platform. Primary language: TypeScript. 5 stars.
PythonRed team tool
BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups. Primary language: Python. 594 stars.
Read:README previewGitHub project
#adversary-emulation#adversary-simulation#apt-groups#apt-groups-and-operations#bear-c2#command-and-control#exfiltration#mitre-attack
PythonBlue team tool
Advanced Phishing Protection: Suricata rulesets open and free Primary language: Python. 38 stars.
Read:README previewGitHub project
#anti-phishing#antiphishing#detection-engineering#idps#ids#ips#ndr#network-monitoring
JavaScriptDual-use project
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS. Primary language: JavaScript. 1,380 stars.
Read:README previewGitHub project
#ai#ai-threat-intelligence#certificate-transparency#certstream#cyber-ai#cybersecurity#django#huggingface
RepositoryBlue team tool
Newly Registered Domains (NRD) lists generated from WhoisDS.com free database — daily domain lists for security and threat analysis. 53 stars.
Read:README previewGitHub project
#bloatware#botnet#malware#newly-registered-domains#nrd#phishing#scam#spyware
RepositoryDual-use project
A fresh feed of crypto phishing and crypto scam websites. Automatically updated daily/frequently. 69 stars.
Read:README previewGitHub project
#blacklist#blocklist#cryptocurrency#osint#phishing#phishing-detection#phishing-page#phishing-sites
PythonDual-use project
ShortDot SA zone abuse evidence — 6,242,647 domains across .icu, .bond, .cyou, .sbs, .cfd, .buzz, .qpon. 237,894 classified IOC (153,775 HIGH), 6,169 feed/intel confirmed. Daily updated IOC feeds, STIX 2.1 bundle, SIEM CSV. Primary language: Python. 91 stars.
Read:README previewGitHub project
#cybersecurity#domain-abuse#icann#ioc#osint#phishing#shortdot#stix2
ShellBlue team tool
Enhanced Clash and Clash.Meta routing rules with Iranian domains ruleset and a focus on security and adblocking. Primary language: Shell. 86 stars.
Read:README previewGitHub project
#adblock#clash#clash-meta#domains#geosite#gfw#iran#malware
TextBlue team tool
DNS-Blocklists: For a better internet - keep the internet clean! Primary language: Text. 26,191 stars.
Read:README previewGitHub project
#adblock#adguard#ads#blacklist#blocklist#coins#dns#domains
ShellBlue team tool
My personalized Hosts file collection of various sources, cleaned and optimized specially for pDNSf Primary language: Shell. 31 stars.
Read:README previewGitHub project
#ad-block#ad-blocker#adblock#ads#blocklist#collection#filterlist#hosts
HTMLBlue team tool
NameSilo (IANA #1479) registrar abuse investigation — 5,281,151 domains scanned, 204,460 classified IOC (122,119 HIGH), largely behind NameSilo's own PrivacyGuardian WHOIS shield. Filed with ICANN Mar 2026. Daily updated IOC feeds, SIEM CSV, operator clusters. Primary language: HTML. 131 stars.
Read:README previewGitHub project
#abuse-investigation#cybersecurity#domain-intelligence#icann#monero-drainer#namesilo#phishing#registrar-abuse
RustBlue team tool
🛡️ Clone websites to conduct authorized Rust-based phishing tests and simulate credential capture for security assessments. Primary language: Rust. 6 stars.
Read:README previewGitHub project
#phishing#phishing-attacks#phishing-kit#phishing-page#phishing-script#phishing-sites#phishing-tool#rust
GoRed team tool
This project aims to be a drop-in replacement for the certstream server by Calidog. This tool aggregates, parses, and streams certificate data from multiple certificate transparency logs via websocket connections to the clients. Primary language: Go. 229 stars.
Read:README previewGitHub project
#certificate#certificate-transparency#certificates#certstream#go#golang#osint#phishing
ShellRed team tool
A quick-and-easy bash script installing and launching EvilGinx2, a phishing reverse-proxy Primary language: Shell. 29 stars.
PythonRed team tool
Python API for Phishtank Lookup Primary language: Python. 5 stars.
Read:README previewGitHub project
#information-extraction#osint#phishing#phishing-sites#phishtank#phishtank-api
GoRed team tool
Simulation, Training and Red Team Phishing Framework Primary language: Go. 249 stars.
Read:README previewGitHub project
#aitm#gophish-alternative#mitm-framework#mitm-proxy#phishing#phishing-attacks#phishing-servers#phishing-simulation
YARABlue team tool
Repository of Yara rules dedicated to Phishing Kits Zip files Primary language: YARA. 239 stars.
Read:README previewGitHub project
#fraud-detection#fraud-prevention#phishing#phishing-detection#phishing-kit#phishing-sites#phishing-tool#virustotal
PythonDual-use project
Simple web API using the hourly dump from Phishtank Primary language: Python. 12 stars.
Read:README previewGitHub project
#information-security#osint#phishing#phishing-detection#phishtank#phishtank-api
PythonRed team tool
Official repository of the DedSec Project. Primary language: Python. 1,013 stars.
Read:README previewGitHub project
#android-security#cybersecurity#ethical-hacking#hacking-tools#information-security#mobile-hacking#network-security#osint
ShellBlue team tool
A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and control, hunt for advanced threats, collaborate with the community, and write detections-as-code. Primary language: Shell. 269 stars.
Read:README previewGitHub project
#detection-rules#email-security#phishing#phishing-detection#security#security-tools
GoDual-use project
Actively maintained, security-hardened fork of Gophish — the open-source phishing toolkit Primary language: Go. 7 stars.
Read:README previewGitHub project
#awareness#cybersecurity#email-security#golang#gophish#penetration-test#phishing#phishing-simulation
GoBlue team tool
Open-source phishing detection engine with explainable verdict. Self-hostable alternative to VirusTotal, CheckPhish, URLScan.io Primary language: Go. 107 stars.
Read:README previewGitHub project
#domain-analysis#golang#link-scanner#phishing#phishing-detection#security-tools#self-hosted#svelte
PythonBlue team tool
Automates Cloudflare Gateway updates with Hagezi Pro++ DNS filter to block ads, trackers, and malicious domains - A completely free alternative to NextDNS, AdGuard, ControlD and other similar services Primary language: Python. 20 stars.
Read:README previewGitHub project
#adblock#anti-phishing#anti-tracking#antimalware#cloudflare#cloudflare-gateway#cloudflare-zero-trust#privacy
ShellDual-use project
🔍 Discover if a domain is resolvable or blocked by secure DNS and Ad-blocking services, and experience the innovative idea of DaaS - DNS as an Intelligence Service. Primary language: Shell. 82 stars.
Read:README previewGitHub project
#adblock#cybersecurity#dns#domain#filter#hacktoberfest#infosec#malware
ShellDual-use project
A comprehensive, high-quality URL shorteners domain list for whitelist/allowlist or blacklist/blocklist purposes, utilized by NextDNS, ControlD, RethinkDNS, dnslow.me, and other OSINT projects. Primary language: Shell. 169 stars.
Read:README previewGitHub project
#adguard-blocklist#allowlist#blacklist#blocking#blocklist#cyber-security#dns#dnsbl
GoRed team tool
Make Gophish great again Primary language: Go. 11 stars.
PythonRed team tool
Modern Docker-based phishing framework for authorized red team engagements. 8 pixel-perfect templates (Instagram, Facebook, Netflix, Twitter/X, LinkedIn, Snapchat, Microsoft, Gmail) + Cloudflare tunnel + SQLite capture. Primary language: Python. 7 stars.
Read:README previewGitHub project
#cloudflared#docker#fastapi#osint#pentesting#phishing#red-team#security-research
JavaScriptBlue team tool
Google Chrome extension for detecting phishing attacks. It is a rule-based system that analyses the webpage content to identify phishing attacks. Primary language: JavaScript. 11 stars.
Read:README previewGitHub project
#chrome-extension#machine-learning#phishing#phishing-attacks#phishing-detection#productivity#svm-classifier
RepositoryBlue team tool
Spyfu Zen 158 stars.
Read:README previewGitHub project
#anti-phishing#anti-spyware#antispyware#configuration-manager#ip-locator#ip-tracer#ip-tracker#patchguard-bypass
RepositoryBlue team tool
An open-source, AI-powered NLP tool designed to detect psychological manipulation, urgency, and zero-day social engineering tactics in emails and text messages. 10 stars.
Read:README previewGitHub project
#ai#mitre-atlas#ml#nlp#phishing-detection#social#social-engineering#transformers
PHPBlue team tool
Defensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven AI engagement. Multi-agent LLM architecture with adaptive strategy selection. Primary language: PHP. 21 stars.
Read:README previewGitHub project
#cybersecurity#email-security#fraud-prevention#honeypot#ioc#llm#misp#multi-agent-llm
PythonBlue team tool
WhoDAT is an InfoSec Analyzer for Nerds using VirusTotal, Google Safe Browsing, URLScan, Hybrid-Analysis, and OpenAI. Scan URLs, emails, headers, and attachments (including QR codes) for malicious activity! Primary language: Python. 13 stars.
Read:README previewGitHub project
#anti-phishing#anti-phishing-tools#attachment-scanner#cybersecurity-ai#cybersecurity-python#cybersecurity-tools#email-analysis#email-analyzer
CSSRed team tool
An educational phishing simulation login page demonstrating how fake UIs capture user credentials. It logs inputs, stores them locally, and emails the captured data for awareness training. Intended strictly for controlled, ethical use to teach URL verification and phishing prevention. Primary language: CSS. 30 stars.
Read:README previewGitHub project
#client-side-security#cybersecurity-awareness#ethical-hacking#html-css-javascript#login-page#phishing-awareness#phishing-simulation#security-education
TypeScriptBlue team tool
Safe bridge between AI agents and Web3 transactions. Open-source React kit + protocol with anti-phishing UI patterns built in. Primary language: TypeScript. 7 stars.
Read:README previewGitHub project
#accessibility#account-abstraction#ai-agents#anti-phishing#arbitrum#eip-7702#erc-8265#ethereum
PythonDual-use project
PhishGuard is a fast-paced web game that trains your instincts against email phishing. Powered by a Dual-AI Consensus Engine (OpenRouter & Groq), it generates and verifies highly realistic, unique phishing scenarios in real-time. Can you spot the scam before the 10-second timer runs out? Primary language: Python. 17 stars.
Read:README previewGitHub project
#ai#cybersecurity#dataset#education#educational-game#flask#flask-application#groq