Cti Python Packages

stix2-patterns

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators

stix2

OASIS TC Open Repository: Python APIs for STIX 2

pycti

Open Cyber Threat Intelligence Platform

taxii2-client

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

mitreattack-python

A python module for working with ATT&CK

stix2-validator

OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

sherlock-project

Hunt down social media accounts by username across social networks

stix2-elevator

OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON

cabby

TAXII client implementation from EclecticIQ

greenswitch

Battle proven FreeSWITCH Event Socket Protocol client implementation with Gevent

medallion

OASIS TC Open Repository: TAXII 2 Server Library Written in Python

misp-lib-stix2

OASIS TC Open Repository: Python APIs for STIX 2

agentic-bug-hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

threatcluster-mcp

MCP server for the ThreatCluster threat intelligence API: incident clusters, IOCs, CVEs, ransomware leak-site victims and entity profiles as tools for Claude, Cursor, VS Code and any MCP client. Python and npm.

misp-modules

Modules for expansion services, enrichment, import and export in MISP and other tools.

uhbs

Universal Honeypot Benchmarking Standard (UHBS) v5.0.x — open-source framework for vendor-neutral honeypot / deception evaluation

opentaxii

TAXII server implementation in Python from EclecticIQ

umbra-osint

Graph-first OSINT for authorized investigations — CLI, 40 collectors, confidence scoring, owned data lakes. MIT. The open core of umbra-osint.com

sylva

Simplify the link between social and real identities

promptlsh

A portable similarity digest for prompt attacks, so reworded jailbreaks correlate instead of reading as unrelated items.

mitreattackscrapper

A simple scrapper for MITRE ATT&CK information written in Python3.

stix2-generator

OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/cti-stix-generator

mcp-cyberbro

Using MCP is fun with Cyberbro!

zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents