Data / Repositories / Threat intelligence / Python
Python Threat intelligence repositories on GitHub: 6 ranked by stars
6 public Python repositories tagged Threat intelligence are on GitHub, with 13,429 stars between them; 5 had a push in the last 30 days. The most starred: kaifcodec/user-scanner (5,395), mikeroyal/Digital-Forensics-Guide (3,181), OpenOSINT/OpenOSINT (1,753).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|
| kaifcodec/user-scanner | (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors… | 5,395 | 542 | MIT | Oct 14 | Oct 14 |
| mikeroyal/Digital-Forensics-Guide | Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics. | 3,181 | 400 | Jan 4, 2024 | Oct 11 | |
| OpenOSINT/OpenOSINT | AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only. | 1,753 | 278 | MIT | Oct 13 | Oct 14 |
| mukul975/cve-mcp-server | Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more. | 1,624 | 269 | Apache-2.0 | Oct 1 | Oct 14 |
| marc-shade/world-intel-mcp | 139-tool MCP server for real-time global intelligence from free public APIs: markets, SEC filings, conflict, military, aircraft-cohort early warning, refugee and migration flows… | 944 | 153 | MIT | Oct 12 | Oct 14 |
| google/mcp-security | 532 | 146 | Apache-2.0 | Oct 6 | Oct 14 |
Other languages
Related topics
- Cybersecurity 7
- Osint 6
- MCP 6
- Model Context Protocol 6
- Security 5
- Python 4
- AI agents 4
- Claude 3
- Network security 2
- Anthropic 2
- MCP server 2
- Reconnaissance 2
Every Threat intelligence repository
Read from GitHub by SpecStream between October 11, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.