Open-Source Release: CyberCodex v3.2 - Autonomous 22-source zero-cost CTI aggregator (CISA KEV, FIRST EPSS, ThreatFox, Feodo C2, Hudson Rock, HIBP) + APT & Operation Encyclopedia
Source Reddit ThreatIntel
Discussion
CyberCodex v3.2 is an open-source Python CLI tool designed to aggregate cyber threat intelligence (CTI) from 22 public sources without requiring API keys. It provides live enrichment of indicators of compromise (IOCs) and hashes, vulnerability prioritization using MITRE CVE data combined with exploitation probability scores, and telemetry on infostealers and breaches. The tool also includes offline encyclopedic data on advanced persistent threat (APT) operations and actor profiles, supporting multiple languages and exporting data in Markdown or JSON formats.
r/threatintel (opens in a new tab)u/Traditional_Bear54920 points0 comments
Hey r/ThreatIntel,
I built CyberCodex (v3.2), a lightweight, zero-dependency Python CLI tool designed for CTI analysts who want fast terminal enrichment across 22 public intelligence feeds without managing API keys.
Key CTI Features:
- Live IOC & Hash Enrichment: Queries abuse.ch ThreatFox, Feodo Tracker Botnet C2 blocklists, Tor Project Exit Node lists, and Shodan InternetDB in parallel.
- Vulnerability Prioritization: Combines MITRE CVE v5 data with FIRST.org EPSS 30-day exploitation probability scores, CISA KEV ransomware campaign status, and live GitHub PoC repositories.
- Infostealer & Breach Telemetry: Aggregates domain-level exposure from HIBP v3 and Hudson Rock Cavalier (RedLine, Raccoon, Vidar, Lumma logs, compromised portal URLs, and employee password complexity).
- Offline APT & Incident Codex: Includes structured kill-chain breakdowns of 10 major operations (SolarWinds, NotPetya, Stuxnet, XZ Backdoor, Volt Typhoon, Scattered Spider) and 6 APT actor profiles, with automatic correlation between live IOCs/CVEs and historical campaigns.
- Multi-Language Support: Supports 11 languages out of the box and exports dossiers to Markdown or JSON.
GitHub Repository:
https://github.com/prox0959/CyberCodex
100% Python standard library (no pip packages required). Would love to hear what other free CTI feeds you'd like to see integrated!