> For the complete documentation index, see [llms.txt](https://book.redsquad.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.redsquad.xyz/web-hacking/osint/vulnerabilities-and-ioc.md).

# Vulnerabilities and IOC

## **Find Vulnerability Data and Indicators of Compromise**

### Services

* [MITRE CVE](https://www.cve.org/) — A search engine, database, and widely accepted classifier of vulnerabilities.
* [NIST NVD](https://nvd.nist.gov/vuln/search) — The official US government vulnerability database.
* [GitHub Advisory Database](https://github.com/advisories) — A vulnerability database incorporating CVEs and security advisories.
* [CVEDetails](https://www.cvedetails.com/), [osv.dev](https://osv.dev/list), [VulDB](https://vuldb.com/), [maltiverse](https://maltiverse.com/search) — Additional sources of data on vulnerabilities and indicators of compromise.
* [opencve.io ](https://www.opencve.io/cve)— A CVE search engine with integrated alerts for new threats.
* [security.snyk.io ](https://security.snyk.io/)и [Mend Vulnerability Database](https://www.mend.io/vulnerability-database/), [Vulncode-DB](https://www.vulncode-db.com/) — Open-source vulnerability databases.
* [Cloudvulndb](https://www.cloudvulndb.org/) — A project compiling vulnerabilities and security issues of cloud service providers.
* [Vulnerability Database](https://vulners.com/) — A system for searching information about current threats.
* [Rapid7 - DB](https://www.rapid7.com/db/) — A database containing details of over 180 thousand vulnerabilities and 4 thousand exploits, with all exploits included in Metasploit.
* [Exploit DB](https://www.exploit-db.com/) — A CVE-compliant archive of publicly available exploits and vulnerable software.
* [sploitus](https://sploitus.com/) — A search engine for exploits and hacking tools.

### IOC

* [Prowl - Lupovis](https://prowl.lupovis.io/?ip=) — Information gathering about IP address, top threats
* [ThreatMinor](https://www.threatminer.org/) — ThreatMiner is a threat intelligence portal designed to enable analysts to research under a single interface.