jaegeral/security-apis：用于安全领域的公共 API 汇总列表

jaegeral

1.0k

173 7

MIT License

项目介绍

jaegeral/security-apis 是一个托管在 GitHub 上的开源项目，采用 MIT License 许可证，目前获得 1.0k 个 Star、173 次 Fork。

仓库全名: jaegeral/security-apis
开源许可证: MIT License
Star 数: 1.0k
Fork 数: 173
未关闭 Issue: 7

README 摘要

awesome-security-apis A collective awesome list of public (JSON) APIs for use in security. The list is supported by https://alexanderjaeger.de Learn about REST: https://github.com/marmelab/awesome-rest Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven collection of APIs relevant for security people. Index Online Tools SIEM Various…

完整内容见 GitHub 原始 README 或本页。

常见问题

security-apis 可以免费商用吗？

如何获取 security-apis 的源码？

可以直接克隆仓库：git clone https://github.com/jaegeral/security-apis.git，默认分支为 master；安装与运行步骤见仓库 README。

security-apis 最近还在维护吗？

仓库最近一次更新为 3 天前，当前有 7 个未关闭 Issue；Star 数为 1.0k，可作为社区活跃度的参考。

关于

GitHub 原始描述（英文）

A collective list of public APIs for use in security. Contributions welcome

描述取自 GitHub 官方 API，保持仓库作者书写的原文。

简要分析

热度分

1403

价值分

658

活跃状态

活跃

awesome-list json json-api security siem

GitHub

贡献者

t4d

README

awesome-security-apis

A collective awesome list of public (JSON) APIs for use in security.

The list is supported by https://alexanderjaeger.de

Learn about REST: https://github.com/marmelab/awesome-rest

Thanks to all contributors, you’re awesome and wouldn’t be possible without you! The goal is to build a categorized community-driven collection of APIs relevant for security people.

Online

API	Description	Auth	HTTPS	Link	Free / Commercial
ANY.RUN	Interactive malware analysis service.	`apiKey`	Yes	Link!	Both, API commercial only
attachmentAV	Virus and Malware Scan API	`apiKey`	Yes	Link!	Commercial (free trial)
Bewary	Scam checks for URLs, domains, IPs, phone numbers, emails, crypto wallets and IBANs, with verdicts and reason codes	`apiKey`	Yes	Link!	Free/Commercial
BinaryEdge.io	Search Engine for internet connected devices and Honeypot Network	`apiKey`	Yes	Link!	Free/Commercial
CriminalIP.io	Search Engine for internet connected devices	`apiKey`	Yes	Link!	Free/Commercial
Bluecoat Site Review	URL Analysis	`none`	Yes	Link!	Free
caprivacy.github.io	California Privacy Directory	None	Yes	Link!	?
censys.io	Free for Researchers Threat Intel	`apiKey`	Yes	Link!	?
CIRCL CVE Search	CVE Search	`none`	Yes	Link!	Free
CIRCL hashlookup	File hash lookup	`none`	Yes	Link!	Free
CIRCL Passive SSH	Passive SSH	`ApiKey`	Yes	Link!	Free for security teams
Cloidsploit	Vuln Scanner	`apiKey`	Yes	Link!	Free
CrowdStrike API	TI	`apiKey`	Yes	Link!	NO
CVEAPI	API for CVE data	`none`	Yes	Link!	Free
Cymon.io	Open Threat Intel	`apiKey`	Yes	Link!	?
Cybergreen	How clean is a network	`apiKey`	Yes	Link!	?
CyCAT.org	The Cybersecurity Resource Catalogue public API services.	`none`	Yes	Link!	Free - OpenAPI
defend.network	Daily-updated free JSON feed of CVEs with CVSS, EPSS, CISA KEV status and exploitation state	`none`	Yes	Link!	Free
DNSai	DNS, SPF, DKIM, DMARC, WHOIS and email-security lookups	`none`	Yes	Link!	Free/Commercial
DomScan	Domain, DNS, WHOIS/RDAP, TLS, subdomain, reputation and brand intelligence	`apiKey`	Yes	Link!	Free/Commercial
Domaintools	Commercial Threat Intel	`apiKey`	Yes	Link!	Commercial
Dragos WorldView	ICS Threat Intelligence	`apiKey`	Yes	Link!	Commercial
DShield	Internet Storm Center API	`apiKey`	Yes	Link!	Free
EmailRep	Free API to query email reputation and report malicious senders	none	Yes	Link!	Free
emergingthreats.net	Domain / IP intelligence and reputation	`apiKey`	Yes	Link!	?
Farsight DNSDB Passive DNS	Passive DNS and more	`apiKey`	Yes	Link!	?
Fidro	Fraud detection API with VPN, proxy, Tor and datacenter IP detection, email validation and Stripe payment signals	`apiKey`	Yes	Link!	Free/Commercial
FIRST.org	Incident Response Teams API	`none`	Yes	Link!	?
Flashpoint Intel	Threat Intel	`apiKey`	Yes	Link!	?
Flexera	Vuln Management	`apiKey`	Yes	Link!	?
Focsec	IP Intelligence, Proxy and VPN Detection	`apiKey`	Yes	Link!	Free/Commercial
GetWhoisData.com	Whois APIs	`apiKey`	Yes	Link!	Commercial
GreyNoise	GreyNoise is a system that collects and analyzes data on Internet-wide scanners.	`apiKey`	Yes	Link!	Free/Commercial
HackerOne	Query HackerOne reports	`apiKey`	Yes	Link!	?
have i been pwned	unofficial endpoints	`apiKey`	Yes	Link!	?
Hybrid Analysis	Online Sandbox	`none`	Yes	Link!	Free
IPGeolocation	IP Geolocation API with security threat intel (VPN, proxy, Tor, bot detection), ASN, abuse-contact data, and more (timezone, company, hostname)	`apiKey`	Yes	Link!	Free/Commercial
IP ASN History (D4 Project - CIRCL)	IP and BGP intelligence	`none`	Yes	Link!	Free
IPinfo	IP location, ASN, VPN detection and more	`none`	Yes	Link!	Both
ICHI	Daily internet cyber-health barometer — composite score, scored dimensions, and confirmed-incident ledger aggregated from 20+ named public sources (CISA KEV, NVD, DShield, and others); no API key required, CORS-open	`none`	Yes	Link!	Free
IPASIS	Real-time bot detection, IP reputation, proxy/VPN detection, and email validation API	`apiKey`	Yes	Link!	Free/Commercial
MAlshare	Malware Sharing	`apiKey`	Yes	Link!	?
Mac Vendor Lookup	Threat Intel	`apiKey`	Yes	Link!	?
MAC address API	Threat Intel	`apiKey`	Yes	Link!	Commercial
Malpedia	Curated list of malware	`apiKey`	Yes	Link!	Free
Malwagon	Online sandbox that detonates files and URLs and returns behaviour, IOCs and ATT&CK	`apiKey`	Yes	Link!	Free/Commercial
MalwareBazaar	Malware Sharing Service	`apiKey`	Yes	Link!	Free (CCO)
MaxMind	GeoIP and More	`apiKey`	Yes	Link!	?
Microsoft Security Response Center API	Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)	`None`	Yes	Link!	Free
MWDB	The MWDB system (also known as the “Malware Database”) is a repository for storing malware samples and information acquired during their analysis	`apiKey`	Yes	Link!	Free
NeutrinoAPI	IP Blocklist API	`apiKey`	Yes	Link!	?
Onyphe	Search Engine for internet connected devices	`apiKey`	Yes	Link!	Free/Commercial
Opsis	Find the accounts linked to an email address, username or domain across 1000+ source modules	`apiKey`	Yes	Link!	Both, API commercial only
ORKL.eu	Search Engine for intel reports	`apiKey`	Yes	Link!	Free (API rate limited)
Passive Total	Threat Intel	`apiKey`	Yes	Link!	?
Pastebin		`apiKey`	Yes	Link!	?
Pentestnet	Vuln Scanner	`apiKey`	Yes	Link!	Commercial
Phishtank		`?`	Yes	Link!	?
Proxmint Free Proxy List	Open HTTP/HTTPS/SOCKS4/SOCKS5 proxies, each re-tested every 30 minutes through a real request. JSON or plain text, filter by country, protocol and anonymity (60 req/min)	None	Yes	Link!	Free (CC BY 4.0)
ProxySpace	Proxy servers, proxy judge and IP geolocation	None	Yes	Link!	Free
Pulsedive	Free threat intelligence platform ingesting over 50 OSINT feeds and user submissions.	`apiKey`	Yes	Link!	Both
Qualys SSLLabs	Test SSL and more	`apiKey`	Yes	Link!	?
ScanMalware	Submit URLs for sandboxed browser scans and search the scan archive by domain, IP, ASN, JARM or favicon hash	`none`	Yes	Link!	Free
Spamhaus	Domain / IP intelligence and reputation	`?`	Yes	Link!	?
Shadowserver Sandbox API	Sandbox	`?`	Yes	Link!	Free
Shadowserver Bintest API	This server provides a lookup mechanism to test an executable file against a list of known software applications.	`?`	Yes	Link!	Free
Shadowserver IP-BGP API	Mapping IP numbers to BGP prefixes and ASNs	`?`	Yes	Link!	Free
ShieldLabs	Device identification, fraud risk scoring, bot and VPN/proxy/Tor detection	`apiKey`	Yes	Link!	Free (5,000 identifications once)/Commercial
Shodan.io	Search Engine for internet connected devices	`apiKey`	Yes	Link!	Free/Commercial
SniffCat	IP abuse lookup, reporting and threat intelligence	`apiKey`	Yes	Link!	Free
StalkPhish.io	Phishing/brand impersonation detection feed	`apiKey`	Yes	Link!	Free/Commercial
Tanod	Pay-per-call DNS, SPF/DMARC, TLS and RDAP lookups, onchain address risk checks, and Solidity contract and MCP package scans; pay with x402 USDC, free daily allowance per IP	`none`	Yes	Link!	Free/Commercial
Tenable	?	`?`	Yes	Link!	?
Team Cymru	Threat Intel	`apiKey`	Yes	Link!	Both
ThreatConnect	Threat Intel / SOC platform	`apiKey`	Yes	Link!	Commercial
URLhaus	abuse.ch API	`apiKey`	Yes	Link!	Free
urlscan.io	Online tool to scan URLs	`apiKey`	Yes	Link!	Free
Valhalla	Online repository of curated yara rules	`apiKey`	Yes	Link!	Commercial
VirusTotal	VirusTotal File/URL Analysis	`apiKey`	Yes	Link!	?
vulners	vulners Vuln Database	`apiKey`	Yes	Link!	?
whoisxmlapi.com	Whois APIs	`apiKey`	Yes	Link!	Commercial
Zoomeye	Search Engine for internet connected devices	`apiKey`	Yes	Link!	Both

Tools

API	Description	Auth	HTTPS	Link	Free / Commercial
Carbon Black	Endpoint Security	`apiKey`	Yes	Link!	Commercial
CRITS	TI System	`apiKey`	Yes	Link!	?
emlrender	EML file rendering tool	`password`	Yes	Link!	OpenSource
FireEye	Endpoint Security	`apiKey`	Yes	Link!	?
GRR	Endpoint Incident Response tool	`apiKey`	Yes	Link!	OpenSource
Kolide Fleet	osQuery fleet management	`?`	Yes	Link!	OpenSource
Lastline	Lastline Enterprise	`ApiKey`	Yes	Link!	Commercial
logdissect	CLI utility and Python API for analyzing log files and other data.	`?`	Yes	Link!	OpenSource
MISP	Open Source Threat Intelligence Platform	`apiKey`	Yes	Link!	OpenSource
Metadefender	MultiAV	`apiKey`	Yes	Link!	Commercial
Metasploit	Exploiting	`apiKey`	Yes	Link!	Commercial
Moloch	Moloch is an open source, large scale, full packet capturing, indexing, and database system.	`?`	Yes	Link!	OpenSource
OTRS	Open Ticket Relay System	`apiKey`	Yes	Link!	?
Plaso	Plaso Langar Að Safna Öllu	`apiKey`	Yes	Link!	OpenSource
Recorded Future	Threat Intelligence Platform	`apiKey`	Yes	Link!	?
Request Tracker	Ticketing System	`apiKey`	Yes	Link! REST2	?
Scot	SCOT - Sandia Cyber Omni Tracker Ticketing System	`apiKey`	Yes	Link!	Free
TheHive	Security Incident Response Platform	`apiKey`	Yes	Link!	Free
Viper.li	Viper malware repository API	`apiKey`	Yes	Link!	OpenSource
VMRay	VMRay Sandbox	`apiKey`	Yes	Link!	?

SIEM

API	Description	Auth	HTTPS	Link	Free / Commercial
ArcSight	HP ArcSight API	`None`	`No`	Link!	Commercial
AlienVault	AlienVault API	`Yes`	`Yes`	Link!	Commercial
Datadog	Datadog API	`Yes`	`Yes`	Link	Commercial
ELK	ELK Stack API	`None`	`No`	Link!	OpenSource
Gravwell	Gravwell API	`Yes`	`Yes`	Link!	Community / Commercial
Humio	Humio API	`Yes`	`Yes`	Link!	Community / Commercial
QRadar	IBM QRadar API	`None`	`No`	Link!	Commercial
Splunk	Splunk API	`None`	`No`	Link!	Commercial

Various

API	Description	Auth	HTTPS	Link	Free / Commercial
Akamai	Akamai CDN	`apiKey`	Yes	Link!	Commercial
AlienVault Open Threat Exchange (OTX)	IP/domain/URL reputation	`apiKey`	Yes	Link!	?
Check Point APIs	Check Point APIs Homepage	`apiKey`	Yes	Link!	Commercial
Cisco ISE	ISE is an identity and access control policy platform	`apiKey`	Yes	Link!	?
Cisco PXGrid	Cisco Platform Exchange Grid	`apiKey`	Yes	Link!	?
Cisco Security APIs	Cisco Developer Page	``	?	Link!	?
Cisco Umbrella	Cisco Umbrella Enforcement API	`apiKey`	Yes	Link!	?
Cyphon	Open Source INcident Management tool	`apiKey`	Yes	Link!	?
F5 Bip IP	F5 application services products	`apiKey`	Yes	Link!	Commercial
Google Safe Browsing	Google Link/Domain Flagging	`apiKey`	Yes	Link!	?
Metacert	Metacert Link Flagging	`apiKey`	Yes	Link!	?
Netscaler	Citrix Netscaler application delivery controller	`apiKey`	Yes	Link!	Commercial
Windows Defender Advanced Threat Protection (Windows Defender ATP)	WDATP	`apiKey`	Yes	Link!	?
National Software Reference Library (NSRL)	-	`apiKey`	Yes	Link!	?
OWASP ZAP	Web application security scanner	none	Yes	Link	Free
PaloAlto	PaloAlto FW API	`apiKey`	Yes	Link!	Commercial
RSA Secure ID	Metacert Link Flagging	`apiKey`	Yes	Link!	?
ServiceNow	ServiceNow API	`apiKey`	Yes	Link!	Commercial
Yandex Safe Browsing	Yandex Link/Domain Flagging	`apiKey`	Yes	Link!	?

security-apis