#1IDS/IPS systems, network monitoring, anomaly-based detection, and threat alerting tools.
Kitploit recommended
g0tmi1k/kippo-g0tmi1kMedium-interaction SSH honeypot that logs brute force attacks and full attacker shell interactions, with customization options to reduce…
oisf/libhtpSecurity-aware HTTP protocol parser library used by IDS/IPS engines to inspect and normalize HTTP traffic for threat detection.
snyk/leaky-vessels-dynamic-detectoreBPF-based runtime detector for container breakout vulnerabilities in runc and Docker, monitoring syscalls and Docker daemon calls to detect…
chronicle/gctiDetection signature repository providing YARA rules and threat-hunting content for identifying malware and malicious activity across enterprise…
blackhillsinfosec/eventloggingAutomation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
blackberry/threat-research-and-intelligenceBlackBerry Threat Research & Intelligence
kolya5544/bearftpHoneypot FTP server written in .NET Core (C#) for both Linux and Windows.
mellow-hype/c2finderLook for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
spiarh/webhook-cve-2022-0811Simple webhook to block exploitation of CVE-2022-0811
rastating/modsecurity-cve-2018-6389A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389
michaelsanford/log4shell-honeypotDockerized honeypot for CVE-2021-44228.
lopqto/cve-2021-41773_honeypotLightweight honeypot for Apache HTTP Server path traversal vulnerability CVE-2021-41773, designed to capture and log exploitation attempts.
insomnisec/detections-cve-2026-23918Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl
darses/cve-2025-32433Security research on Erlang/OTP SSH CVE-2025-32433.
below0day/honeypot-logs-cve-2025-5777CitrixBleed 2 NetScaler honeypot logs
fusion1110/ebpf-hid_guardLinux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…
