Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

53 results

mimikatz-detector-condrv

nccgroup/mimikatz-detector-condrv

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

anomaly-detectiondefensive-toolsincident-response+3

434 years ago

Hunt-Weird-ImageLoads

theflink/hunt-weird-imageloads

Small tool to play with IOCs caused by Imageload events

anomaly-detectiondefensive-toolsincident-response+2

473 years ago

OSTE-Web-Log-Analyzer

ostesayed/oste-web-log-analyzer

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

anomaly-detectionintrusion-detectionlog-analysis+2

442 years ago

aiengine

camp0/aiengine

Programmable packet inspection engine with NIDS, DNS classification, frequency analysis, and auto-regex generation. Supports Python/Ruby/Java/Lua…

anomaly-detectiondns-analysisforensics+5

319 years ago

http-stalling-detector

corelight/http-stalling-detector

Detect HTTP stalling attacks like slowloris with Bro

anomaly-detectiondefensive-toolsintrusion-detection+2

198 years ago

Patriot-Linux

yjesus/patriot-linux

Host IDS for desktop users

anomaly-detectiondefensive-toolsintrusion-detection

125 years ago

Dashboards-Splunk-DNS-Hunting-Beaconing

corelight/dashboards-splunk-dns-hunting-beaconing

DNS Dashboard for hunting and identifying beaconing

anomaly-detectiondns-analysisintrusion-detection+2

176 years ago

hassh

corelight/hassh

Fingerprint SSH clients and servers.

anomaly-detectionforensicsintrusion-detection+4

122 years ago

ddos-reduction-system

devinblack001/ddos-reduction-system

Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

anomaly-detectiondefensive-toolsincident-response+6

21 month ago

reactor

nccgroup/reactor

Runs custom filters on Elasticsearch and alerts on matches

anomaly-detectiondefensive-toolsincident-response+2

33 years ago

zeek-quasarrat-detector

corelight/zeek-quasarrat-detector

Zeek detector for QuasarRat

anomaly-detectionintrusion-detectionmalware-analysis+2

31 year ago

zeek-caldera-detector

corelight/zeek-caldera-detector

A Zeek based Mitre Caldera detector.

anomaly-detectioncommand-and-controlintrusion-detection+2

21 year ago

zeek-asyncrat-detector

corelight/zeek-asyncrat-detector

A Zeek based AsyncRAT malware detector.

anomaly-detectioncommand-and-controlintrusion-detection+3

21 year ago

PetitPotam

corelight/petitpotam

Detects NTLM relay attacks via PetitPotam exploit using Zeek, distinguishing successful and unsuccessful attempts by analyzing DCERPC return codes.

anomaly-detectionauthenticationdefensive-tools+2

15 years ago

Graylog2__graylog2-server_CVE-2023-41044_5-1-2

shoucheng3/graylog2__graylog2-server_cve-2023-41044_5-1-2

Open source log management platform for centralized log aggregation, real-time analysis, and security event monitoring with customizable dashboards…

anomaly-detectionincident-responseintrusion-detection+3

10 months ago

securityonion

security-onion-solutions/securityonion

Open-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…

anomaly-detectionanti-botdefensive-tools+9

5.0k1 month ago

SIEM Dashboard

itzmeshervin/siem-dashboard

A lightweight, real-time Security Information and Event Management (SIEM) dashboard built using Streamlit. It collects system logs, detects USB and…

anomaly-detectiondefensive-toolseducation+4

1 year ago