
ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Lightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

ESPectre - Motion detection system based on Wi-Fi spectre analysis (CSI), with Home Assistant integration.

ETW based POC to identify direct and indirect syscalls

Open source entropy based invalid traffic detection and pre-bid filtering.

First iteration of ML based Feedback WAF

Blazing-Fast Token-Efficient Intrusion Detection System (IDS) based on TypeSafe's Jev.

A Zeek OSPF packet analyzer based on Spicy.

A Zeek based Mitre Caldera detector.

A Zeek based AsyncRAT malware detector.

eBPF-based Linux rootkit detector using multi-channel cross-view analysis (sched_switch, NMI, /proc) to detect DKOM, tracepoint tampering, and…

Runtime Application Self Protection for Python web servers, serverless functions and MCP servers, detecting attacks, prompt injection and data leaks…

Reverse Shell Detection with Machine Learning

CVE-2020-9483 OR CVE-2020-13921

This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to…