
opensnitch
Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

A curated list of resources related to Industrial Control System (ICS) security.

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

Labtainers: A Docker-based cyber lab framework

A utility to safely generate malicious network traffic patterns and evaluate controls.

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

Self-contained SSH honeypot for capturing attacker interactions and turning them into structured security intelligence.

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.

GitHub mirror of the Linux Kernel's audit repository

Linux kernel integrity monitor for detecting syscall hooking

Self-hosted multi-engine Sigma detection for event logs

Hunt WiFi threats silently. Catch the hackers.

A repository of sysmon configuration modules

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…

Daemon to ban hosts that cause multiple authentication errors

Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462