
opensnitch
Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

A curated list of resources related to Industrial Control System (ICS) security.

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

A utility to safely generate malicious network traffic patterns and evaluate controls.

Labtainers: A Docker-based cyber lab framework

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

Self-contained SSH honeypot for capturing attacker interactions and turning them into structured security intelligence.

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.

Self-hosted multi-engine Sigma detection for event logs

GitHub mirror of the Linux Kernel's audit repository

Hunt WiFi threats silently. Catch the hackers.

Linux kernel integrity monitor for detecting syscall hooking

A repository of sysmon configuration modules

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…

Daemon to ban hosts that cause multiple authentication errors

Host IDS for desktop users