kismet
kismetwireless/kismetPassive wireless network detector, sniffer, and intrusion detection system supporting Wi-Fi, Bluetooth, SDR, and other radio protocols for real-time…
information-gatheringintrusion-detectionnetwork-security+2
2.2k
kismetwireless/kismetPassive wireless network detector, sniffer, and intrusion detection system supporting Wi-Fi, Bluetooth, SDR, and other radio protocols for real-time…
the-tcpdump-group/libpcapSystem-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…
backbay-labs/thrunt-godThreat hunting command system for agentic IDEs
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
certtools/intelmqMessage-queue-based threat intelligence feed collector and processor for CSIRTs. Automates ingestion, normalization, and sharing of security…
strainxx/react2shell-honeypotMy attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)
nesg-ugr/msnm-sensorMultivariate statistical network monitoring sensor that detects anomalies using PCA-based techniques, aggregating lightweight statistics from…
ma111e/melodyTransparent internet sensor for threat intelligence with a detection rule framework to tag and analyze network packets. Supports custom rules,…
corelight/icanntldZeek script that enriches DNS logs with ICANN TLD, domain, and subdomain fields, and marks trusted domains for threat detection.
stratosphereips/aipGenerates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…
hpfeeds/hpfeedsHoneynet Project generic authenticated datafeed protocol
desaster/kippoMedium-interaction SSH honeypot that logs brute force attacks and records full attacker shell interactions with a fake filesystem for threat…
corelight/zeek-openvpnZeek plugin for detecting and parsing OpenVPN traffic (UDP/TCP with TLS), extracting session and TLS handshake metadata for network security…
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
al1ex/mysqlhoneypotDeceptive MySQL honeypot exploiting LOAD DATA LOCAL INFILE to read Windows files from attackers, capturing WeChat ID, phone number, and location data…
randomuserid/tyliumPrimary data pipelines for intrusion detection, security analytics and threat hunting
malwaretech/log4jtoolsTools for investigating Log4j CVE-2021-44228
honeynet/log4shell-dataData we are receiving from our honeypots about CVE-2021-44228