
kismet
Github mirror of official Kismet repository

Github mirror of official Kismet repository

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…

Pwsh tool for AD Group Enumeration Auditing

Threat hunting command system for agentic IDEs

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)

Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.

Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

Honeynet Project generic authenticated datafeed protocol


A Zeek OpenVPN protocol analyzer plugin.

Multivariate statistical network monitoring sensor that detects anomalies using PCA-based techniques, aggregating lightweight statistics from…

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

MysqlHoneypot

Primary data pipelines for intrusion detection, security analytics and threat hunting

Tools for investigating Log4j CVE-2021-44228