Tools

solidevil14/suricata-rule-for-detecting-cve-2025-55182

CVE‑2025‑55182 Detection

lp008/cve-2020-13942

Exploit for Apache Unomi pre-auth RCE (CVE-2020-13942) with a Suricata detection rule for identifying exploitation attempts.

corelight/cve-2022-24497

Zeek-based network detector for CVE-2022-24497, identifying RPC portmap exploit attempts via real-time traffic analysis and alerting.

gelim/cve-2020-3952

VMWare vmdir missing access control exploit checker

corelight/cve-2022-24491

Zeek-based network detector for CVE-2022-24491, monitoring RPC portmap set and dump actions to identify exploit attempts in real-time traffic.

h7hac9/cve-2020-1938

Suricata and Bro detection rules for CVE-2020-1938 (Ghostcat) Tomcat AJP file read vulnerability, enabling network-level monitoring and alerting.

rickgeex/cve-2025-5777-citrixbleed

CitrixBleed-2 (CVE-2025-5777) – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed”

corelight/cve-2022-23270-pptp

A Zeek package to detect CVE-2022-23270, a PPTP vulnerability in Windows.

aricooper/suricata-script

CVE-2020-16898 — “Bad Neighbor” (ICMPv6 RDNSS length parsing) — Suricata Lua Detection

streghstreek/cve-2020-1938

Detection rules for CVE-2020-1938 (Ghostcat) vulnerability in Apache Tomcat AJP connector, with Suricata and Bro signatures for network-based…

huyn-coder/cve-2016-7144-idps

Python-based exploit tool targeting CVE-2016-7144 for penetration testing and vulnerability validation against affected systems.

nisargsuthar/suricata-rule-cve-2025-53770

Detection rules for CVE-2025-53770

initconf/cve-2021-1675-printnightmare

Zeek package to detect CVE-2021-1675 (PrintNightmare) by monitoring named pipes and RPC operations for spoolss exploitation attempts.

cucadili/cve-2018-11776

Investigation of CVE-2018-11776 vulnerability that allows attackers to remotely execute code and gain control over Apache Struts-based applications.

security-onion-solutions/security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

darses/cve-2025-32433

Security research on Erlang/OTP SSH CVE-2025-32433.

insomnisec/detections-cve-2026-23918

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl