
arp-validator
Security Tool to detect arp poisoning attacks

Security Tool to detect arp poisoning attacks

Digital forensics and incident response tool using YARA rules to scan Citrix NetScaler core dumps, disk images, and live hosts for signs of…

Small tool to play with IOCs caused by Imageload events

A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

Open Source runtime tool which help to detect malware code execution and run time mis-configuration change on a kubernetes cluster

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent…

eBPF-based detection tool that monitors for Dirty Pipe (CVE-2022-0847) exploitation attempts, including on non-vulnerable kernels and Docker…

Azure Sentinel detection lab for MCP attack patterns, providing 5 analytics rules and 7 KQL hunting queries against SSRF token theft, tool poisoning,…

RPi3+ Network Cracker Setup Tool

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Passive cross-protocol attack detection tool for mobile core networks. Correlates SS7/MAP, Diameter S6a, and GTPv2-C events to detect location…

a simple tool to detect the exploitation of BlueKeep vulnerability (CVE-2019-0708)

Python-based exploit tool targeting CVE-2016-7144 for penetration testing and vulnerability validation against affected systems.

Real-time network intrusion detection tool using pyshark to identify CVE-2019-15107 (Webmin RCE) exploitation attempts by analyzing HTTP POST…

Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…

Metlo is an open-source API security platform.