
thrunt-god
Threat hunting command system for agentic IDEs

Threat hunting command system for agentic IDEs

Easy to configure Honeypot for Blue Team

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…

Sigma detection rules for AI agent security monitoring

MysqlHoneypot

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

Multivariate statistical network monitoring sensor that detects anomalies using PCA-based techniques, aggregating lightweight statistics from…

Spip network sensor written in Go

Top DNS Measurement for Bro

Advanced detection of port scanning, DoS and malware attacks using Machine Learning techniques

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.

Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

Automated Network Security with Rust: Detecting and Blocking Port Scanners

Fingerprint SSH clients and servers.

Automate stopping bad bots from accessing your server

A Zeek OpenVPN protocol analyzer plugin.

Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted…

My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)