j-dahl7/mcp-attack-detection-sentinelSentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…
stratosphereips/aipGenerates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…
mushorg/buttinskyBotnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
malwaretech/log4jtoolsTools for investigating Log4j CVE-2021-44228
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
corelight/icanntldZeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…
strainxx/react2shell-honeypotMy attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)
mcastens/alycon-threat-landscapeTraining-free anomaly detection framework using Shannon Entropy, Fisher Information, and Wasserstein Distance to map system states into geometrically…
the-tcpdump-group/libpcapSystem-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…
gbrindisi/wordpotA Wordpress Honeypot
randomuserid/tyliumPrimary data pipelines for intrusion detection, security analytics and threat hunting
al1ex/mysqlhoneypotMysqlHoneypot
corelight/top-dnsTop DNS Measurement for Bro
corelight/zeek-openvpnA Zeek OpenVPN protocol analyzer plugin.
kolya5544/bearftpHoneypot FTP server written in .NET Core (C#) for both Linux and Windows.
codextf2/cobaltstrike-sleepmask-yaraJust a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-…
