bytespulse-oe/wp2shell-hestia-scannerRead-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted…
yojiwatanabe/networkalarmA tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent…
hslatman/awesome-industrial-control-system-securityA curated list of resources related to Industrial Control System (ICS) security.
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
the-tcpdump-group/libpcapSystem-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
securityclaw/securityclawA modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…
randomuserid/tyliumPrimary data pipelines for intrusion detection, security analytics and threat hunting
agentshield-ai/sigma-aiSigma detection rules for AI agent security monitoring
synacktiv/nmap-farewellAutomated Network Security with Rust: Detecting and Blocking Port Scanners
taisa456/network-security-snortSnort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd…
trnguyen03/activemq-ids-ips-labIDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
arkime/arkimeArkime is an open source, large scale, full packet capturing, indexing, and database system.
netalertx/netalertxCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
