
suricata
Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

Security Tool to detect arp poisoning attacks

Corelight@Home script

A Zeek OpenVPN protocol analyzer, based on Spicy.

Bilgisayarınıza yapılan ARP Spoofing saldırılarını tespit eden ARP Spoof Detector Scripti.

A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

cve-2022-21907

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients


Repo containing lua scripts and PCAP to find CVE-2020-0601 exploit attempts via network traffic

Capturing, analysing and responding to cyber attacks

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…