
Network-Detection-Engine
Lightweight network intrusion detection engine capturing live traffic with libpcap. Detects SYN/ICMP floods, port scans, and signature-based web…

Lightweight network intrusion detection engine capturing live traffic with libpcap. Detects SYN/ICMP floods, port scans, and signature-based web…

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

Security Tool to detect arp poisoning attacks

Corelight@Home script

A Zeek OpenVPN protocol analyzer, based on Spicy.

Bilgisayarınıza yapılan ARP Spoofing saldırılarını tespit eden ARP Spoof Detector Scripti.

PCAPs and Suricata signatures for detecting OpenSSL CVE-2022-3602 exploitation attempts, including malicious client/server traffic and legitimate…

A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

Zeek package to detect CVE-2022-21907 HTTP exploit attempts by analyzing packet captures for malformed requests and triggering alerts.

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

Repo containing lua scripts and PCAP to find CVE-2020-0601 exploit attempts via network traffic

teamcity teamcity-CVE-2026-63077 exploitation pcap

Security-aware HTTP protocol parser library used by IDS/IPS engines to inspect and normalize HTTP traffic for threat detection.

Capturing, analysing and responding to cyber attacks

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…