
libpcap
System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

Network traffic sensor

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…

Multivariate statistical network monitoring sensor that detects anomalies using PCA-based techniques, aggregating lightweight statistics from…

Spip network sensor written in Go

Integrates your Modern Honeypot Network Server and Wordpress Blog via MHN's REST API and WP's shortcodes

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Github mirror of official Kismet repository

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…


IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

A Wordpress Honeypot