
Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan,…

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs…

A modern and elegant dashboard for network traffic visualization and analysis.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Deception-engineering tools pulled from a production platform that takes live attacker traffic, supply-chain canary tokens, honeypot logs → MITRE…

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

create cypher create statements for neo4j out of netstat files from multiple machines

Bash tool used for proactive detection of malicious activity on macOS systems.

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit. Detect and hunt for exploitation of the critical unauthenticated GitLab CE/EE…

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

Single-page web dashboard for Meshtastic mesh networks with live network mapping, packet analysis, chat, sensor telemetry, and topology…

Parses Snaffler output file and generate beautified outputs.

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

Free access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…