
suricata
Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

Open-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…

Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Open Source Deep Packet Inspection Software Toolkit

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…

DejaVU - Open Source Deception Framework

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

Blazing-Fast Token-Efficient Intrusion Detection System (IDS) based on TypeSafe's Jev.

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

A utility to safely generate malicious network traffic patterns and evaluate controls.

CLI MITM proxy that converts SOCKS4/SOCKS5 into HTTP/HTTPS/HTTP2/HTTP3 proxy with transparent TCP/UDP redirection, ARP/NDP/DNS spoofing, traffic…

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

Chronicle parser for CORELIGHT and related information.

Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN