
pentoo-overlay
Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

SQL powered operating system instrumentation, monitoring, and analytics.

YAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

DejaVU - Open Source Deception Framework

Framework for implementing Network Intrusion Detection Systems (NIDS) aimed at identifying anomalies in network flows using Federated Learning models.

Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.

A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.

Structured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.

The NoSQL Honeypot Framework

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…