
Zeek-Intelligence-Feeds
Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Blazing-Fast Token-Efficient Intrusion Detection System (IDS) based on TypeSafe's Jev.

Containerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

Open Source Deep Packet Inspection Software Toolkit

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

Advanced Phishing Protection: Suricata rulesets open and free

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Daemon to ban hosts that cause multiple authentication errors

Hunt WiFi threats silently. Catch the hackers.

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

TheLightScope

Mapping Corelight or Zeek data to Elastic Common Schema logs

Edit and replay captured network traffic at arbitrary speeds — a suite of pcap tools for *NIX and Windows.

Local proxy that bypasses Deep Packet Inspection by fragmenting TLS ClientHello packets, enabling access to blocked websites without requiring…

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…