

Python script to check Palo Alto firewalls for CVE-2024-3400 exploit attempts

Honeypot for CVE-2025-53770 aka ToolShell

Some files for red team/blue team investigations into CVE-2021-44228

Check to see if your Palo Alto firewall has been compromised by running script againt support bundle.



A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:

A low to medium interaction honeypot.

Botnet command & control monitor

An ssh honeypot with the XZ backdoor. CVE-2024-3094

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

AI-powered SOC for OT/ICS networks — 6 autonomous agents, MITRE ATT&CK mapping, Suricata/Zeek ingestion, human-in-the-loop response, 330+ tests.…

Basic log analysis tool to detect impossible travel via IP address geographic information

Spip network sensor written in Go

This package extends the Intel package to log more fields


IOCs for CVE-2019-19781