
CVE-2024-3400-Checker
Check to see if your Palo Alto firewall has been compromised by running script againt support bundle.

Check to see if your Palo Alto firewall has been compromised by running script againt support bundle.

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

A low to medium interaction honeypot.


A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

A network sniffer that logs all DNS server replies for use in a passive DNS setup

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

Collect, parse, normalize, aggregate, store, query, and route security telemetry data at scale using pipeline-based dataflows for threat detection…

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

Botnet command & control monitor

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

Forensic triage toolkit for Citrix NetScaler devices, featuring a Dissect-based IOC scanner for webshells, timestomping, and suspicious binaries,…

An ssh honeypot with the XZ backdoor. CVE-2024-3094

OpenFPC, Open Source Full Packet Capture