
raspi-corelight
Corelight@Home script

Corelight@Home script

Softsensor Docker prototype

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

scripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271

This Python script helps to detect the Etherleak (CVE-2003-0001) vulnerability on a target host by analyzing the padding data in network packets. The…

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

A simple yet effective python3 script to perform DNS spoofing via ARP poisoning

A Python tool leveraging Shodan and Scapy to identify and exploit Windows systems vulnerable to CVE-2024-38063, enabling targeted Denial of Service…

Zeek detection for CVE-2020-16898-"Bad Neighbor"

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

An advanced network scan and attack script based on GUI. 2nd version of no-GUI netattack.

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "dropbox".

Script and hardware kit to automatically deauth 802.11 clients en masse. Captures packets for later nefariousness.

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…