
CVE-2020-16898
A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability)

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors (Python2 legacy version)

A Zeek Wireguard protocol analyzer based on Spicy.

An implementation of F5's `mcp` protocol, including MitM tooling to sniff traffic while vuln hunting

A Zeek STUN protocol analyzer based on Spicy.

Detects CVE-2024-3596 in RADIUS/UDP traffic by analyzing MD5 collisions in Access-Request packets, helping administrators identify vulnerable…

Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

Proof-of-concept exploit for CVE-2024-51179: crafted PFCP packet flooding causes denial of service in Open5GS UPF/SMF, disrupting 5G core PDU session…

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

My Aircrack-ng contribution with Thomas d'Otreppe

Zeek detection for CVE-2020-16898-"Bad Neighbor"

A fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)

Drone HASAKEE FPV video app for Android

school project

Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…