
creds.py
Harvest FTP/POP/IMAP/HTTP/IRC creds

Harvest FTP/POP/IMAP/HTTP/IRC creds

A starttls-capable transparent man-in-the-middle proxy


This is a mini-firewall that completely isolates a target device from the local network.

Snoopy v2.0 - modular digital terrestrial tracking framework

Parsing Ramnit's traffic

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

Ping Exfiltration Command and Control (PiX-C2)

Raw-packet Project

CVE-2021-33959


Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260

scripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271


This repository is for research purposes (2025 Sejong Univ. Capstone Design)