Tools

snorby/snorby

Ruby On Rails Application For Network Security Monitoring

nccgroup/ip-reputation-snort-rule-generator

A tool to generate Snort rules based on public IP reputation data

mvlnetdev/cve-2021-31166-detection-rules

Different rules to detect if CVE-2021-31166 is being exploited

trnguyen03/activemq-ids-ips-lab

IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

arpsyndicate/suricata-vedas

VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs

taisa456/network-security-snort

Snort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd…

elihiho/portfolio-drupal-cve-2026-9082

Exploit module for CVE-2026-9082 targeting Drupal-based portfolio sites. Provides proof-of-concept code for security testing and vulnerability…

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables

deepfence/packetstreamer

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

mandiant/heyserial

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types