awesome-threat-detection

Awesome Détection et chasse aux menaces Une liste organisée de ressources impressionnantes pour la détection et la chasse aux menaces Sommaire Détection et chasse aux menaces 🔨 Outils Plateformes de détection, d'alertes et d'automatisation Surveillance des endpoints Surveillance du réseau...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

nightingale

خبير التنبيه مفتوح المصدر English | 中文 🎯 ما هو Nightingale Nightingale هو مشروع مراقبة مفتوح المصدر يركز على التنبيه. وكما هو الحال مع Grafana، يتصل Nightingale أيضًا بمصادر بيانات متنوعة موجودة مسبقًا. لكن بينما تركّز Grafana على التصوير المرئي، يركّز Nightingale بدرجة أكبر على محرك التنبيه، وكذ...

trackerjacker

trackerjacker مثل nmap لرسم خرائط شبكات الواي فاي التي لست متصلاً بها. يقوم برسم وتتبع شبكات وأجهزة الواي فاي من خلال مراقبة 802.11 الخام. صفحة PyPI: https://pypi.python.org/pypi/trackerjacker التثبيت root@kitploit: pip3 install trackerjacker المنصات المدعومة : لينكس تم اختباره على Ubuntu و Kali ...

node9-proxy

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

laurel

Linux Audit – تسجيل سهل وقوي وقابل للاستخدام LAUREL هو مكون إضافي لمعالجة الأحداث بعد وقوعها لـ auditd8 يقوم بتوليد سجلات تدقيق غنية ومفيدة بتنسيق JSON مناسبة لإعدادات مراقبة الأمان الحديثة. يمكن العثور على الوثائق المقابلة لأحدث إصدار مستقر هنا. لماذا؟ باختصار: بدلاً من أحداث التدقيق التي تبدو...

Monitorizer

Monitorizer The Ultimate Subdomain Monitoring Framework Installation ❗ Disclaimer --- Admin users are able to execute code on the local server make sure to change the default password at otherwise use it at your own risk Using docker root@kitploit: $ curl...

beacon_health_check

Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest Description This aggressor script uses a beacon's note field to indicate the health status of a beacon. This is done by ... Tracking each beacon's current sleep/jitter time Calculating health based on a "max expected check in time"...

vulnerability-spoiler-alert

Vulnerability Spoiler Alert Know about security patches before the CVE drops. View Live Site | Subscribe via RSS A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings...

openclaw-dashboard

Tableau de bord de l'agent OpenClaw Un tableau de bord de surveillance beau, sécurisé et en temps réel pour les agents OpenClaw. Suivez les sessions, surveillez l'utilisation de l'API, consultez les coûts, gérez les fichiers mémoire et gardez un œil sur la santé du système — le tout en un seul...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

wifi-monitor

wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...

dnsmonster

We're exploring a managed SaaS solution for dnsmonster! Help shape the future of passive DNS monitoring by sharing your feedback and requirements: Take our quick survey Table of Contents Dnsmonster Main features Installation Linux Container Build manually Build statically Windows FreeBSD and MacO...

BeaconEye

BeaconEye Introduction BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity. How it works BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In li...

ditto

Ditto is a small tool that accepts a domain name as input and generates all its variants for an homograph attack as output, checking which ones are available and which are already registered. PoC domains https://tᴡitter.com/ https://clᴏudflare.com Using with Docker The image on docker hub is...

fim-ebpf

FIM-eBPF: File Integrity Monitoring with eBPF A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF Extended Berkeley Packet Filter to trace file operations directly from the kernel, providing high-performance monitoring with minimal...

GeoSentinel

🌍 GeoSentinel GeoSentinel is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making...

rustnet

RustNet Per-process network monitoring for your terminal: live TCP, UDP, and QUIC connections with deep packet inspection, sandboxed by default...

shadow-fleet-tracker-light

Shadow Fleet Tracker Light Baltic Sea shadow fleet monitoring via live AIS data. Watches 1200+ vessels from the Ukrainian GUR War&Sanctions catalogue against the AISStream WebSocket feed, plots positions on a self-updating map, flags proximity to undersea cables, and detects Russia↔West...