sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

cve-2023-23397-detection-lab

CVE-2023-23397 डिटेक्शन और मिटिगेशन रिसर्च लैब प्रोजेक्ट अवलोकन यह प्रोजेक्ट एक पृथक साइबर सुरक्षा लैब वातावरण में CVE-2023-23397 की जांच करता है, जिसमें आक्रामक शोषण के बजाय डिटेक्शन, नेटवर्क ट्रैफिक विश्लेषण, एंडपॉइंट टेलीमेट्री और मिटिगेशन पर ध्यान केंद्रित किया गया है। यह प्रोजेक्ट Zeek,...

Vulnerabilities found in PaperCut MF and PaperCut NG of PaperCut

PaperCut has vulnerabilities in PaperCut MF and PaperCut NG. An unauthorized malicious actor could potentially exploit these vulnerabilities to gain control over the PaperCut environment and execute arbitrary code. To do this, the malicious actor would need to send malicious network traffic to th...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. "HASSH" is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of an MD5 fingerprint. HASSH was invented at...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

CVE-2026-19318

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote, unauthenticated attacker to achieve arbitrary code execution by sending specially crafted network traffic. The vulnerability is rated CVSS 4.0 9.3 (CRITICAL) , reflecting a network attack vector with low...

pacmap

pacmap PacMap è un visualizzatore di traffico di rete basato su grafi per la cattura in tempo reale e la riproduzione di PCAP, che aiuta a vedere cosa è cambiato, cosa è rumoroso e cosa ispezionare dopo. Pensalo come Git per il comportamento di rete: istantanee, differenze e riproduzione visiva...

Wireshark

Allgemeine Informationen Wireshark ist ein Netzwerkverkehrsanalysator auch „Sniffer“ genannt für Linux, macOS, BSD und andere Unix- und Unix-ähnliche Betriebssysteme sowie für Windows. Es verwendet Qt, eine grafische Benutzeroberflächenbibliothek, sowie libpcap und npcap als Paketerfassungs- und...

BlueFish

BlueFish BlueFish è uno strumento di automazione basato su Python progettato per semplificare l'analisi dei file PCAP Packet Capture. Sfrutta la potenza dello strumento a riga di comando di Wireshark, tshark, per estrarre informazioni preziose dalle catture di rete. Con BlueFish, è possibile...

Bryobio

Bryobio🕷️ Analisi dei file PCAP di rete È stato sviluppato per accelerare i processi degli analisti SOC durante l'analisi🕷️ Questo strumento è prezioso per i professionisti della sicurezza informatica, in particolare per analizzare e comprendere il traffico di rete e le potenziali minacce alla...

Intrusion-Alert-Educational-Network-IDS

🛡️ Intrusion-Alert-Educational-Network-IDS Un sistema di rilevamento intrusioni IDS leggero, costruito con Python per monitorare il traffico di rete e rilevare potenziali attacchi DoS/DDoS in base alla frequenza delle richieste per IP. 📌 Caratteristiche 📡 Sniffing dei pacchetti in tempo reale con...

Packet-Sniffer

Packet Sniffer Un monitor del traffico di rete per GNU/Linux. I frame vengono catturati da un'interfaccia di rete tramite un raw socket, decodificati livello per livello con la libreria NETProtocols e visualizzati a schermo man mano che arrivano: root@kitploit: Frame 4 at 15:42:07 wlan0, 74 bytes...

rita

RITA Real Intelligence Threat Analytics Se trovi utile RITA e desideri fare un passo avanti con automazione della caccia, visualizzazioni futuristiche e arricchimento dei dati, dai un'occhiata a AC-Hunter. Offerto da Active Countermeasures. Sponsorizzato da BHIS. RITA è un framework open source p...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

Malcolm

Malcolm Malcolm ist eine leistungsstarke Netzwerkverkehrsanalyse-Toolsuite, die mit den folgenden Zielen entwickelt wurde: Einfach zu bedienen – Malcolm akzeptiert Netzwerkverkehrsdaten in Form von vollständigen Paketerfassungsdateien PCAP, Zeek-Protokollen und Suricata-Warnungen. Diese Artefakte...

libretto

Libretto Libretto é um kit de ferramentas para construir integrações web robustas. Ele dá ao seu agente de codificação um navegador ao vivo e uma CLI eficiente em tokens para: Inspecionar páginas ao vivo com sobrecarga mínima de contexto Capturar tráfego de rede para fazer engenharia reversa de...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...