LSMS

Linux Security and Monitoring Scripts These are a collection of security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation. Each script works on its own and is independent of other scripts. The scripts can be set up to either...

PAPIMonitor

PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...

Honeypot-Project

OWASP Honeypot-Project The goal of the OWASP Honeypot Project is to identify emerging attacks against web applications and report them to the community, in order to facilitate protection against such targeted attacks. Based around the earlier OWASP/WASC Distributed Web Honeypots Project...

git-alerts

GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...

cnitch

cnitch cnitch（スニッチまたはコンテナスニッチ）は、Dockerコンテナを監視し、rootで実行されているプロセスを特定するためのシンプルなフレームワークおよびコマンドラインツールです。 なぜこれが悪いことなのでしょうか？ mhausenblas による「can I haz non-privileged containers?」 をまだご覧になっていないなら、今すぐアクセスして詳細を入手することをお勧めします。 cnitch を開発中に、アプリケーションのバグだと思われる問題に遭遇しました。cnitch が Docker コンテナ内で自身を root...

cnitch

cnitch cnitch snitch or container snitch is a simple framework and command line tool for monitoring Docker containers to identify any processes which are running as root. Why is this a bad thing? If you have not already been to can I haz non-privileged containers? by mhausenblas then I recommend...

thelightscope

LightScope See Your Scanners LightScope is a lightweight, open-source network security monitor that transforms closed ports into honeypots. See who's scanning your systems without dedicated infrastructure. Provided by USC Information Sciences Institute. What It Does Monitors closed ports for...

detections

detections This is a repository for information that might be useful to detection maliciousness in your environment. This is not exhaustive and please use it at your own risk validate your findings!...

mac-monitor

🎉 Welcome to "Mac Monitor's" official new home! Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research, malware triage, and system troubleshooting. Leveraging Apple's Endpoint Security ES and System Extension APIs, it collects and enriches system...

CVE-2023-48034

CVE-2023-48034 I have discovered weak encryption used in the wireless protocol of the Acer Wireless Keyboard SK-9662 FCC ID: H4IKB9662. This weak encryption allows an attacker to easily monitor and log keystrokes and also inject arbitrary keystrokes. Intro The keyboard uses a Texas Instruments...

jvmxray

JVMXRay: Javaアプリケーションセキュリティ監視 Dukeの歴史 ドキュメント | 上流からの変更点 | プロジェクトブログ JVMXRayは、バイトコードインジェクションを介してJavaアプリケーションをリアルタイムで監視し、コード変更なしで脆弱性や不審なアクティビティを検出します。19のモジュラーセンサーがファイルアクセス、ネットワーク接続、SQLクエリ、暗号化操作、認証、プロセス実行などを追跡し、構造化された機械可読なセキュリティイベントを生成し、自動的にセンサー間の相関を取ります。 Quick Start root@kitploit: git clone...

ChangeTower

ChangeTower ChangeTower is intended to help you watch changes in web pages and get notified of any changes written in Go. This tool is good to know the web pages are updated something or not to work on the new site before others Installation Instructions ChangeTower requires go1.16+ to install...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

Crucix

Crucix 属于你自己的情报终端。27 个数据源。一条命令。零云端。 访问在线站点：crucix.live -orange 进入信号网络 更多截图 启动序列| 世界地图 ---|--- | 在线网站： https://www.crucix.live/ 先体验公共演示，然后克隆仓库即可在本地运行 Crucix。 Crucix 从 27 个开源情报数据源并行拉取卫星火情探测、航班追踪、辐射监测、卫星星座追踪、经济指标、实时市场价格、冲突数据、制裁清单和社交情绪——每 15 分钟更...

vulnerability-spoiler-alert

Vulnerability Spoiler Alert Know about security patches before the CVE drops. View Live Site | Subscribe via RSS A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings...

msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

msnm-sensor

説明 MSNM-S （Multivariate Statistical Network Monitoring-Sensor）は、PCA-MSNM や Hierarchical PCA-MSNM...

passivedns

| | @ | \ | \ | || | TM | |.------. .-----. .-----. -. .-.------. | |\ || | || | | | | || --'| --'| |\ Y /| --| | |/ || || | | || || ||||||| / | /|/ | |||| A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring NSM and general digital forensics. PassiveDNS...

Aegis

AEGIS Independent, OS-level observability for AI coding agents Watches what AI agents actually do on your machine — processes, files, network — from outside the agents, no hooks required. AEGIS is an independent, OS-level observer for AI agents. It watches agent processes, file access, and networ...

kunai

Leitmotiv Kunai is a powerful tool designed to bring actionable insights for tasks such as security monitoring and threat hunting on Linux systems. Think of it as the Linux counterpart to Sysmon on Windows, tailored for comprehensive and precise event monitoring. Why Kunai Stands Out...