aiengine

AIEngine Artificial Inteligent Engine AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDSNetwork Intrusion Detection System functionality, DNS domain classification, network...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark è l'analizzatore di traffico di rete più utilizzato. È uno strumento importante sia per l'analisi del traffico in tempo reale che per l'analisi forense per gli analisti forensi/malware. Sebbene Wireshark fornisca funzionalità incredibilmente potenti per...

Dshell

Dshell Un framework estensibile per l'analisi forense di rete. Permette lo sviluppo rapido di plugin per supportare la dissezione delle catture di pacchetti di rete. Caratteristiche principali: Analisi approfondita dei pacchetti tramite plugin specializzati Robustezza nel riassemblaggio dei fluss...

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework Este framework combina um conjunto de ferramentas open source existentes num pacote integrado que automatiza o processo de investigação forense. É capaz de capturar tráfego de rede sem fios, analisar o tráfego capturado de acordo com as...

incriminator

Incriminator Incriminator è un progetto OpenSource con scopi educativi che ti permette di incriminare altri dispositivi durante un crimine informatico. Il progetto è ora alla versione 1.0 Se trovi un bug, per favore segnalalo. Grazie per aver scaricato... SOLO A SCOPO EDUCATIVO!!!!!!! Non sono...

Cyber-Defenders-lab-

Laboratori Blue Team di CyberDefenders I miei write-up dei laboratori Blue Team di CyberDefenders, risolti con Wireshark. Ogni laboratorio è una vera indagine di network forensics — che parte da un file PCAP e termina con la ricostruzione completa dell'attacco. 📄 Report PDF completo — include ogn...

Mortimer

Mortimer Una raccolta di script per l'elaborazione di dati e intelligence di tipo network forensics, principalmente in un database postgres. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato per John Green, cirt at nccgroup dot com...

pcapan

pcapan एक pcap कैप्चर विश्लेषण सहायक उपयोग: root@kitploit: $ git clone https://github.com/synacktiv/pcapan $ cd pcapan $ cargo run -- --pcap /tmp/capture.pcap --google -w whitelist.yaml Finished dev unoptimized + debuginfo targets in 0.04s Running target/debug/pcapan --pcap /tmp/log.tcpdump...

sslsplit

SSLsplit - intercepção transparente de SSL/TLS https://www.roe.ch/SSLsplit Visão Geral O SSLsplit é uma ferramenta para ataques de intermediário man-in-the-middle contra conexões de rede criptografadas com SSL/TLS. Ele foi projetado para ser útil em análises forenses de rede, análise de segurança...

PcapXray

PcapXray Uno strumento di network forensics — visualizza file PCAP o traffico live come diagramma di rete annotato con identificazione dei dispositivi, classificazione dei protocolli, rilevamento Tor e segnalazione di traffico malevolo. Panoramica dei moduli root@kitploit: graph TD...

Network-Filesystem-Forensics

Forense de Rede e Sistema de Arquivos Relatórios sobre pós-exploração em honeypot explorando wu-ftpd vulnerável CVE-2001-0550...

info-security-portfolio

Information Security Portfolio A curated collection of nine e...

Before You Hand over the Wheel: Evaluating LLMs for Security Incident Analysis

Security incident analysis SIA poses a major challenge for security operations centers, which must manage overwhelming alert volumes, large and diverse data sources, complex toolchains, and limited analyst expertise. These difficulties intensify because incidents evolve dynamically and require...

ctf-writeups

CTF Writeups A collection of Capture The Flag challenge write...

Enhanced Cyber Threat Intelligence by Network Forensic Analysis for Ransomware As a Service(RaaS) Malwares

In the current era of interconnected cyberspace, there is an adverse effect of ransomware on individuals, startups, and large companies. Cybercriminals hold digital assets till the demand for payment is made. The success of ransomware upsurged with the introduction of Ransomware as a ServiceRaaS...

Are students prepared for real-world cyber curveballs?

With a projected “skills gap” numbering in the millions for open cyber headcount, educating a diverse workforce is critical to corporate and national cyber defense moving forward. However, are today’s students getting the preparation they need to do the cybersecurity work of tomorrow? To help...

PcapXray v2.5 - A Network Forensics Tool To Visualize A Packet Capture Offline As A Network Diagram

PcapXray is a Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts in the network,...

Network Security Monitoring: Security Onion

Network Security Monitoring NSM is, put simply, monitoring your network for security related events. It might be proactive, when used to identify vulnerabilities or expiring SSL certificates, or it might be reactive, such as in incident response and network forensics. Whether you’re tracking an...

PcapXray - A Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram

PcapXray is a Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts in the network,...

Mercenary Linux

Mercenary-Linux is a “new-era” lightweight distribution of mostly Dockerized tools built for field expedient hunting, forensics, and malware analysis. This problem birthed MHF Mercenary Hunt Framework which allows the hunt team to easily perform hunt operations within a framework that aggregates...