Repository Index

The NoSQL Honeypot Framework

Searches various online resources to try and get as much info about an IP/domain as possible.

High-interaction Honeypot for PLCs and Industrial Control Systems

Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang

• golang
• tokens
• branca
• jwt

A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org

• golang
• ssh-server
• honeypot
• ssh

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

• blue-team
• security-tools
• security-audit

a low-interaction honeypot

A whole bunch of public pentest reports & papers

Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.

• geoserver
• gis
• mapping
• golang

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans

• crowdsec
• intrusion-detection
• intrusion-detection-system
• intrusion-prevention

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

SSH, FTP and Telnet honeypots based on Twisted

• honeypot
• python
• twisted
• ssh

Honeypot (Dionaea and kippo) setup script

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Repo for the Open Source version of NOVA

Middleware based authorization for Absinthe GraphQL powered by Bodyguard

analyze a web-based network traffic 🕶 to detect central command and control servers

• squid
• network-traffic
• proxy-server
• incident-response

🔑 NaCl.Core, a cryptography library for .NET

• dotnet
• netstandard
• dotnet-core
• chacha20-poly1305

A mirror of the nettle repository

Compatible with LessPass. RustedLessPass is a standalone password manager written in Rust. Powered by Rust / Wasm.

• anonymous
• lesspass
• password
• password-manager

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction