A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
Repository Index
47,133 repositories indexed
385–408 of 534 · Most stars
AI-powered SDK featuring algorithmic trading, backtesting, deployment on 100+ exchanges, and multiple optimization engines.
Effects of packers on machine-learning-based malware classifiers that use only static analysis
Digital Forensics Artifacts Knowledge Base
Tool to help guess a files 256 byte XOR key by using frequency analysis
- frequency-analysis
- python
- xor
- malware
SSH, FTP and Telnet honeypots based on Twisted
CTF in a box. Minimal setup required. (not production-ready yet)
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
JWT authentication for Pyramid
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
RDP honeypot
- suricata
- honeypot
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
- action-proposals
- agentic-ai
- agents
- ai
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
- deceptive-webpages
- web-cloner
- honeypot
- deception
YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
The Security Analyst’s Guide to Suricata
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Sublime Malware Research Tool
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates