inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!
blockchain (crypto) tools, libraries & scripts in ruby
- blockchain
- cryptohash
- distributed-database
- proof-of-work
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
JWT implementation in Crystal
Botnet command & control monitor
Federated Authentication with OAuth providers
- federated-identity
- federated-social-web
- oauth
- vapor
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
Utility that exposes the expiry of TLS certificates as Prometheus metrics
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
Sign in with Apple Support
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
A CTF framework to create, build, deploy and monitor challenges
A process monitoring tool that tries to detect exploitation
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
Python API Monitor for Android apps
eBPF Security Monitoring and Sandboxing Agent Based on Aya
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
Defensomania is a security monitoring and incident response card game.