Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
Repository Index
47,133 repositories indexed
1–22 of 22 · Most stars
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
A cross-platform programmable network tool
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
Blazing-fast remote access
Lightweight network IP scanner written in Go. With notifications, history, export to Grafana
- arp-scan
- self-hosted
- selfhosted
- arp-scanner
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
- network-security
- selfhosted
- wifi-network
- wifi-security
Next generation web scanner
- security
- web
- scanner
- ruby
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
A Suricata based NDR distribution
- suricata
- network
- security
- monitoring
NFStream: a Flexible Network Data Analysis Framework.
- data-science
- data-analysis
- data-mining
- network-analysis
Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Real-time network traffic analysis in your terminal.
- cli
- ddos
- ddos-detection
- go