Repository Index

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

A utility to safely generate malicious network traffic patterns and evaluate controls.

• security
• testing-tools
• monitoring
• intrusion-detection

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence

Malicious HTTP traffic explorer

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.

• airlift
• airtraffic
• ios
• sandbox-escape

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

analyze a web-based network traffic 🕶 to detect central command and control servers

• squid
• network-traffic
• proxy-server
• incident-response

:dizzy: A coroutines-driven Low & Slow traffic sender, written in Rust

A honeypot that can be used to observe traffic directed at home routers.

Real-time network traffic analysis in your terminal.

• cli
• ddos
• ddos-detection
• go

Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.

• domain-lookup
• golang
• ip-geolocation
• ip2location