Alternatives and similar repositories for DGA

Users that are interested in DGA are comparing it to the libraries listed below

• endgameinc / dga_predict
  ☆269Updated 6 years ago
• andrewaeva / DGA
  The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research th…
  ☆219Updated 7 years ago
• pchaigno / dga-collection
  A collection of known Domain Generation Algorithms
  ☆66Updated 9 years ago
• exp0se / dga_detector
  DGA Domains detection
  ☆66Updated 7 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆102Updated 3 years ago
• phunterlau / dga_classifier
  Sample DGA classifier
  ☆124Updated 9 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 5 years ago
• baronpan / SysmonHunter
  An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
  ☆201Updated 3 years ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆101Updated 5 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• BoneLee / dns_tunnel_dectect_with_CNN
  dns tunnel dectect with CNN
  ☆64Updated 5 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆477Updated 4 months ago
• baderj / domain_generation_algorithms
  Some results of my DGA reversing efforts
  ☆667Updated last month
• philarkwright / DGA-Detection
  DGA Domain Detection using Bigram Frequency Analysis
  ☆54Updated 7 years ago
• tatsuiman / malware-traffic-analysis.net
  Download pcap files from http://www.malware-traffic-analysis.net/
  ☆75Updated 7 years ago
• mannirulz / BotDAD
  Anomaly detection based on DNS traffic analysis
  ☆52Updated 4 years ago
• Cherishao / APT-Sample
  Pull some Malware samples here for other security researchers/malware analyst's to analyze and play with.
  ☆174Updated 11 months ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆103Updated 2 years ago
• secureworks / flowsynth
  a network packet capture compiler
  ☆199Updated 3 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆104Updated 4 years ago
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated last year
• Ptr32Void / OSTrICa
  ☆307Updated 7 years ago
• Cisco-Talos / file2pcap
  ☆168Updated 3 years ago
• 401trg / detections
  This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant ya…
  ☆122Updated 4 years ago
• Cisco-Talos / Re2Pcap
  ☆54Updated 10 months ago
• 360netlab / flint
  The python client of passivedns.cn
  ☆98Updated 6 years ago
• hmaccelerate / DGA_Detection
  DGA Detection with ML and DL
  ☆47Updated 5 years ago
• diogo-fernan / malsub
  A Python RESTful API framework for online malware analysis and threat intelligence services.
  ☆369Updated 11 months ago
• sooshie / secrepo
  Sweet, sweet, secrepo.com html.
  ☆131Updated 3 years ago
• chrislee35 / passivedns-client
  passivedns-client provides a library and a query tool for querying several passive DNS providers
  ☆201Updated 3 years ago