Alternatives and similar repositories for hfinger

Users that are interested in hfinger are comparing it to the libraries listed below

• PaloAltoNetworks / pyjarm
  pyJARM is a library for doing JARM fingerprinting using python
  ☆50Updated 6 months ago
• lp-db / lp-db
  Login Pages Database forms a knowledge base on login pages related to malicious activities (C2 panels, phishing kits...).
  ☆39Updated 2 years ago
• hdm / jarm-go
  A Go implementation of JARM
  ☆119Updated 3 years ago
• akamai / luda
  Malicious actors often reuse code to deploy their malware, phishing website or CNC server. As a result, similiaries can be found on URLs …
  ☆75Updated last year
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆158Updated 6 months ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆90Updated 2 years ago
• spyre-project / spyre
  simple YARA-based IOC scanner
  ☆169Updated this week
• michelcrypt4d4mus / yaralyzer
  Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.
  ☆140Updated 3 weeks ago
• ma111e / melody
  Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulatio…
  ☆141Updated 7 months ago
• cedowens / C2-JARM
  A list of JARM hashes for different ssl implementations used by some C2/red team tools.
  ☆144Updated 2 years ago
• stacscan / stacs
  Static Token And Credential Scanner
  ☆95Updated 2 years ago
• ail-project / ail-yara-rules
  A set of YARA rules for the AIL framework to detect leak or information disclosure
  ☆38Updated 8 months ago
• Lifars / gargamel
  A forensic evidence acquirer
  ☆86Updated 4 years ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆76Updated 3 years ago
• carbonblack / active_c2_ioc_public
  Active C2 IoCs
  ☆99Updated 2 years ago
• adulau / HHHash
  HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.
  ☆78Updated 2 years ago
• assafmo / xioc
  Extract indicators of compromise from text, including "escaped" ones.
  ☆162Updated 5 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 3 months ago
• mnemonic-no / SNIcat
  SNIcat
  ☆128Updated 4 years ago
• Kart1keya / Hachi
  This tool maps a file's behavior on MITRE ATT&CK matrix.
  ☆59Updated 5 years ago
• iomoath / yara-scanner
  YaraScanner is a file pattern-matching tool based on YARA rules.
  ☆58Updated 2 years ago
• avast / yari
  YARI is an interactive debugger for YARA Language.
  ☆89Updated last month
• thomaspatzke / Log4Pot
  A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
  ☆91Updated 10 months ago
• vfeedio / pyvfeed
  Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
  ☆102Updated last week
• benjeems / packetStrider
  A network packet forensics tool for SSH
  ☆253Updated 4 years ago
• corelight / ripple20
  A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
  ☆33Updated 3 years ago
• covert-labs / mx-intel
  Jupyter Notebooks and code used for DNS MX mining to identify top email security providers
  ☆56Updated 2 years ago
• TelefonicaTC2Tech / typodetect
  Typodetect
  ☆74Updated 4 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆102Updated 3 years ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago