CERT-Polska / hfingerLinks
Hfinger - fingerprinting HTTP requests
☆139Updated 2 years ago
Alternatives and similar repositories for hfinger
Users that are interested in hfinger are comparing it to the libraries listed below
Sorting:
- pyJARM is a library for doing JARM fingerprinting using python☆50Updated 7 months ago
- A Go implementation of JARM☆119Updated 3 years ago
- Login Pages Database forms a knowledge base on login pages related to malicious activities (C2 panels, phishing kits...).☆39Updated 2 years ago
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆140Updated last month
- Malicious actors often reuse code to deploy their malware, phishing website or CNC server. As a result, similiaries can be found on URLs …☆75Updated 2 years ago
- simple YARA-based IOC scanner☆169Updated 3 weeks ago
- Website crawler with YARA detection☆90Updated 2 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- MoP - "Master of Puppets" - Advanced malware tracking framework☆83Updated last year
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆158Updated 7 months ago
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆144Updated 2 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆40Updated 9 months ago
- A YARA Rule Performance Measurement Tool☆60Updated last year
- This tool maps a file's behavior on MITRE ATT&CK matrix.☆59Updated 5 years ago
- Static Token And Credential Scanner☆95Updated 2 years ago
- Collection of YARA signatures from individual research☆46Updated last year
- HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.☆79Updated 2 years ago
- Malware Sinkhole List in various formats☆102Updated 3 years ago
- Automatically create YARA rules from malicious documents.☆212Updated 3 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 3 months ago
- A forensic evidence acquirer☆86Updated 4 years ago
- YaraScanner is a file pattern-matching tool based on YARA rules.☆59Updated 2 years ago
- SNIcat☆128Updated 4 years ago
- A honeypot for the Log4Shell vulnerability (CVE-2021-44228).☆92Updated 11 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆109Updated 5 months ago
- Extract indicators of compromise from text, including "escaped" ones.☆162Updated 5 years ago
- Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulatio…☆141Updated 8 months ago
- Passive Security Tools Fingerprinting Framework☆75Updated 4 years ago
- Personal compilation of APT malware from whitepaper releases, documents and own research☆265Updated 6 years ago
- Active C2 IoCs☆99Updated 2 years ago