Alternatives and similar repositories for Re2Pcap

Users that are interested in Re2Pcap are comparing it to the libraries listed below

• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆165Updated 5 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆95Updated 5 years ago
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆38Updated last year
• 360netlab / flint
  The python client of passivedns.cn
  ☆97Updated 6 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆115Updated 7 years ago
• kirillwow / ids_bypass
  IDS Bypass tricks
  ☆122Updated 6 years ago
• yanlinlin82 / plcscan
  Automatically exported from code.google.com/p/plcscan
  ☆58Updated 10 years ago
• knqyf263 / dnspooq
  DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)
  ☆99Updated 4 years ago
• RF-CTI / SANS-summit
  ☆30Updated 2 years ago
• decalage2 / oledump-contrib
  The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
  ☆54Updated 9 years ago
• sudohyak / suricata-rules
  Suricata rules for the new critical vulnerabilities
  ☆83Updated 4 years ago
• G4rb3n / Script-Ganker
  恶意脚本检测分类工具
  ☆40Updated 4 years ago
• tstillz / webshell-scan
  Simple web shell scanner written in Golang.
  ☆90Updated 6 years ago
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆32Updated 5 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• dozernz / cve-2020-11651
  ☆105Updated 5 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆61Updated 5 years ago
• corelight / ripple20
  A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
  ☆33Updated 3 years ago
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 6 years ago
• knqyf263 / CVE-2020-8617
  PoC for CVE-2020-8617 (BIND)
  ☆45Updated 5 years ago
• NotSoSecure / icmp_tunnel_ex_filtrate
  Code snippet accompanying blog post
  ☆30Updated 9 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 6 years ago
• baronpan / SysmonHunter
  An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
  ☆202Updated 3 years ago
• migolovanov / libinjection-fuzzer
  This tool was written as PoC to article https://waf.ninja/libinjection-fuzz-to-bypass/
  ☆38Updated 7 years ago
• fox-it / cobaltstrike-extraneous-space
  Historical list of {Cobalt Strike,NanoHTTPD} servers
  ☆121Updated 6 years ago
• codejanus / ToolSuite
  Security tools
  ☆104Updated 8 years ago
• jiansiting / ripple20-poc
  Treck Network Stack Discovery Tool by JSOF
  ☆33Updated 5 years ago
• momika233 / ClamAV_0Day_exploit
  ClamAV_0Day_exploit
  ☆89Updated 5 years ago
• pandaof / ATT-CK-and-Atomic-Red-Team
  ☆11Updated last month