Alternatives and similar repositories for passive-ssh

Users that are interested in passive-ssh are comparing it to the libraries listed below

• D4-project / d4-core
  D4 core software (server and sample sensor client)
  ☆42Updated last year
• theparanoids / spicy-noise
  A Spicy protocol analyzer for WireGuard
  ☆29Updated 5 years ago
• CyCat-project / cycat-service
  CyCAT.org API back-end server including crawlers
  ☆29Updated 2 years ago
• covert-labs / mx-intel
  Jupyter Notebooks and code used for DNS MX mining to identify top email security providers
  ☆54Updated 2 years ago
• assafmo / xioc
  Extract indicators of compromise from text, including "escaped" ones.
  ☆160Updated 5 years ago
• mnemonic-no / SNIcat
  SNIcat
  ☆127Updated 4 years ago
• D4-project / BGP-Ranking
  BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)
  ☆74Updated last year
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆52Updated 4 years ago
• rommelfs / scanner
  nmap/ndiff based scanner with template based notification system in case of infrastructure changes
  ☆18Updated 7 years ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆88Updated 2 years ago
• nccgroup / SSHession
  The SSH Multiplex Backdoor Tool
  ☆65Updated 5 years ago
• xme / SANS-ISC
  Data related to the SANS Internet Storm Center
  ☆11Updated last month
• AbGuthrie / goquery
  Provide a shell like interface by utilizing osquery's distributed API
  ☆81Updated 5 years ago
• jgamblin / CVEHeatMap
  A CVE Heatmap Using CalPlot
  ☆97Updated 4 years ago
• ma111e / melody
  Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulatio…
  ☆141Updated 6 months ago
• cocaman / yara-scan-service
  Repository for scripts and tips for "Yara Scan Service"
  ☆20Updated 2 years ago
• telekom-security / acquire-aws-ec2
  A python script to acquire multiple aws ec2 instances in a forensically sound-ish way
  ☆38Updated 3 years ago
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆263Updated 2 years ago
• adobe / libLOL
  ☆49Updated 3 weeks ago
• mandiant / ioc-scanner-CVE-2019-19781
  Indicator of Compromise Scanner for CVE-2019-19781
  ☆94Updated 5 years ago
• ciscocsirt / dhp
  Simple Docker Honeypot server emulating small snippets of the Docker HTTP API
  ☆31Updated 4 years ago
• ninoseki / ukemi
  A CLI tool for querying passive DNS services
  ☆41Updated last year
• DevoInc / pCraft
  pCraft is a PCAP Crafter, which creates a PCAP from an AMI scenario.
  ☆90Updated last year
• veeral-patel / incidents
  Please use https://github.com/veeral-patel/true-positive instead
  ☆69Updated 2 years ago
• Te-k / commands-for-sec
  Useful commands for infosec
  ☆29Updated 2 years ago
• intelowlproject / IntelOwl-ng
  IntelOwl's Web Interface. Built with Angular 10.
  ☆87Updated 2 years ago
• D4-project / sensor-d4-tls-fingerprinting
  Extract TLS certificates from pcap files or network interfaces, fingerprint TLS client/server interactions with ja3/ja3s
  ☆37Updated 5 years ago
• TKCERT / winnti-nmap-script
  Nmap Script to scan for Winnti infections
  ☆70Updated 7 years ago
• michoo / pci
  Packet communication investigator
  ☆91Updated 2 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated 2 weeks ago