dns logger for passive dns collection
☆42May 27, 2012Updated 14 years ago
Alternatives and similar repositories for passive-dns
Users that are interested in passive-dns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Resolve URL or refering site based on alert or http log match in eve log output from suricata submit to Cuckoo as url task☆18Nov 7, 2016Updated 9 years ago
- A program that uses xapian to index the flat file databases used by nfdump or flow-tools☆36Mar 26, 2018Updated 8 years ago
- Minimalistic WebUI for passiveDNS tool☆18May 6, 2021Updated 5 years ago
- Plugin based information gathering library☆28May 8, 2026Updated 3 months ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- python wrapper for the nfdump cli application☆21Apr 8, 2021Updated 5 years ago
- Passive DNS visualization and Passive DNS server toolkit☆36Mar 22, 2012Updated 14 years ago
- Help summarize a PCAP file☆33Dec 27, 2011Updated 14 years ago
- Gobbling it's way through your pcap files☆24Oct 23, 2014Updated 11 years ago
- Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format☆14Sep 13, 2016Updated 9 years ago
- AMICO - Accurate Behavior-Based Detection of Malware Downloads☆31Nov 13, 2017Updated 8 years ago
- UI for forensic filtering of filesystem mac times.☆15May 14, 2020Updated 6 years ago
- Kippo configured to be a backdoored netscreen☆11Dec 22, 2015Updated 10 years ago
- IP Address to ASN/prefix/owner/cc lookup server☆29Jan 3, 2020Updated 6 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- IDS Utility Belt For Automating/Testing Various Things☆29Oct 14, 2020Updated 5 years ago
- Beta Bot reverse engineering work☆16Oct 8, 2014Updated 11 years ago
- ☆36May 21, 2014Updated 12 years ago
- Mal4s is a free open source data visualization tool designed to make it easy to see clusters of related Internet resources.☆33Jul 9, 2026Updated last month
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20May 4, 2016Updated 10 years ago
- IP-ASN-history is a server software to store efficiently the history of BGP announces and quickly lookup IP addresses origins☆46Apr 1, 2022Updated 4 years ago
- Canari local transforms pcap file analysis☆30Apr 14, 2014Updated 12 years ago
- CFN template for running a Splunk 6 deployment on AWS☆10May 4, 2016Updated 10 years ago
- Metadata Inspection Database Alerting System☆42Jul 26, 2013Updated 13 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- DNS passive monitoring tool☆15Apr 13, 2026Updated 4 months ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- Python Web App to Parse and Track Email and http Pcap Files.☆54Jul 14, 2013Updated 13 years ago
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- exploit dev. stuff☆20Aug 7, 2012Updated 14 years ago
- XMPP chatbot written in Python. Makes use of PyAIML☆27Feb 17, 2023Updated 3 years ago
- ☆72Nov 17, 2021Updated 4 years ago
- A command line utility to aid in using autofocus for IR and research☆27Oct 22, 2019Updated 6 years ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44May 9, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Analysis scripts for the Bro Intrusion Detection System☆59Feb 26, 2014Updated 12 years ago
- IRMA brain☆21Nov 28, 2016Updated 9 years ago
- Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.☆23Feb 9, 2021Updated 5 years ago
- function identification signatures☆12Apr 26, 2021Updated 5 years ago
- Meeting notes☆14Apr 5, 2016Updated 10 years ago
- Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"☆26Jul 22, 2019Updated 7 years ago
- DNS traffic indexer and analyzer☆26Oct 7, 2014Updated 11 years ago