Mercury: network metadata capture and analysis
☆518Aug 26, 2026Updated 3 weeks ago
Alternatives and similar repositories for mercury
Users that are interested in mercury are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.☆1,366Apr 1, 2024Updated 2 years ago
- GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor☆83Aug 13, 2026Updated last month
- NFStream: a Flexible Network Data Analysis Framework.☆1,223Updated this week
- HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…☆554May 1, 2025Updated last year
- TLS Fingerprinting☆401Oct 20, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network …☆685Oct 28, 2023Updated 2 years ago
- Hfinger - fingerprinting HTTP requests☆148May 16, 2023Updated 3 years ago
- Sighting DB is designed to scale writing and reading a count of attributes, tracking when if was first and last seen☆17Apr 11, 2024Updated 2 years ago
- The Security Analyst’s Guide to Suricata☆65Apr 28, 2025Updated last year
- JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.☆3,099May 1, 2025Updated last year
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- Pcaps for PeddleCheap and implant communication + script for interpreting and decrypting pcaps.☆17Nov 29, 2017Updated 8 years ago
- A tool to facilitate ROP Chain Development for XML Character Sanitization☆20May 9, 2019Updated 7 years ago
- Network traffic classification library that requires minimal application payload☆226Aug 13, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆40Nov 20, 2025Updated 10 months ago
- QUICk - a go library based on gopacket for analyzing QUIC CHLO messages☆21Jun 13, 2020Updated 6 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,513Updated this week
- JA3 TLS Fingerprint database☆83Nov 11, 2019Updated 6 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆122Nov 19, 2020Updated 5 years ago
- ☆112Dec 27, 2019Updated 6 years ago
- PoC for CVE-2017-0075☆34Sep 12, 2019Updated 7 years ago
- An exquisite network traffic analysis framework☆29Feb 25, 2023Updated 3 years ago
- The report of a supervised classifier to detect malware in TLS traffic☆21Oct 21, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆100Apr 25, 2025Updated last year
- Some stuff about the TCP flags field in NetFlow/IPFIX Data☆12Dec 31, 2015Updated 10 years ago
- a network packet capture compiler☆206Apr 28, 2022Updated 4 years ago
- Arkime is an open source, large scale, full packet capturing, indexing, and database system.☆7,471Updated this week
- extract ja3(s) when sniffing or from a pcap.☆113Jan 26, 2022Updated 4 years ago
- Suricata, Snort and Zeek IDS rule and pcap testing system☆521May 28, 2026Updated 3 months ago
- Tenzir is the data pipeline engine for security teams.☆759Updated this week
- JA4+ is a suite of network fingerprinting standards☆2,093Sep 3, 2026Updated 2 weeks ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆88Jul 23, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- pCraft is a PCAP Crafter, which creates a PCAP from an AMI scenario.☆93Apr 11, 2024Updated 2 years ago
- Tool to decrypt the configuration of NanoCore and dump all used plugins☆12Dec 8, 2020Updated 5 years ago
- Python rewrite of passive OS fingerprinting tool☆226Updated this week
- A platform built for easy-to-use automated network traffic analysis☆60Dec 16, 2022Updated 3 years ago
- Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.☆1,968Aug 22, 2026Updated 3 weeks ago
- pyJARM is a library for doing JARM fingerprinting using python☆52Mar 23, 2025Updated last year
- PCAP Samples for Different Post Exploitation Techniques☆374Apr 29, 2021Updated 5 years ago