corelight / ripple20
A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
☆33Updated 2 years ago
Alternatives and similar repositories for ripple20:
Users that are interested in ripple20 are comparing it to the libraries listed below
- A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.☆51Updated 6 years ago
- How to Zeek Sysmon Logs!☆101Updated 3 years ago
- ☆35Updated last year
- Bro integration with osquery☆15Updated 2 years ago
- Python 3 library to request https://crt.sh/☆31Updated 4 months ago
- Explore Indicators of Compromise Automatically☆94Updated 5 years ago
- Black Hat EU 2018 - Don't Eat Spaghetti with a Spoon - An Analysis of the Practical Value of Threat Intelligence☆22Updated 6 years ago
- This module detects HTTP requests that are non RFC compliant and used for smuggling☆12Updated 2 years ago
- A CLI tool for querying passive DNS services☆41Updated last year
- ☆43Updated 2 years ago
- CVE2020-0796 SMBv3 RCE☆60Updated 5 years ago
- WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…☆32Updated 4 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆39Updated last year
- Python3 Metasploit automation library☆21Updated 2 years ago
- A Yara Lua output script for Suricata☆19Updated 6 years ago
- 威胁检测规则集☆15Updated 5 years ago
- Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner☆43Updated 3 years ago
- Audit Powershell and search from known keywords in history #Blueteam☆25Updated 4 years ago
- Suricata rule and intel index☆30Updated 3 weeks ago
- Historical list of {Cobalt Strike,NanoHTTPD} servers☆121Updated 5 years ago
- Old home of LimaCharlie, open source EDR☆30Updated last year
- ☆37Updated last year
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆153Updated 3 weeks ago
- ATT&CK Evaluations website (DEPRECATED)☆59Updated 3 years ago
- ☆53Updated 6 years ago
- Zeek package to detect Zerologon☆11Updated 3 years ago
- Tweettioc Splunk App☆20Updated 4 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆35Updated 2 years ago
- Threat Mapping Catalogue☆17Updated 3 years ago
- Pulse Secure SSL VPN pre-auth file reading☆50Updated 5 years ago