corelight / ripple20
A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
☆33Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for ripple20
- WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…☆32Updated 4 years ago
- How to Zeek Sysmon Logs!☆101Updated 2 years ago
- Python 3 library to request https://crt.sh/☆30Updated last year
- This module detects HTTP requests that are non RFC compliant and used for smuggling☆12Updated last year
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆37Updated last year
- Bro integration with osquery☆15Updated last year
- ☆39Updated 2 years ago
- Cybersecurity Incidents Mind Maps☆32Updated 3 years ago
- Pulse Secure SSL VPN pre-auth file reading☆50Updated 5 years ago
- ☆53Updated 5 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆98Updated 3 years ago
- Tweettioc Splunk App☆20Updated 4 years ago
- Explore Indicators of Compromise Automatically☆94Updated 4 years ago
- 威胁检测规则集☆15Updated 5 years ago
- Suricata rule and intel index☆29Updated last month
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 4 years ago
- Static Token And Credential Scanner☆95Updated last year
- CVE2020-0796 SMBv3 RCE☆61Updated 4 years ago
- ATT&CK Evaluations website (DEPRECATED)☆59Updated 3 years ago
- ☆35Updated 11 months ago
- Mapping NSM rules to MITRE ATT&CK☆68Updated 4 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆64Updated last year
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆144Updated 8 months ago
- A set of ICS IDS rules for use with Suricata.☆47Updated last year
- Threat Mapping Catalogue☆17Updated 3 years ago
- A CLI tool for querying passive DNS services☆41Updated 11 months ago
- Historical list of {Cobalt Strike,NanoHTTPD} servers☆122Updated 5 years ago
- The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research☆12Updated 7 years ago
- Malware Sinkhole List in various formats☆102Updated 2 years ago
- A CALDERA plugin for ATT&CK Evaluations Round 1☆33Updated last year