Alternatives and similar repositories for Suricata-rules

Users that are interested in Suricata-rules are comparing it to the libraries listed below

• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• tianyulab / ThreatDetectionRules
  威胁检测规则集
  ☆15Updated 6 years ago
• xssfile / Attack-data
  Attack data
  ☆26Updated 7 years ago
• Blizzo / tools
  Simple, useful scripts for red/blue team situations
  ☆22Updated 10 years ago
• baidu-security / webshell-scanner-client
  A golang client of our webshell scanner API
  ☆28Updated 7 years ago
• havysec / vulnerable-scene
  一些漏洞场景的还原，基于https://www.exploit-db.com/
  ☆37Updated 7 years ago
• p1r06u3 / phishing
  The Security Practices of Party A Phishing
  ☆20Updated 5 years ago
• kirillwow / ids_bypass
  IDS Bypass tricks
  ☆122Updated 6 years ago
• sisoc-tokyo / Real-timeDetectionAD_journal
  ☆24Updated 5 years ago
• mylamour / Oops-Webshell
  Oops, It's funny to detect a webshell. Temporarily not maintained
  ☆18Updated 7 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 5 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• Tom4t0 / cobalt-strike-persistence
  cobalt strike 自启动脚本
  ☆42Updated 8 years ago
• shengqi158 / CVE-2018-2628
  CVE-2018-2628 & CVE-2018-2893
  ☆78Updated 6 years ago
• NotSoSecure / icmp_tunnel_ex_filtrate
  Code snippet accompanying blog post
  ☆30Updated 9 years ago
• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆165Updated 5 years ago
• imjdl / CVE-2019-11510-poc
  Pulse Secure SSL VPN pre-auth file reading
  ☆50Updated 5 years ago
• brianwrf / S2-057-CVE-2018-11776
  A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)
  ☆16Updated 6 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆114Updated 7 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• seecode-audit / clocwalk
  Project code and dependent component analysis tools.
  ☆2Updated last year
• shubhamshubhankar / autoSource
  Automated SonarQube
  ☆73Updated 6 years ago
• u2400 / libc_hook_demo
  一个HIDS agent端的demo
  ☆17Updated 5 years ago
• pwntester / XMLDecoder
  RCE Exploit PoC for XMLDecoder
  ☆63Updated 11 years ago
• 0xa-saline / acunetix-api
  acunetix
  ☆63Updated 5 years ago
• silience / sql
  ☆13Updated 7 years ago
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 5 years ago
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆32Updated 5 years ago
• KEDYY / SheepScanner
  分布式互联网开放端口与协议扫描
  ☆18Updated 8 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆106Updated 6 years ago