secynic / nfsinkhole
nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).
☆12Updated 7 years ago
Related projects ⓘ
Alternatives and complementary repositories for nfsinkhole
- Looks for GitHub org users without 2FA turned on☆9Updated 8 years ago
- Tachikoma is a security alerting framework for human beings☆22Updated 6 years ago
- API to access the Redis database of a BGP Ranking instance.☆17Updated 6 years ago
- An active domain name query tool to help keep track of domain name movements...☆15Updated 3 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- Flame - Send vulnerabilities reports to SIEM☆15Updated 8 years ago
- D4 core software (server and sample sensor client)☆43Updated 10 months ago
- ☆24Updated 4 years ago
- A Docker container for Cowrie - SSH honeypot based on kippo☆10Updated 9 years ago
- Extract, defang, resolve names and IPs from text☆23Updated 10 months ago
- CVE Builder script that generates STIX formatted Exploit Target objects☆18Updated 8 years ago
- A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.☆19Updated 2 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- server for indexing and querying passive DNS observations☆44Updated 9 months ago
- A 'Universal WHOIS' proxy server - you query it, it gives back the correct details☆39Updated last month
- module for osquery to load Bro logs into tables☆28Updated 9 years ago
- A Python library for being a CND Batman....☆35Updated 9 years ago
- assembling regular expressions from reusable patterns (a Python logstash grok clone)☆30Updated 4 years ago
- It's like a polaroid, but for domains☆24Updated 9 years ago
- Homographs: brutefind homographs within a font☆18Updated 7 years ago
- A shell script to download malware domains from various sources, and configuring unbound DNS config file to be used as a local recursive …☆18Updated 10 years ago
- Simple IP enrichment service and API wrapping PyASN and MaxMind GeoIP.☆72Updated last year
- Various blog post projects.☆10Updated 5 months ago
- The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams☆37Updated 2 years ago
- Mass DNS resolution tool☆36Updated 3 years ago
- A content inspecting SMTP proxy☆17Updated 10 years ago
- Using osquery for Mass Incident Detection & Response☆19Updated 8 years ago