xnih / satoriLinks
Python rewrite of passive OS fingerprinting tool
☆204Updated last month
Alternatives and similar repositories for satori
Users that are interested in satori are comparing it to the libraries listed below
Sorting:
- JA3 TLS Fingerprint database☆81Updated 6 years ago
- A wireshark/tshark plugin for the JA3 TLS Client Fingerprinting Algorithm☆60Updated 2 years ago
- LZR quickly detects and fingerprints unexpected services running on unexpected ports.☆192Updated last month
- OSfooler-ng prevents remote active/passive OS fingerprinting by tools like nmap or p0f☆215Updated 2 years ago
- GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor☆80Updated 2 years ago
- packet captures of real-world ddos attacks☆167Updated 3 months ago
- BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)☆77Updated last month
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆163Updated 10 months ago
- ☆71Updated 7 years ago
- Mercury: network metadata capture and analysis☆496Updated 2 weeks ago
- Suricata rules for network anomaly detection☆182Updated 2 months ago
- Suricata Verification Tests - Testing Suricata Output☆118Updated this week
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆92Updated 9 months ago
- Generic Low Interaction Honeypot☆294Updated last month
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆84Updated last month
- TLS Fingerprinting☆396Updated 5 years ago
- IP ASN History to find ASN announcing an IP and the closest prefix announcing it at a specific date☆96Updated last month
- Warning lists to inform users of MISP about potential false-positives or other information in indicators☆604Updated 3 weeks ago
- GPS is a scanning platform that learns and predicts the location of IPv4 services across all 65K ports.☆77Updated 3 years ago
- Zeek-Formatted Threat Intelligence Feeds☆383Updated this week
- Hfinger - fingerprinting HTTP requests☆142Updated 2 years ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆172Updated 2 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆90Updated 2 weeks ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆452Updated last week
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆113Updated last year
- Zeek IDS Dockerfile☆101Updated 3 years ago
- JA4TScan is an active TCP server fingerprinting tool.☆103Updated last year
- Sample programs to access the API☆103Updated 2 months ago
- simple YARA-based IOC scanner☆175Updated last month
- Accurate, modular, scalable PCAP manipulation tool written in Go.☆96Updated last year