A simple Docker-based honeypot to detect port scanning
#network-security tools
148 results · page 3
A hybrid honeypot framework that combines low and high interaction honeypots for network security
Automated signature creation using honeypots for network intrusion detection systems.
A printer honeypot PoC that simulates a printer on a network to detect and analyze potential attackers.
Honeytrap is a low-interaction honeypot and network security tool with various modes of operation and plugin support for catching attacks against TCP and UDP services.
A multi-threading tool for sniffing HTTP header records with support for offline and live sniffing, TCP flow statistics, and JSON output.
A specialized packet sniffer for displaying and logging HTTP traffic, designed to capture, parse, and log traffic for later analysis.
A collection of PCAPs for ICS/SCADA utilities and protocols with the option for users to contribute.
Impost is a powerful network security auditing tool with honey pot and packet sniffer capabilities.
A private network system utilizing WireGuard for enhanced networking capabilities.
A new approach to computer network defense that leverages knowledge about advanced persistent threats, using a kill chain model to describe phases of intrusions and map adversary kill chain…
Scan the internet for publicly exposed network components
A foundational guide for using deception against computer network adversaries using honeypots to detect adversaries before they accomplish their goals.
An IP address intelligence API that provides geolocation data and threat detection capabilities for IPv4 and IPv6 addresses.
A tool that reads IP packets from the network or a tcpdump save file and writes an ASCII summary of the packet data.
A network recon framework including tools for passive and active recon
A service for better visibility on networking issues in Kubernetes clusters by detecting traffic denied by iptables.
LaBrea is a 'sticky' honeypot and IDS tool that traps malicious actors by creating virtual servers on unused IP addresses.
An open source network penetration testing framework with automatic recon and scanning capabilities.
A high-level C++ library for creating and decoding network packets with a Scapy-like interface.
An API for constructing and injecting network packets with additional functionality.
LogRhythm NetMon is a network traffic analytics tool that provides real-time visibility, automated threat detection, and investigation capabilities for organizational networks.
A speedy, parallel, and modular login brute-forcing tool designed for network services. It's free and open-source software that supports various protocols like HTTP, FTP, SSH, and more.
Network metadata capture and analysis tool
Load more tools
Showing 72 of 148