Network Security
245 tools and resources
FEATURED
Feature Your Cybersecurity Product
Showcase your innovative cybersecurity solution to our dedicated audience of security professionals.
Boost Your VisibilityNEW
Open source security-oriented language for describing protocols and applying security policies on captured traffic.
Object scanning system with scalable and flexible architecture for intrusion detection.
A Yara scanner for IMAP feeds and saved streams, extracting attachments and scanning them with chosen Yara rule files.
replayproxy allows you to 're-live' a HTTP session captured in a .pcap file, parsing HTTP streams, caching them, and starting a HTTP proxy to reply to requests with matching responses.
Smart traffic sniffing tool for penetration testers
A command line tool for running SQL queries on PCAP files with various output options and a simplistic web-server.
Simple perl script for making Modbus transactions from the command line.
Visualize and analyze network relationships with AfterGlow
6Guard is an IPv6 attack detector sponsored by Google Summer of Code 2012 and supported by The Honeynet Project organization.
A honeypot that logs NTP packets into a Redis database to detect DDoS attempts.
Fake SSH server that sends push notifications for login attempts
A tool for parsing Google Protobuf encoded blobs without the accompanying definition, providing a colored representation of the contents.
JARM is a TLS server fingerprinting tool used for identifying server configurations and malicious infrastructure.
A low interaction Python honeypot designed to mimic various services and ports to attract attackers and log access attempts.
Romana automates cloud native network creation and secures applications with a distributed firewall.
AWS Network Firewall provides fine-grained control over network traffic and enables easy deployment of firewall security.
Hale is a botnet command & control monitor/spy with a modular design and various monitoring capabilities, including IRC and HTTP, to aid in botnet hunting and research.
CrowdSec is a behavior detection engine with a global IP reputation network.
Tcpdump is a command-line packet analyzer for capturing and analyzing network traffic.
DenyHosts is a script to block SSH server attacks by automatically preventing attackers after failed login attempts.