Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise (IOCs): Hashes MD5, SHA1 and SHA256 (using md5sum, sha1sum, sha -a 256) File Names string - checked for substring of the full path, e.g. "temp/p.exe" in "/var/temp/p.exe" Strings grep in files C2 Server checking for C2 server strings in 'lsof -i' and 'lsof -i -n' output Hot Time Frame using stat in different modes - define min and max epoch time stamp and get all files that have been created in between Basic characteristics: Bash Script No installation or agent needed Uses common tools to extract attributes (e.g. md5sum, grep, stat in different modes) Intended to run on any Linux / Unix / OS X with Bash Low footprint - Ansible playbook with RAM drive solution Smart exclusions (file size, extension, certain directories) speeds up the scan process Why Fenrir? FENRIR is the 3rd tool after THOR and LOKI. THOR is our full featured APT Scanner with many modules and export types for corporate customers. LOKI is a free and open IOC scanner that uses YARA as signature format. The problem with both predecessors is that both have certain limitations.
Open source software for leveraging insights from flow and packet analysis to identify potential security threats or attacks.
A WebSocket Manipulation Proxy with a user interface to capture, intercept, and send custom messages for WebSocket and Socket.IO communications.
Tcpreplay is a suite of Open Source utilities for editing and replaying captured network traffic.
A network protocol analyzer for capturing and analyzing network traffic with a focus on TCP/IP flow reconstruction and response time tracking.
A suite for man in the middle attacks, featuring sniffing of live connections, content filtering, and protocol dissection.
NFStream is a multiplatform Python framework for network flow data analysis with a focus on speed and flexibility.
A Fake Protocol Server tool with support for multiple network services and protocols.
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.