ccgcyber Goto Github PK

active-probing-tools

Python tools for targeted pcap analysis.

ai_clips

Expert rule-based Artifical Intelligence system using CLIPS and Protégé

alertify.js

JavaScript Alert/Notification System

alienvault

alienvault-demo_scripts

Scripts to inject demo data and network traffic into an existing Alienvault/OSSIM installation

analyzepdf

Tool to help analyze PDF files

ann-ddos_detection

Artificial Neural Network designed with Tensorflow that classifies UDP data set into DDoS data set and normal traffic data set

anomalia

4 years ==> anomalia is a plugin for nfsen that detects anomalies in TCP connections based on the flow analysis.

anomalia-reputation-api

anomalia is a plugin for nfsen that detects anomalies in TCP connections based on the flow analysis and send to reputation-api endpoint

anomaly-detection-by-netflow-and-dns-analysis-of-alexa-1m-websites

The Domain Name System is a fundamental component of the internet since it maps the easy-to-remember domain names to IP addresses. Therefore, it is usually the primary target for most of the malicious attacks such as DNS Poisoning and Rogue DNS servers. With the help of 0x20 bit encoding, the problem of DNS Poisoning is mitigated to quite a large extent. Although, it has a minor requirement that the authoritative nameserver should be able to preserve the case of the DNS query. It is usually difficult to detect the rogue DNS server above the stub resolver. We propose an anomaly detection system which would be able to raise a red flag in case of DNS Poisoning and malicious DNS authority by passive DNS analysis of domain names and then comparing them with the 0th day cluster of the database. We perform the passive DNS analysis for 27 days by querying the whois server of CYMRU, compare the network profiles of the domain names crawled with the 0th day cluster and categorize the domain names as static, benign anomaly and malicious anomaly depending upon the cluster a domain name shifted. In the process, we also create a WHOIS repository for Alexa domain names which is faster to query than the WHOIS server.

ap_detection

before I wrote find_ap.nasl for the Nessus project, there was an implementation in C and then later ported to Python with Tkinter for the GUI (for windows).

armadillo

CyPSA Open Source Release

array-utils

A tiny collection of utilities to work with arrays and vectors.

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

auto-ossec

aws-autodiscovery

AWS autodiscovery plugin for Automatron

bat

Bro Analysis Tools (BAT): Processing and analysis of Bro network data with Pandas, scikit-learn, and Spark

bind-blackhole

Really simple tools to automate the generation of black hole Bind zones for known malicious hosts

binetflowtosigs

converting BiNetflow file To Social Interaction Graphs file

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bluelog

A highly configurable Linux Bluetooth scanner with optional web interface.

bordeaux-threads

Portable shared-state concurrency for Common Lisp

bro

IoT protocol analyzers for Bro IDS

bro-dsniff

A dsniff project using bro

bro-flows

Repository for the TFG scripts

bro-id-log-analyzer

BILA: BRO IDS Logs Analyzer

bro-ken

An engine for Bro IDS using Kibana, ElasticSearch, & NXLOG (KEN)

bro-mode

An emacs mode for the Bro IDS Scripting Language.

bro-phishing

Detect Phishing with Bro IDS

bro-scripts

5 years ==> Bro scripts to be shared with the community