0x4d31 Goto Github PK

0x4d31.github.io

awesome-honeypots

an awesome list of honeypot resources

awesome-oscp

A curated list of awesome OSCP resources

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

checkpot

Checkpot Honeypot Checker

cowrie

Cowrie SSH/Telnet Honeypot

cryptoaus_honeytoken_workshop

CryptoAUS Honeytoken Workshop

cve-2024-6387_hassh

HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).

deception-as-detection

Deception based detection techniques mapped to the MITRE’s ATT&CK framework

detection-and-response-pipeline

✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗

eql

fatt

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

galah

Galah: An LLM-powered web honeypot.

glutton

Generic Low Interaction Honeypot

gopacket

Provides packet processing capabilities for Go

hassh

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.

hassh-utils

hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)

honeybits

A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots

honeybits-win

Windows version of honeybits - a PoC tool to create breadcrumbs and honeytokens, to lead the attackers to your honeypots!

honeyku

A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).

honeylambda

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

notes

presentations

Some of the presentations given by me

quick

QUICk - a go library based on gopacket for analyzing QUIC CHLO messages

rdfp

salt-scanner

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration