Network Security
Showing 36 of 359 projects
A camouflage proxy for Tor that disguises traffic to evade censorship by making it look like normal web browsing.
Automated script to install and configure Dionaea and Kippo honeypots as system services on Ubuntu.
Analyzes web traffic via Squid proxy to detect command and control servers and malicious sites using Spamhaus data.
Simplified certificate authority and device certificate manager for strongSwan VPN, supporting client/server, host-to-host, and site-to-site configurations.
A lightweight full-packet network traffic recorder and buffering tool for commodity hardware.
A command-line tool for fuzzing network protocols by automating packet modifications to test firewall and IDS evasion.
An SNMP proxy forwarder with built-in message routing, protocol translation, and split client/server architecture for secure deployments.
An RDP honeypot that captures attack telemetry by simulating Windows RDP sessions with virtual machines.
A Python library for performing enhanced Multi-Traceroute (MTR) with scapy and generating SVG visualizations.
A Django-based web frontend for visualizing and analyzing data from the Dionaea low-interaction honeypot.
Automatically manages iptables rules to secure DigitalOcean droplets by allowing traffic only from other droplets.
A CLI tool that creates a DigitalOcean Droplet and sets up transparent network proxying via sshuttle.
An open-source book providing SOC analysts and threat hunters with practical guidance on using Suricata for network security monitoring.
A honeypot platform for monitoring and analyzing UDP-based DDoS amplification attacks via DNS, NTP, SSDP, Chargen, and generic UDP services.
A Python-based low-interaction honeypot with sophisticated emulation for malware collection and analysis.
A distributed low-interaction honeypot with agent/master architecture for monitoring attacks across multiple protocols.
A proof-of-concept tool to externally detect Kippo SSH honeypot instances.
A honeypot that mimics Drupal CMS to detect and log malicious scanning and attack attempts.
A fast, extensible event router for processing Suricata's JSON EVE output, designed for high-throughput network security monitoring.
An ICAP server that scans web content and URLs using YARA rules for security filtering.
A Node.js library for programmatically creating SSH tunnels with flexible local and remote port forwarding.
A Python-based NTP honeypot that logs NTP scan attempts and DDoS reconnaissance into Redis for security monitoring.
A low-interaction honeypot that emulates Cisco ASA devices to detect exploitation attempts targeting CVE-2018-0101.
An Intrusion Prevention System (IPS) for SSH that blocks brute force attacks using iptables and optional nmap/dig probes.
A Python-based web server honeypot and service imitation builder for faking HTTP services and recording requests.
A security analysis tool that automatically detects misconfigurations and vulnerabilities in MQTT brokers.
A high-interaction honeypot that emulates the SMB protocol to detect and analyze network attacks.
A DNS honeypot that logs requests to SQLite/JSON and mimics an open resolver with configurable sinkhole behavior.
A honeypot server written in Go that logs attacker interactions to a database.
A pure Common Lisp implementation of TLS 1.3 with post-quantum key exchange, Encrypted Client Hello, and automatic Let's Encrypt certificate management.
A decentralized AI security mesh that provides collective defense, where threat detection on any node protects all nodes within 30 seconds.
Bash and Python scripts that listen on unused ports and automatically blacklist IPs that connect to them.
A secure Lisp reader wrapper that protects against internbombing, excessive input, and macro characters when reading from untrusted sources.
A honeypot that isolates each attacker connection in a separate LXC container for monitoring and analysis.
A multi-threaded proof-of-concept tool for conducting denial-of-service stress tests over the Tor network.
IPv6 attack detector that identifies link-local security threats from tools like THC-IPv6 and Nmap.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.