Tools
Malcolm
cisagov/Malcolm
An easily deployable network traffic analysis suite that ingests PCAP files, Zeek logs and Suricata alerts, normalizes and correlates them, and provides visual analysis interfaces.
Topics
Related projects
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
PotatoTool1.2kPotatoTool is a JavaFX desktop suite for security professionals, combining WebShell traffic decryption, asset discovery, vulnerability scanning, decompilation, and blockchain or identity lookups.
crowdsec15.6kCrowdSec is an open-source IDS/IPS, WAF and bot-detection engine. It analyzes logs and HTTP requests, triggers remediation through firewall and proxy components, and shares a crowdsourced blocklist of malicious IPs so one attack protects the whole community.
DVWA14kDamn Vulnerable Web Application (DVWA) is a deliberately vulnerable PHP and MariaDB web app for practicing common web vulnerabilities at several difficulty levels. It is widely used by security professionals, students and teachers for legal, hands-on security training.
routersploit13.3kRouterSploit is an exploitation framework dedicated to embedded devices such as routers. It bundles exploit, credential-testing, scanner and payload modules in an interactive shell, supporting penetration testing and security research on network appliances.
opencti10.4kAn open-source cyber threat intelligence platform for structuring, storing and visualizing threat knowledge based on STIX2 standards.