network-security

A cross-platform programmable network tool

In-depth attack surface mapping and asset discovery

Scapy: the Python-based interactive packet manipulation program & library.

hydra

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Enterprise-ready zero-trust access platform built on WireGuard®.

Lightweight network IP scanner written in Go. With notifications, history, export to Grafana

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Next generation web scanner

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

3proxy - tiny free proxy server

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Best practices for segmentation of the corporate network of any company

a drop-in replacement for Nmap powered by shodan.io

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

The Python Code Tutorials

🛜 100+ offline-first networking tools and utilities

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries.

eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.

A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.

A Suricata based NDR distribution

Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.

Subdomain enumeration tool

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

NFStream: a Flexible Network Data Analysis Framework.