Travis Green

hunting-rules. Suricata rules for network anomaly detection

intel_amt_honeypot. intel amt honeypot

autoIDS. Frontend for automating IDSDeathBlossom using a web interface and Flask

cve-2025-8088. cve-2025-8088_detection

xor_magic. brute forces single byte xor and uses libmagic to try to ID the output

repdata_to_elasticsearch. A quick and dirty script to take EmergingThreats domain reputation data feed and import it into ElasticSearch

detection. Threat Detection Rules (Snort/Sigma/Yara)

PCredz. This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

bitnami-scraper. generates a list of urls to download Bitnami's very cool VMs