Justin

zeek-pdns. Passive DNS collection using Zeek

bro_scripts. Analysis scripts for the Bro Intrusion Detection System

splunk-scripts. some scripts for splunk

flow-indexer. Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files

python-cymruwhois. Python client for the whois.cymru.com service

passive-dns. dns logger for passive dns collection

netflow-indexer. A program that uses xapian to index the flat file databases used by nfdump or flow-tools

asnlookup. IP Address to ASN/prefix/owner/cc lookup server

ssh-auth-logger. A low/zero interaction ssh authentication logging honeypot

can-i-use-afpacket-fanout. Validate if afpacket PACKET_FANOUT_HASH is working properly

pynfdump. python wrapper for the nfdump cli application

bannerscanner. simple tcp port scanner + banner grabber

gotm. Full packet capture with flow cutoff, rotation, and compression

zeek-clickhouse. Go

python-snort. python module for interfacing with the snort, primarily its database logging

libflowbypass. Experimental XDP bypass stuff

bro-statsd-plugin. Statsd client for Bro.

bro-react. react stuff

fakevnc. fake vnc server

python-irccat. python implemenation of irccat

splunky. stupid simple library for running queries against the Splunk API.

syslog-to-cif. bro/zeek json over tcp syslog notice log to CIF gateway

zeroman. Kind of like gearman, but using zeromq

zeek-jemalloc-profiling. a zeekctl plugin that helps configure MALLOC_CONF for profiling

http_flood. http server that floods the client with random data

python-ping_wrapper. python module for wrapping ping programs with a common api

json-cut. Go

spielbash. Tool to automate bash movie-making with asciinema. Be the Spielberg of bash.

zeek-log-filtering. A bunch of examples of zeek log filtering

ninfo_plugins. various plugins for ninfo

bro_presentation. Bro

wireless-probes. Program for using commodity hardware to probe wireless networks for performance metrics

bro-training-material. Bro

python-netdisco. Python interface to the netdisco backend database

pyrt. Python client for the Request Tracker REST interface

dotfiles. random dotfiles

django-bro-tables. Python

netflow-indexer-web. Simple web interface for netflow-indexer

asnlookup-client-python. Python client for asnlookup server

python-dmenu. python wrapper for dmenu

scrubber. video player/viewer for time lapse sequences

tcpsleep. like sleep(1) but bind to a port so it can be woken up from another machine

ninfo_web. Web interface for ninfo

vagrant-bro. Vagrant box for running Bro

daemontoolsctl. supervisorctl like wrapper around svstat and svc from daemontools

ninfo-plugin-shodan. nInfo plugin for shodan

cifsdk-go. Go

linter-bro. JavaScript

p2p-test. Shell

zeek_benchmarks. Zeek

asa-ldap-generate. Python

nfsen_box. a vagrant box that provisions nfsen and nfdump