pp-

mig

Distributed & real time digital forensics at the speed of the cloud

dnscap

Network capture utility designed specifically for DNS traffic

pdftilecut

pdftilecut lets you sub-divide a PDF page(s) into smaller pages so you can print them on small form printers.

polichombr

Collaborative malware analysis framework

pcapFS

A FUSE module to mount captured network data

nDPI

Open Source Deep Packet Inspection Software Toolkit

mkcert

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

baobab

DEPRECATED - The application that powers Gandi's Status website (status.gandi.net).

fero

YubiHSM2-backed signing server

tidb

TiDB is an open-source, cloud-native, distributed, MySQL-Compatible database for elastic scale and real-time analytics. Try AI-powered Chat2Query free at : https://www.pingcap.com/tidb-serverless/

trommel

TROMMEL: Sift Through Embedded Device Files to Identify Potential Vulnerable Indicators

tinyauth

Authentication and Authorization kind-of-micro service

pakiti-server

Pakiti provides a monitoring mechanism to check the patching status of Linux systems.

Stream4Flow

A framework for the real-time network traffic analysis based on world-leading technologies for distributed stream processing, network traffic monitoring, and visualization.

AbuseIO

AbuseIO is a toolkit to receive, process, correlate and notify about abuse reports received by network operators, typically hosting and access providers.

lsofgraph

lsof to graphviz

HoneyPy

A low to medium interaction honeypot.

malspider

Malspider is a web spidering framework that detects characteristics of web compromises.

classifyRSAkey

sanoid

These are policy-driven snapshot management and replication tools which use OpenZFS for underlying next-gen storage. (Btrfs support plans are shelved unless and until btrfs becomes reliable.)

honeytrap

Advanced Honeypot framework.

ThreatHunting

An informational repo about hunting for adversaries in your IT environment.

Sublist3r

Fast subdomains enumeration tool for penetration testers

CDMCS

Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)

caldera

Automated Adversary Emulation Platform

scot

Sandia Cyber Omni Tracker (SCOT)

Manalyze

A static analyzer for PE executables.

malware-jail

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

padr

Padding of missing records in time series

Office-DDE-Payloads

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.