robcza

gglsbl3

Python google safe browsing - afilipovich/gglsbl ported to python 3

combine

Tool to gather Threat Intelligence indicators from publicly available sources

intelmq-dockerhub

API-malwr.com

(Unofficial) Python API for https://malwr.com/

api-python-sdk

Python SDK for Blueliv api

BotDigger

Detecting DGA bots in a single network using DNS traffic

cabot-docker

Docker Images to build full cabot environment

DGA

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.

dga-1

Classifier to separate legitimate domains from those generated by a domain generating algorithm (DGA).

dga-collection

A collection of known Domain Generation Algorithms

dns-violations

List of DNS violations by implementations, software and/or systems

dnsreplay-dockerhub

replay all available dns pcaps against a target resolver

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

docker-haproxy-certbot

Dockerized HAProxy with Let's Encrypt certificates automatic renewal

docker-images

Personal Repository for Docker Images

docker-smtp

SMTP docker container

godns

A fast dns cache server written by go

GOSINT

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).

intelmq

IntelMQ is a solution for CERTs to process data feeds, pastebins, tweets throught a message queue.

knot-resolver

Knot Resolver - resolve DNS names like it's 2021

logspout

Log routing for Docker container logs

maltrieve

A tool to retrieve malware directly from the source for security researchers.

massive-octo-spice

the fastest way to consume threat intelligence

oauth2_proxy

A reverse proxy that provides authentication with Google, Github or other provider

passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

py-idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including an easy to use Unified2 File Reader)

readthedocs-docker

Docker build for ReadTheDocs (RTD)

sarlacc

SMTP server / sinkhole for collecting spam

sinkit-resolver

GoDNS with Unbound backend

VorpalSpyglass

A tool for automatic detection of Domain Generation Algorithm (DGA) - driven web traffic.