Tools: defensive (37)

A host-based solution to secure the ARP protocol and prevent MITM attacks via ARP spoofing or cache poisoning.

Arp spoof detection tool.

Blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Apache Real Time Logs Analyzer System.

The FLARE team's open-source tool to identify capabilities in executable files.

Tool that detects sniffers in the network.

High performance DoS/DDoS load analyzer built on top of multiple packet capture engines.

A low-level filesystem sandbox for Linux using syscall intercepts.

Network credential injection to detect responder and other network poisoners.

A network interface promiscuous mode detection tool.

A low(zero) cost threat intelligence & response tool against phishing domains.

Apache Logfile Security Analyzer.

VirusTotal Wanna Be - Now with 100% more Hipster.

Hosting exploit/backdoor detection daemon.

Malicious traffic detection system.

Metadata Anonymisation Toolkit composed of a GUI application, a CLI application and a library.

Online hash checker for Virustotal and other services

A script to make Tor Network your default gateway.

A more secure way to force programs to exclusively use tor network.

Prevents remote active/passive OS fingerprinting by tools like nmap or p0f.

Hunt persistences implanted in Windows machines.

Process-scoped runtime investigation tool using eBPF.

Tool for AWS security assessment, auditing and hardening.

Command line tool for scanning streams within office documents plus xor db attack.

Generic Signature Format for SIEM Systems

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

An Open Source Next Generation Intrusion Detection and Prevention Engine.

BGP Hijack Detection.

Security scanner for your Terraform code.

Project to integrate threat modelling into development process.

Tor Autocircuit was developed to give users a finer control over Tor circuit creation. The tool exposes the functionalit

Tor Browser Bundle: anonymous browsing using Firefox and Tor.

A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy

Kernel-Mode Rootkit Hunter.

A Linux or OSX tool that uses psutil to monitor devices while your computer is locked. In the case it detects someone pl

A platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified

AWS Auditing & Hardening Tool.