Pinned Loading

1. finch finch Public

   Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act on them: block, reroute, tarpit, or deceive in real time.

   Go 117 7

2. nianticlabs/venator nianticlabs/venator Public

   A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

   Go 382 21

3. galah galah Public

   Galah: An LLM-powered web honeypot.

   Go 564 52

4. awesome-threat-detection awesome-threat-detection Public

   ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

   4.3k 717

5. fatt fatt Public

   FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

   Python 673 97

6. hassh-utils hassh-utils Public

   hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)

   Lua 58 15