squidmagic

Traffic analyzer

Analyzes web-based network traffic to detect malicious command and control servers using Squid proxy server and Spamhaus

analyze a web-based network traffic 🕶 to detect central command and control servers

GitHub

78 stars
8 watching
27 forks
Language: Python
last commit: about 8 years ago
Linked from 1 awesome list

incident-responsenetwork-trafficproxy-serversquidsquidmagic

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
tomchop/malcomAnalyzes network traffic to detect malware communication and behavior1,158
michoo/pciAnalyzes network traffic to investigate packet interactions and visualize connections on a graph-based platform.90
idaholab/malcolmA powerful tool suite for analyzing and visualizing network traffic data368
cisco/mercuryA tool for analyzing and extracting metadata from network packets447
benjeems/packetstriderAnalyzes network traffic from SSH connections to detect potential security threats and reverse sessions.254
pi-hole/ftlA lightweight, interactive API that provides access to network traffic statistics and integrates with the Pi-hole project.1,388
eremit4/cs-discoveryDetects malicious servers in network traffic by analyzing encoded byte patterns20
mandiant/flare-fakenet-ngA tool to intercept and analyze network traffic for malware analysis and testing1,824
cisagov/malcolmA network traffic analysis tool suite that accepts various data formats and provides visualization and incident response capabilities.2,001
phaethon/kameneA tool for crafting and analyzing network packets and pcap files to support security research and testing.869
jarryshaw/pypcapkitA Python-based comprehensive network packet analysis library240
activecm/ritaA framework for detecting malicious communication patterns in network traffic by analyzing Zeek logs.215
sunwxg/gosharkA tool for analyzing IP packets using tshark and decoding network protocols into structured data19
ebu/smpte2110-analyzerAnalyze network packets generated by the SMPTE ST 2110 specification to inspect video stream data71
hgascon/acapulcoA tool for analyzing and visualizing network traffic data using event clustering and parallel coordinates graphs.10