PCAP-ATTACK
Pcap Demonstrations
A collection of PCAP captures used to demonstrate post-exploitation techniques and threat hunting tactics.
PCAP Samples for Different Post Exploitation Techniques
344 stars
27 watching
74 forks
last commit: over 3 years ago
Linked from 1 awesome list
detectionmitre-attackpcap-filespcapngthreat-hunting
Related projects:
Repository | Description | Stars |
---|---|---|
sbousseaden/slides | Collection of resources and concepts for threat hunting and detection engineering. | 372 |
neoadvancedtechnology/st2110_pcap_zoo | A collection of sample ST 2110 pcap files for testing and development purposes | 19 |
sbousseaden/evtx-attack-samples | A repository of Windows Event log samples associated with various attack and post-exploitation techniques. | 2,248 |
rust-pcap/pcap | A Rust library providing access to packet sniffing capabilities of libpcap (or Npcap on Windows) | 636 |
srinivas11789/pcapxray | A tool to visualize network traffic and extract information from packet captures | 1,698 |
ahobson/ruby-pcap | A Ruby interface to capture and analyze network traffic using the Packet Capture library. | 75 |
west-wind/threat-hunting-with-splunk | Provides Splunk queries to detect vulnerability exploitation attempts and subsequent compromise, including threat hunting for MITRE ATT&CK TTPs | 57 |
secdec/attack-surface-detector-burp | Identifies web app endpoints and parameters to help detect vulnerabilities | 98 |
anof-cyber/pycript | A tool for bypassing client-side encryption in web applications during penetration testing and bug bounty activities | 186 |
mpgn/beast-poc | A proof of concept project demonstrating the vulnerability of TLS protocols to the BEAST attack | 72 |
attackercan/burp-xss-sql-plugin | Automated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications. | 44 |
dotpcap/sharppcap | A .NET library for capturing and analyzing network packets on multiple platforms | 1,352 |
1n3/intruderpayloads | A collection of tools and methodologies for simulating web application attacks | 3,681 |
bugcrowd/hunt | An extension for Burp Suite that provides a structured approach to identifying and testing common vulnerability parameters. | 2,183 |
aleksibovellan/opnsense-suricata-nmaps | Customized Suricata detection rules to identify NMAP scan types | 52 |