pingback

A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.

Stars

7

Forks

5

Language

Zeek

Last Updated

Aug 05, 2021

Similar Repos
Repo Language Stars Description Updated At
C 16 ICMP command & control May 16, 2023
Python 2 A remote control based on ICMP tunnel. Mar 16, 2022
Zeek 12 Zeek package to detect Zerologon Dec 15, 2021
Shell 2 A tunnel which turns UDP traffic into encrypted UDP/FakeTCP/ICMP traffic for OpenWrt. Jan 28, 2023
C 4 Transparently tunnel your IP traffic through ICMP echo and reply packets. Oct 16, 2021
Go 17 Transparently tunnel your IP traffic through ICMP echo and reply packets Oct 19, 2021
None 2 ICMP流量伪装转发工具 ping tunnel is a tool that advertises tcp/udp/socks5 traffic as icmp traffic for forwarding. Feb 12, 2022
None 16 The report of a supervised classifier to detect malware in TLS traffic Nov 03, 2022
Zeek 4 cve-2022-21907 Mar 21, 2022
Zeek 4 A Zeek Mach-o File Analyzer Oct 14, 2020
Zeek 4 A Zeek OSPF packet analyzer based on Spicy. Dec 24, 2021
Zeek 4 A Zeek Wireguard protocol analyzer based on Spicy. Jan 29, 2022
Zeek 4 Scripts to define custom http log Jun 20, 2022
Zeek 5 Zeek Modbus Extension Scripts - CISA ICSNPP May 10, 2022
Zeek 5 Zeek Plugin that detects CallStranger (CVE-2020-12695) attempts (http://callstranger.com/) Feb 22, 2022
Zeek 5 A network detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks, Inc BIG-IP devices. Oct 24, 2021
Zeek 5 Add VLAN tags to all Zeek logs Jul 29, 2022
Zeek 5 A Zeek JPEG File Analyzer Aug 06, 2021
Zeek 5 Zeek intel file indicators based on the block-doh by bambenek Jun 10, 2022
Zeek 6 CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI Feb 11, 2022
Zeek 6 LDAP analyzer Apr 27, 2022
    bro-is-darknet
Zeek 7 None Aug 25, 2021
Zeek 7 Zeek DNP3 Extension Scripts - CISA ICSNPP Jun 30, 2022
Zeek 7 Detection of RCE in Oracle's WebLogic Server CVE-2020-14882 / CVE-2020-14750 Jul 13, 2022
Zeek 8 A network detection package for CVE-2020-16898 (Windows TCP/IP Remote Code Execution Vulnerability) Oct 24, 2021
Zeek 10 This demo illustrates how to use Confluent to optimize your Security Information and Event Management … Jun 15, 2022
Zeek 10 Detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 (AKA SIGRed) Jan 14, 2021
Zeek 10 Bro Detection Scripts Aug 05, 2021
Zeek 11 Zeek Ethernet/IP and CIP Parser - CISA ICSNPP May 30, 2022
Zeek 11 A Zeek package that detects Zoom logins and meeting joins Jan 12, 2022
Zeek 11 Top DNS Measurement for Bro Jul 09, 2021
Zeek 11 A Zeek ELF File Analyzer Jan 09, 2022
Zeek 13 A simple way of detecting multithreaded exfiltration in Zeek. Jul 18, 2022
Zeek 13 This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2 Mar 05, 2022
    bro-dumbno-client
Zeek 2 None Jan 11, 2023
Zeek 4 Add geolocation fields to Zeek "conn" logs Apr 12, 2023
Zeek 7 A vulnerability scan detection script for Zeek Jun 11, 2021
Zeek 2 Add more filenames to files.log from HTTP requests Feb 23, 2022
Zeek 2 Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to … Feb 12, 2022
    PetitPotam
Zeek 2 None Jul 08, 2022
Zeek 2 Detection of Linux Malware C2 RedXOR - demonstration Oct 24, 2021
Zeek 2 Clear SSL State earlier to reduce memory usage Apr 28, 2022
    spoofed-traffic
Zeek 2 None Aug 15, 2022
Zeek 3 Zeek Package that extracts features from IRC communication Sep 21, 2020
Zeek 3 reduce amount of tracked smb state Apr 28, 2022
Zeek 3 A Zeek OpenVPN protocol analyzer, based on Spicy. Jan 21, 2022
Zeek 3 Zeek Unit Testing. Provides a framework to write unit tests for Zeek scripts. Oct 24, 2021
    zeek-open-connections
Zeek 3 None Mar 02, 2022
Zeek 14 HTTP Protocol Stack CVE-2021-31166 Jul 07, 2022
    bro-simple-scan
Zeek 15 None Oct 20, 2021