ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-22 04:06:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added Suricata and DNSdumpster rools

Browse Source 
Suricata is a Bro/Zeek alternative that acts as an IDS/IPS. DNSdumpster is a tool that I use regularly for domain recon. Also, I fixed a typo under tcpick from "Trach" to "Track and reassamble" Thanks!
This commit is contained in:
actualmermaid 2021-10-18 10:33:24 -07:00 committed by GitHub
parent 8421117304
commit d1285b794a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -369,6 +369,7 @@ executables.
much metadata as possible for a website and to assess its good standing. much metadata as possible for a website and to assess its good standing.
* [Dig](https://networking.ringofsaturn.com/) - Free online dig and other * [Dig](https://networking.ringofsaturn.com/) - Free online dig and other
network tools. network tools.
* [DNSdumpster](https://dnsdumpster.com/) - Online tool to lookup DNS records.
* [dnstwist](https://github.com/elceef/dnstwist) - Domain name permutation * [dnstwist](https://github.com/elceef/dnstwist) - Domain name permutation
engine for detecting typo squatting, phishing and corporate espionage. engine for detecting typo squatting, phishing and corporate espionage.
* [IPinfo](https://github.com/hiddenillusion/IPinfo) - Gather information * [IPinfo](https://github.com/hiddenillusion/IPinfo) - Gather information
@ -704,8 +705,9 @@ the [browser malware](#browser-malware) section.*
designed to analyze a web-based network traffic to detect central command designed to analyze a web-based network traffic to detect central command
and control (C&C) servers and malicious sites, using Squid proxy server and and control (C&C) servers and malicious sites, using Squid proxy server and
Spamhaus. Spamhaus.
* [Suricata](https://suricata.io/) - A deep packet inspector and pattern matching IDS/IPS.
* [Tcpdump](http://www.tcpdump.org/) - Collect network traffic. * [Tcpdump](http://www.tcpdump.org/) - Collect network traffic.
* [tcpick](http://tcpick.sourceforge.net/) - Trach and reassemble TCP streams * [tcpick](http://tcpick.sourceforge.net/) - Track and reassemble TCP streams
from network traffic. from network traffic.
* [tcpxtract](http://tcpxtract.sourceforge.net/) - Extract files from network * [tcpxtract](http://tcpxtract.sourceforge.net/) - Extract files from network
traffic. traffic.