qeeqbox Goto Github PK

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

horizontal-privilege-escalation

A threat actor may perform unauthorized functions belonging to another user with a similar privileges level

ics-visualizer

ICS-Visualizer is an interactive Industrial Control Systems (ICS) network graph that contains up-to-date related automation protocols metadata (Name, company, port, user manuals, external links, and mapped wireshark\namp modules and scripts).

icterid-template

Icterid Webapp Template

identity-and-access-management

The practice of ensuring that people or objects have the right level of access to assets

image-analyzer

Interface for Image-Related Deep Learning Models (E.g. NSFW, MAYBE and SFW)

incident-response

Incident response is a set of steps that are used to handle the aftermath of a data breach or cyberattack

ixora

Internal package for visualization

minimal-server

Asyncio websocket http server [Needed for internal testing]

mitre-visualizer

🧬 Mitre Interactive Network Graph (APTs, Malware, Tools, Techniques & Tactics)

mobile-numbers-metadata

JSON file contains all mobile number metadata (Country, prefix, and carrier)

nginx-reverse-proxy

Nginx reverse proxy for testing

octopus

Pure Honeypots with an automated bash script

osint

Build custom OSINT tools and APIs (Ping, Traceroute, Scans, Archives, DNS, Scrape, Whois, Metadata & built-in database for more info) with this python package

oxen-template

Tasker for internal projects

password-spraying

A threat actor may guess the target credentials using a single password with a large set of usernames against the target

pentest-labs

ports-metadata

JSON file contains all ports metadata

private-ip-metadata

JSON file contains all private ip ranges with description

proxy-firewall

HTTPS Proxy Firewall for testing

public-ip-metadata

JSON file contains all public ip ranges with description

raven

Advanced Cyber Threat Map (Simplified, customizable, responsive and optimized)

reflected-cross-site-scripting

A threat actor may inject malicious content into HTTP requests. The content will be reflected in the HTTP response and executed in the victim's browser

reports

Recent cyber attacks reports & interesting analysis files

rhino

Agile Sandbox for analyzing Windows, Linux and macOS malware and execution behaviors

risk-management

Risk management is the process of identifying, assessing, treating, and monitoring any negative events that affect a company's ability to operate (Preventing them or minimizing their harmful impact)

seahorse

ELKFH - Elastic, Logstash, Kibana, Filebeat and Honeypot (HTTP, HTTPS, SSH, RDP, VNC, Redis, MySQL, MONGO, SMB, LDAP)

security-controls

Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)

server-side-template-injection

A threat actor may alter the template syntax on the vulnerable target to execute commands

session-fixation

A threat actor may trick a user into using a known session identifier to log in. after logging in, the session identifier is used to gain access to the user's account