9.10. 运维

9.10.1. 流量

• Bro

• Moloch Large scale, open source, indexed packet capture and search

• TCPFlow

• TCPDump

• WireShark

• Argus

• PcapPlusPlus

• ngrep

• cisco joy A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

9.10.2. 堡垒机

• jumpserver

• CrazyEye

• GateOne

9.10.3. 蜜罐

• Dionaea

• Modern Honey Network

• Cowrie SSH/Telnet蜜罐

• honeything IoT蜜罐

• ConPot 工控设施蜜罐

• MongoDB HoneyProxy

• ElasticHoney

• DCEPT

• Canarytokens

• Honeydrive

• T-Pot

• opencanary

• HFish

9.10.4. VPN Install

• pptp

• ipsec

• openvpn

9.10.5. 隧道 / 代理

• ngrok

• rtcp

• Tunna

• gost GO Simple Tunnel

• reDuh Create a TCP circuit through validly formed HTTP requests

• reGeorg pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn

• Neo-reGeorg Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

• ABPTTS TCP tunneling over HTTP/HTTPS for web application servers

9.10.6. 漏洞管理

• SRCMS

9.10.7. 风控

• nebula

• Liudao

• aswan

9.10.8. SIEM

• metron

• MozDef