This is a proof of concept. A tool developed at Universidad Tecnologica Nacional (Argentina).
It detects attacks and it responses with isolation attacks. It's supposed to be on the same network of the protected hosts. It must be capable to see all the traffic. It's a basic IPS with a self defense module. So it can prevents future attacks from the same hosts, which is identified by its mac address.

Features

  • detects scans TCP: fin, syn, xmas, null, ack
  • detects scans by analyzing timming
  • detects MiTM attacks: arp poisoning
  • detects malfomred packets: IP y Ethernet
  • detects NOPS in protocolos FTP fileds USER and PASS
  • responses an attackers with arp poisoning
  • possibility of enable the "attack the attacker"
  • choosing between atacks that can be detected
  • NIC can be chosen for sniffing and attacking

Project Activity

See All Activity >

Follow sape

sape Web Site

Other Useful Business Software
Build Agents and Models on One Platform Icon
Build Agents and Models on One Platform

Everything you need to build production-ready agents and models. Access 200+ Google and third-party AI models and tools.

Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
Try It Free
Rate This Project
Login To Rate This Project

User Ratings

★★★★★
★★★★
★★★
★★
1
0
0
0
0
ease 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5
features 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5
design 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5
support 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 5 / 5

User Reviews

  • Great engine for starting filters and actions
Read more reviews >

Additional Project Details

Registered

2012-11-07