Download
This is a proof of concept. A tool developed at Universidad Tecnologica Nacional (Argentina).
It detects attacks and it responses with isolation attacks. It's supposed to be on the same network of the protected hosts. It must be capable to see all the traffic. It's a basic IPS with a self defense module. So it can prevents future attacks from the same hosts, which is identified by its mac address.
Features
- detects scans TCP: fin, syn, xmas, null, ack
- detects scans by analyzing timming
- detects MiTM attacks: arp poisoning
- detects malfomred packets: IP y Ethernet
- detects NOPS in protocolos FTP fileds USER and PASS
- responses an attackers with arp poisoning
- possibility of enable the "attack the attacker"
- choosing between atacks that can be detected
- NIC can be chosen for sniffing and attacking
Categories
MiTM (Man-in-The-Middle) AttackFollow sape
Other Useful Business Software
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Rate This Project
Login To Rate This Project
User Reviews
-
Great engine for starting filters and actions
