All Projects → amzn → Zeek Plugin Enip

amzn / Zeek Plugin Enip

Licence: bsd-3-clause
Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards

Projects that are alternatives of or similar to Zeek Plugin Enip

Torbot
Dark Web OSINT Tool
Stars: ✭ 821 (+2940.74%)
Mutual labels:  security-tools
Subdomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
Stars: ✭ 915 (+3288.89%)
Mutual labels:  security-tools
Trivy
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues
Stars: ✭ 9,673 (+35725.93%)
Mutual labels:  security-tools
Marsnake
System Optimizer and Monitoring, Security Auditing, Vulnerability scanner for Linux, macOS, and UNIX-based systems
Stars: ✭ 16 (-40.74%)
Mutual labels:  security-tools
Xattacker
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
Stars: ✭ 897 (+3222.22%)
Mutual labels:  security-tools
Ylva
Command line password manager for Unix-like operating systems
Stars: ✭ 23 (-14.81%)
Mutual labels:  security-tools
Thug
Python low-interaction honeyclient
Stars: ✭ 818 (+2929.63%)
Mutual labels:  security-tools
Hacking With Golang
Golang安全资源合集
Stars: ✭ 876 (+3144.44%)
Mutual labels:  security-tools
Security Checklist
A checklist for staying safe on the internet
Stars: ✭ 908 (+3262.96%)
Mutual labels:  security-tools
Dotenv sekrets
Seamlessly encrypt/decrypt/edit your rails Dotenv files with the help of the Sekrets gem
Stars: ✭ 25 (-7.41%)
Mutual labels:  security-tools
Deprecated Patrol Rules Aws
A set of functions implemented using lambda-cfn to monitor an organization's AWS infrastructure for best practices, security and compliance.
Stars: ✭ 16 (-40.74%)
Mutual labels:  security-tools
Secretscanner
Find secrets and passwords in container images and file systems
Stars: ✭ 895 (+3214.81%)
Mutual labels:  security-tools
Csp
The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing confidence and trust among the national Computer Security Incident Response Teams (CSIRTs) of the Member States and for promoting swift and effective operational cooperation.
Stars: ✭ 23 (-14.81%)
Mutual labels:  security-tools
Vivalasvenus
@viva_las_venus -- This project is to learn, teach and awareness about privacy and security in the digital life, to build a better, more open and more inclusive world together!
Stars: ✭ 16 (-40.74%)
Mutual labels:  security-tools
Golang Tls
Simple Golang HTTPS/TLS Examples
Stars: ✭ 857 (+3074.07%)
Mutual labels:  security-tools
Brutedet
Generalized proof of concept tool which can be used for drop-in bruteforce protection when needed.
Stars: ✭ 5 (-81.48%)
Mutual labels:  security-tools
Kaudit
Alcide Kubernetes Audit Log Analyzer - Alcide kAudit
Stars: ✭ 23 (-14.81%)
Mutual labels:  security-tools
Sipcheck
SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user (or bot) try to register o make calls using wrong passwords.
Stars: ✭ 20 (-25.93%)
Mutual labels:  security-tools
Myassets
Custom filters and other resources to use with uBlock Origin and uMatrix.
Stars: ✭ 12 (-55.56%)
Mutual labels:  security-tools
Changeme
A default credential scanner.
Stars: ✭ 928 (+3337.04%)
Mutual labels:  security-tools

Zeek Plugin ENIP

When running as part of your Zeek installation this plugin will produce three log files containing metadata extracted from any Ethernet/IP (ENIP) and Common Industrial Protocol (CIP) traffic observed on UDP port 2222 and port 44818 TCP/UDP. Ethernet/IP and CIP are often observed together. cip.log and enip.log contain metadata from their respective protocols while enip_list_identity.log contains addtional data extracted from specific ENIP messages relating to device identity.

Installation and Usage

zeek-plugin-enip is distributed as a Zeek package and is compatible with the zkg command line tool.

Sharing and Contributing

This code is made available under the BSD-3-Clause license. Guidelines for contributing are available as well as a pull request template. A Dockerfile has been included in the repository to assist with setting up an environment for testing any changes to the plugin.

Acknowledgements

Related Work

  • ICSNPP-ENIP - Another ENIP/CIP plugin implementation for Zeek
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].