mitm-detection

Firefox addon for a Man In The Middle detection

An advanced network security tool for real-time ARP spoofing detection and network scanning. Built with Scapy for robust packet sniffing, network reconnaissance, and threat mitigation in LAN environments.

Exploit-development ladder — build a locally compiled vulnerable ELF and walk stack-overflow exploitation: De Bruijn patterns, PTRACE crash tracing, offset discovery, ROP gadget scanning, and ret2win PoC proof.

Deterministic mutation-based protocol fuzzer for embedded IoT protocols — MQTT, CoAP, HTTP, and binary frames — with crash tracking, dedup, and triage reports for authorized security testing.

Detection-only (blue team) network intrusion detection system — rules engine for port-scan, brute-force, C2-beacon, and exfiltration detection with live capture, pcap replay, and deterministic offline simulation.

Detection engine suite - signature NIDS, ML flow-anomaly, kernel-watch, MITM detectors, SIEM-lite correlation, JSON alert API.

Honeypot stack - multi-service decoys with session capture and attacker-playbook replay.

ML malware classifier - feature-based sample classification with explainability reports.

Lab-only MITM and spoofing suite — ARP spoof, DNS spoof, HTTP credential capture, https-split, passive monitor, guaranteed restore, dry-run by default.

Linux kernel and system activity monitor for detection research: process/network/file/syscall collectors, MITRE-mapped anomaly flags, optional eBPF backends, offline self-test.

ML-powered SIEM lite - anomaly-detection correlation over normalized event streams.

Hacking toolkit collection - consolidated offensive utilities for labs and education.

MITM detection probes — ARP/DNS/HTTP anomalies that reveal interception on a network.

Binary recon suite - strings, sections, packers and embedded artifacts for RE triage.

CTF challenge kit - pwn/crypto/web/reversing challenge builders and solve helpers.

Firefox addon for a Man In The Middle detection

Enhanced TLS indicator with an emphasis on information about the Root Certificate Authority from which the connection's authenticity is derived

A Python-based Network Intrusion Detection System that detects: • Man-in-the-Middle attacks • ARP spoofing • Port scanning • Suspicious UDP traffic • ICMP activity Includes a real-time GUI dashboard and Docker CLI mode.

I built this Project in Cybermania of Jetking 2022 that Detect MITM Attack and also gives you the Solutions.

Defensive Bash utility for detecting suspicious gateway MAC changes and ARP spoofing indicators on Linux networks.