01
Network Security
Network security involves protecting the usability, reliability, integrity, and safety of network infrastructure. This section covers various network-based threats, their detection methods, and prevention strategies.
4 topics, 14 scripts
DDoS (Distributed Denial of Service) Attacks
Not reviewedA Distributed Denial of Service (DDoS) attack attempts to make an online service unavailable by overwhelming it with traffic from multiple sources. Attackers use botnets—networks of compromised devices—to generate massive amounts of requests.
4 scriptsNot yet reviewedDNS Spoofing and Cache Poisoning
DraftDNS spoofing makes a victim's resolver or device accept a forged DNS answer, so a real name such as your bank's domain leads to an attacker's server. The attacker can then show a look-alike site, read traffic, or block updates.
- T1557
2 scriptsReviewed Oct 11, 2026Man-in-the-Middle (MITM) Attacks
Not reviewedA Man-in-the-Middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters the communication between two parties who believe they are directly communicating with each other.
4 scriptsNot yet reviewedPort Scanning
Not reviewedPort scanning is the process of probing a server or host for open ports. While network administrators use port scanning to verify security policies, attackers use it as a reconnaissance technique to identify potential entry points into a system.
4 scriptsNot yet reviewed
Read the full category guide
Overview
Network security involves protecting the usability, reliability, integrity, and safety of network infrastructure. This section covers various network-based threats, their detection methods, and prevention strategies.
Categories Covered
- DDoS Attacks
- Man-in-the-Middle (MITM)
- Port Scanning
- DNS Spoofing
- ARP Poisoning (planned)
Common Network Threats
| Threat | Description | Risk Level |
|---|---|---|
| DDoS | Overwhelming resources with traffic | High |
| MITM | Intercepting communication | Critical |
| Port Scanning | Reconnaissance for vulnerabilities | Medium |
| DNS Spoofing | Redirecting to malicious sites | High |
| ARP Poisoning | Manipulating network mappings | Critical |
Quick Start
# Navigate to specific threat directory
cd ddos-attacks/detection/
# Run detection scripts with appropriate permissions
sudo python3 ddos_detection.py --interface eth0
# Check prevention examples
cd ../prevention/
python3 rate_limiting.py --helpNetwork Monitoring Tools
Wireshark/TShark - Packet analysis
Snort/Suricata - IDS/IPS
ntopng - Network traffic monitoring
Nagios - Infrastructure monitoring
Important Notes
Some scripts require root/administrator privileges
Always test in isolated environments first
Monitor performance impact of detection scripts
Combine multiple detection methods for accuracy
Additional Resources
Source folder: 01-network-security