Thomas Patzke

An ELK environment containing interesting security datasets.

The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

NFC card reader Android app. Currently reads the german GeldKarte and some credit cards.

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

Logstash Configuration for Linux Logs (Authentication, Apache, Mail)

PoC implementation of the POODLE attack

An Elasticsearch QUEry Language

Burp plugin which supports in finding privilege escalation vulnerabilities

Elasticsearch/Kibana environment and log data for Sigma workshop

Clickjacking Proof-of-Concept Exploit

Collection of scanner checks missing in Burp

Broken web app intentionally built with pentesting obstacles

Re-play Adversarial Techniques

Crash browsers with opensource test suites

Workshop "Operationalization of Sigma Rules with Processing Pipelines"

A curated list of awesome threat detection and hunting resources

DFIRTrack - The Incident Response Tracking Application

Demonstration of some client-side web application vulnerabilities (DOM XSS, Clickjacking) and wrong usage of local storage.

The Hunting ELK

Framework for building multistep CSRF Proof of Concepts

Randomize parts of requests with a session handling rule action.

Jupyter notebooks for threat hunting and incident response

Implementation of the hash extension attack

CyCAT.org taxonomies

A toolset to make a system look as if it was the victim of an APT attack

Logstash configuration and grok patterns for parsing postfix logging

Detection Engineering with Sigma workshop (2025)

A standalone check for the POODLE vulnerability based on the PolarSSL library.

Testing TLS/SSL encryption

Build your Own Twitter Filter Bubble with Deep Learning

HTTP file upload scanner for Burp Proxy

Definition, description and relationship types of MISP objects

Logstash patterns and config for postfix, cbpolicyd and spamd.

The Intelligent Process Lifecycle of Active Cyber Defenders

Script collection that makes my photos searchable

Import Windows Eventlogs(.evtx) to ElasticSearch.

Some tiny programs I coded for Atmel AVR microcontrollers. Sense&pointless, but possibly useful for someone.

Blind Cross-site Scripting Collector and Manager

Drop, Extract, Suppress based on certain ASA codes in lookup tables

Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professionals and enthusiasts to improve the quality and reliability of detection rules.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Currently empty page for verification purposes

Online hash checker for Virustotal and other services

Yubico Pluggable Authentication Module (PAM)

No description.