brook

by txthinking

15.0Kstars

2.4Kforks

459watchers

Updated 5 months ago

About

Brook is a cross-platform programmable network tool designed for flexible network monitoring, firewall management, and security automation.

A cross-platform programmable network tool

Primary Use Case

Brook is primarily used by network administrators and security professionals to monitor network traffic, manage firewall rules, and automate security tasks across multiple platforms. It supports various operating systems and devices, making it suitable for diverse network environments requiring programmable and customizable network security solutions.

Key Features

Cross-platform support including iOS, Android, macOS, Windows, Linux, and OpenWrt
Programmable network tool enabling customization via scripting
Network monitoring capabilities
Firewall management
Security automation
Easy installation via scripts and package managers
Multiple client applications for different platforms
Support for server and client modes

Installation

Run server installation script: bash <(curl https://bash.ooo/nami.sh)
Install Brook using nami: nami install brook
Download client apps from official links for iOS, Android, macOS, Windows, Linux, and OpenWrt
Refer to platform-specific installation guides linked in the README for detailed steps

Usage

>_ brook server -l :9999 -p hello

Starts the Brook server listening on port 9999 with password 'hello'

>_ nami install brook

Installs Brook using the nami package manager

>_ bash <(curl https://bash.ooo/nami.sh)

Runs the installation script for nami, a package manager used to install Brook

>_ brook link

Customizes parameters for Brook usage

Security Frameworks

Discovery

Defense Evasion

Collection

Execution

Persistence

Usage Insights

Leverage Brook's scripting capabilities to automate network reconnaissance and firewall rule adjustments during red team engagements.
Integrate Brook with SIEM solutions to enhance real-time network traffic visibility and anomaly detection for blue teams.
Use Brook's cross-platform support to maintain consistent network monitoring and security automation across diverse environments.
Develop custom scripts in Brook to simulate adversary network behaviors for purple team exercises, improving detection and response.
Deploy Brook on edge devices like OpenWrt routers to extend network visibility and enforce firewall policies closer to endpoints.