# Announcing an Unofficial Bro Script Repository **URL:** \ **Category:** Zeek\ **Created:** [August 10, 2012, 5:22pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399 "2012-08-10T17:22:17Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Vlad\_Grigorescu2](https://avatars.discourse-cdn.com/v4/letter/v/c4cdca/32.png) [@Vlad\_Grigorescu2](https://community.zeek.org/u/Vlad_Grigorescu2)\ **Post date:** [August 10, 2012, 5:22pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/1 "2012-08-10T17:22:17Z")
Hello, Following up on some ideas from the Exchange, I've created an unofficial git repository for community submitted Bro scripts. \<[https://github.com/grigorescu/bro-scripts](https://github.com/grigorescu/bro-scripts)\> If you have any scripts that you'd like to share with the community, please fork this repo, add your script, and submit a pull request. I know that there are many scripts floating around out there, and I think everyone would be interested to see what others are doing. Currently, I'll be reviewing all submitted scripts for security vulnerabilities (strictly in regards to not exfiltrating your sensitive Bro data, not introducing new, sensitive data in your logs unless it's clearly documented, that sort of thing). Obviously, none of these scripts come with any sort of guarantee - however, if you encounter a broken script, you can always fix it and push it back! Please also keep in mind that this is really a temporary solution until a better script repository system is designed. Feel free to let me know any comments or questions that you may have, or if you can think of a better way to implement this. Thanks,   --Vlad ---
**Author:** ![Martin\_Holste](https://avatars.discourse-cdn.com/v4/letter/m/dc4da7/32.png) [@Martin\_Holste](https://community.zeek.org/u/Martin_Holste)\ **Post date:** [August 10, 2012, 5:37pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/2 "2012-08-10T17:37:58Z")
Nice! http-exe-bad-attributes.bro alone is worth checking out. Thanks! ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [August 10, 2012, 5:39pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/3 "2012-08-10T17:39:23Z")
Thanks Vlad! Looking forward to some organization and general cleanup.   .Seth ---
**Author:** ![Azoff\_Justin](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Azoff\_Justin](https://community.zeek.org/u/Azoff_Justin)\ **Post date:** [August 10, 2012, 5:54pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/4 "2012-08-10T17:54:27Z")
I have a bunch of other ones that could be included(after some cleanups) here: [https://github.com/justinazoff/bro\_scripts/tree/2.0](https://github.com/justinazoff/bro_scripts/tree/2.0)     active-hosts-metrics.bro     rogue-access-points.bro     log-external-dns.bro are useful. I want to update log-external-dns to cache the result of lookup\_addr and have another notice type/flag when it doesn't resolve. After running it for a while I've found that external dns servers without PTR records are almost always the really nasty ones. ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [August 10, 2012, 6:46pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/5 "2012-08-10T18:46:19Z")
FYI, I think that some of these scripts may require a special branch of bro with extensions to the metrics framework that aren't going to show up until 2.2. Do any of these scripts you pointed out require that branch Justin?   .Seth ---
**Author:** ![Azoff\_Justin](https://avatars.discourse-cdn.com/v4/letter/a/5fc32e/32.png) [@Azoff\_Justin](https://community.zeek.org/u/Azoff_Justin)\ **Post date:** [August 10, 2012, 7:00pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/6 "2012-08-10T19:00:26Z")
active-hosts-metrics.bro does, and most of the other metrics scripts in that repo. ---
**Author:** ![Matthias\_Vallentin1](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/matthias_vallentin1/32/596_2.png) [@Matthias\_Vallentin1](https://community.zeek.org/u/Matthias_Vallentin1)\ **Post date:** [August 11, 2012, 5:16am UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/7 "2012-08-11T05:16:43Z")
> Please also keep in mind that this is really a temporary solution until a better script repository system is designed. Good to see you're approaching this still actively. We're at a point where having the BPAN would significantly help bootstrapping community efforts like yours. Also, there is already a concrete propsal of how this could look like:     [http://www.bro-ids.org/development/projects/cban.html](http://www.bro-ids.org/development/projects/cban.html) Any feedback on this would be highly valuable, so that we can go ahead and incorporate into the design.     Matthias (For completeness, here's my assorted Bro script repository: [GitHub - mavam/brospects: Experimental Bro scripts with good prospects for the official bro-scripts repository.](https://github.com/mavam/brospects)) ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:40pm UTC](https://community.zeek.org/t/announcing-an-unofficial-bro-script-repository/2399/8 "2022-05-06T15:40:30Z")