flare-fakenet-ng

root@kitploit: | /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 是面向恶意软件分析人员和渗透测试人员的下一代动态网络分析工具。它是开源的，专为最新版本的 Windows（以及...

ettercap

用于中间人攻击的套件 版权所有 2001-至今 Ettercap 开发团队 简介 Ettercap 是一个用于中间人攻击的全面套件。 它具备实时连接嗅探、在线内容过滤以及许多其他有趣的技巧。 它支持对多种协议进行主动和被动解析，并包含许多网络和主机分析功能。 !NOTE 根据一项牛津大学的研究，单词中字母的顺序并不重要，唯一重要的是第一个和最后一个字母在正确的位置上。其余字母可以完全混乱，你仍然可以毫无困难地阅读。这是因为我们不会逐个字母地阅读单词，而是将单词作为一个整体来理解，大脑会自动识别出单词。...

zeek

The Zeek Network Security Monitor...

arkime

Arkime Arkime es un sistema de análisis de red y captura de paquetes de código abierto a gran escala. Arkime aumenta tu infraestructura de seguridad actual para almacenar e indexar el tráfico de red en formato PCAP estándar, proporcionando acceso indexado rápido. Se proporciona una interfaz web...

evillcode

🔥 Evillcode - 模块化MITM框架 用Python开发的模块化网络安全框架，用于本地网络中的分析、监控和MITM攻击模拟。它使学生和专业人士能够理解网络、协议和受控环境中的漏洞的内部工作原理。 📌 描述 Evillcode是一个模块化框架，可实现： 网络扫描和活跃设备发现 识别IP、MAC地址和主机名 网络持续监控 MITM（中间人）攻击模拟 HTTP流量抓取以寻找凭据（受控环境） 采用面向网络安全和网络实践学习的方法设计。 🧩 框架模块 🔍 Scanner：发现网络中的设备 🧠 Resolver：识别主机名和MAC地址 ⚡ MITM Engine：ARP欺骗 📥...

tsharkVM

💡 更新：tshark-opensearch 最新应用 tshark-opensearch 现已可用。 您可以在 https://github.com/h21-lab/apps-collection-info 仓库中找到它。 👉 获取访问权限 tshark ELK 虚拟机设备 该项目构建了一台可用于分析 tshark -T ek ndjson 输出的虚拟机。 该虚拟设备使用 vagrant 构建，构建的 Debian 系统预装了 ELK 栈并已配置完成。 VM 启动后，流程很简单： 解码后的 pcap 文件（tshark -T ek 输出 / ndjson）通过 TCP/17570 发送...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. "HASSH" is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of an MD5 fingerprint. HASSH was invented at...

Network-Analysis-Tools

Herramienta de Análisis de Archivos de Captura Pcap v.1 root@kitploit: !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Características root@kitploit: 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode...

usn_analytics

USN Analytics 构建 root@kitploit: git clone https://github.com/4n6ist/usnanalytics.git Linux root@kitploit: sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make Windows 安...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

babyshark

babyshark 让 Wireshark 变得更简单（在终端里）。 Babyshark 是一个 PCAP TUI，帮助你回答： 什么在使用网络？ 什么看起来坏了/奇怪？ 接下来应该选择什么？ 状态： v0.3.0（alpha）。 离线 .pcap / .pcapng 查看无需 Wireshark 实时捕获需要 tshark（Wireshark 命令行工具） 概览 概览是“从这里开始”的仪表板。 它总结捕获数据并建议下一步操作。 显示快速总计（数据包/流）、流量混合以及“热门”表格（端口/主机/流）。 在实时模式下，显示捕获状态（pps + 来自 tshark 的最后状态/错误行）。...

what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ 系统分析工具 // 浏览器指纹演示 你所泄露的信息 是一款隐私分析工具，旨在准确展示你的浏览器向网站暴露了哪些信息。它采用复古终端美学设计，并提供基于透明度的可靠指标。 安装 root@kitploit: 克隆仓库 git clone https://github.com/saatvik333/what-you-reveal.git 安装依赖 bun...

DEBIAN-CVE-2026-76881

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

The vulnerability of the ROHC analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the ROHC analyzer in Wireshark, which is responsible for analyzing network traffic, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...

Pentest-Home-Lab

Pentest Home Lab A personal cybersecurity home lab for practi...

Kali-setup

🛠️ kali-setup A single bash script that pulls in the 20 most-...

Zeek 8.0.8

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

SNF - Shadow Network Fingerprinting Engine

SNF Shadow Network Fingerprinting Engine is a 100% offline, air-gap-native passive network intelligence engine written entirely in Rust. It was designed from the ground up for environments where outbound connectivity is not just unavailable but prohibited: classified defense networks, nuclear...

[SECURITY] Fedora 44 Update: tcpflow-1.6.2-0.1.8d47b53.fc44

tcpflow is a program that captures data transmitted as part of TCP connections flows, and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being...

Zeek 8.0.7

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...