tsharkVM

💡 Update: tshark-opensearch More recent application tshark-opensearch is now available. You can find it in the https://github.com/h21-lab/apps-collection-info repository. 👉 Get Access tshark ELK VM appliance This project builds virtual machine which can be used for analytics of tshark -T ek ndjso...

flare-fakenet-ng

| /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 is a next generation dynamic network analysis tool for malware analysts and...

zeek

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

sharesniffer

sharesniffer sharesniffer は、ローカルネットワーク上のオープンおよびクローズされたファイル共有を検出するためのネットワーク分析ツールです。自動ネットワーク検出と、オープンな cifs および nfs 共有の自動マウント機能を含みます。 使用方法 すべてのローカルネットワーク上でオープン/クローズされた nfs/smb 共有を持つホストを検出する例: python sharesniffer.py 192.168.56.0/24 ネットワーク内のすべてのホストを、可能性のあるルーター/ファイアウォールを除外して検出し、オープンな nfs/smb 共有を /mnt...

babyshark

babyshark Wireshark made easy in your terminal. Babyshark is a PCAP TUI that helps you answer: What’s using the network? What looks broken/weird? What should I select next? Status: v0.3.0 alpha. Offline .pcap / .pcapng viewing works without Wireshark Live capture requires tshark Wireshark CLI...

what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ SYSTEM ANALYSIS TOOL // BROWSER FINGERPRINT DEMO What You Reveal is a privacy analysis tool designed to show exactly what information your browser exposes to websites. It...

arkime

Arkime Arkimeは大規模なオープンソースのネットワーク解析およびパケットキャプチャシステムです。...

birdy-edwards

BIRDY-EDWARDS 2.0 Infiltrate & Expose Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama. AI-powered Facebook SOCMINT platform — 100% local, zero cloud dependency. For lite version check this repo click...

ettercap

中間者攻撃のためのスイート Copyright 2001-Current The Ettercap Dev Team はじめに Ettercapは、中間者攻撃のための包括的なスイートです。 ライブ接続のスニッフィング、オンザフライのコンテンツフィルタリング、その他多くの興味深いトリックを備えています。 多くのプロトコルのアクティブおよびパッシブ解析をサポートし、ネットワークおよびホスト分析のための多くの機能を含んでいます。 !NOTE ある英国の大学での研究によると、単語内の文字の順序は重要ではなく、 最初と最後の文字が正しい位置にあれば、残りはどんな順序でも...

usn_analytics

USN Analytics Build git clone https://github.com/4n6ist/usnanalytics.git Linux sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make Windows Install MinGW-W64...

Network-Analysis-Tools

Pcap Capture File Analysis Toolv.1 !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Pack...

CVE-2023-4220

autopwn...

evillcode

🔥 Evillcode - Modular MITM Framework Modular cybersecurity framework developed in Python for analysis, monitoring, and simulation of MITM attacks in local networks. It allows students and professionals to understand the inner workings of networks, protocols, and vulnerabilities in controlled...

zeek-elf

A Zeek ELF Package This package implements: ELF TLDR! If you have zkg and you have already run... zkg autoconfig ... then you can install this package as so: sudo zkg install zeek-elf Now in any Zeek script, just load the plugin and it "just works": @load Zeek/ELF New events for this plugin are...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

trippy

Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues. Quick Start See the getting started guide. Install Trippy runs on Linux, BSD, macOS, and Windows. It can be installed from most package managers, precompiled binaries, or...

SpectralCovert

📡 SpectralCovert -brightgreen.svg Deterministic Cryptographic Network Covert Channel & Shannon Entropy Leak Detector Developed by Çınar @prox0959 Academic Grade | Zero External Dependencies | Sub-Millisecond Analysis 🔬 Overview & Problem Statement Modern firewalls, deep packet inspection DPI...

PCAPdroid v2.0.1

PCAPdroid PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more! PCAPdroid simulates a VPN in order to...

TCPViewer v1.14.0

TCP Viewer A simple, native packet viewer for Mac. Website · Download · Docs · Releases TCP Viewer captures and reads network packets on macOS. It uses system libpcap for capture and Wireshark libraries for deep packet details. Features Native macOS app, built with AppKit Built on top of Wireshar...