pacmap

pacmap PacMap 是一个以图为首的网络流量可视化工具，支持实时捕获和 PCAP 回放，帮助您查看发生了什么变化、哪些是噪声以及下一步应检查什么。 可以将其视为网络行为的 Git：快照、差异比较并以可视方式回放网络状态。 输入模式 PacMap 支持两种工作流程： 实时捕获 — 检查本地接口上当前发生的情况。 回放 PCAP — 上传已保存的 .pcap 或 .pcapng 文件，并回放随时间变化的报文流。 安装 从仓库根目录： python3 -m venv venv source venv/bin/activate pip install websockets scapy n...

mutiny-fuzzer

快速入门：Mutiny 教程 博客文章地址： http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html 此 YouTube 视频演示链接： https://www.youtube.com/watch?v=FZyR6MgJCUs 更多面向模糊测试活动/反馈/测试工具的功能： https://github.com/Cisco-Talos/mutiny-fuzzer/tree/experiment Mutiny Fuzzing Framework Mutiny Fuzzing...

CapTipper

CapTipper v0.3 CapTipper v0.3：http://www.omriher.com/2015/08/captipper-v03-is-out.html CapTipper v0.2：http://www.omriher.com/2015/03/captipper-02-released.html CapTipper v0.1：http://www.omriher.com/2015/01/captipper-malicious-http-traffic.html CapTipper 是一款用于分析、探索和重建恶意HTTP流量的Python工具。 CapTipper...

Mutiny Fuzzing Framework

The Mutiny Fuzzing Framework is a network fuzzer that operates by replaying PCAPs through a mutational fuzzer. The goal is to begin network fuzzing as quickly as possible, at the expense of being thorough. The general workflow for Mutiny is to take a sample of legitimate traffic, such as a browse...

DEBIAN-CVE-2018-1046

pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overfl...

IDS IPS Testing Framework: pytbull

pytbull is an Intrusion Detection/Prevention System IDS/IPS Testing Framework for Snort, Suricata and any IDS/IPS that generates an alert file. It can be used to test the detection and blocking capabilities of an IDS/IPS, to compare IDS/IPS, to compare configuration modifications and to...