misp-wireshark

misp-wireshark misp-wireshark is a Lua plugin intended to help analysts extract data from Wireshark and convert it into the MISP Core format Usage Wireshark 1. Go to Tools located in Wireshark's top bar and click on MISP: Export to MISP format 2. Enter the export options to configure the behavior...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

TCPViewer

TCP Viewer A simple, native packet viewer for Mac. Website · Download · Docs · Releases TCP Viewer captures and reads network packets on macOS. It uses system libpcap for capture and Wireshark libraries for deep packet details. Features Native macOS app, built with AppKit Built on top of Wireshar...

pyshark

pyshark Python wrapper for tshark, allowing python packet parsing using wireshark dissectors. Extended documentation: http://kiminewt.github.io/pyshark Looking for contributors - for various reasons I have a hard time finding time to maintain and enhance the package at the moment. Any...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

DNS-Poisoning-Triage-Lab

DNS and ARP Traffic Triage Lab An educational packet-analysis and resolver-hardening exercise completed on an Arch Linux workstation. Scope: This repository is a learning project. The included capture is useful for practicing DNS and ARP inspection, but it does not by itself prove a live...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

mtproto-dissector

Telegram Protocol Dissector This is a Wireshark dissector that helps you understand the Telegram traffic around you. It dissects the Telegram packets it sees according to the MTProto 2.0 Protocol. Features Supported transport protocols: Abridged, Full, Intermediate, HTTP Supports de-obfuscation...

KNX-Bus-Dump

KNX Bus Dump KNX is a popular building automation protocol and is used to interconnect sensors, actuators and other components of a smart building together. Our KNX Bus Dump tool uses the Calimero java library, which we contributed to for the sake of this tool, to record the telegrams sent over a...

icebox

IceBox Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process kernel or user. It's based on project Winbagility. Files which might be helpful: INSTALL.md: how to install icebox. BUILD.md: how to build icebox. Demo Project Organisation fdp: Fas...

pyshark-legacy

pyshark This repository is for the legacy version of pyshark, which works on Python2.7+. It only receives bugfixes after version 0.3.8. For the new version that's only supported on Python 3.5+, please use themain repo Python wrapper for tshark, allowing python packet parsing using wireshark...

pastokrapacefleciks

pastokrapacefleciks, the WireShark - PRO analyzer Usage: Put your .pcapng file into the directory of pastokrapacefleciks python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Check your HTML report...

Wireshark

General Information Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as packet capture and filtering libraries. The Wireshark...

etl2pcapng

About This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method WinPcap, which was included with older versions of Wireshark, these inbox tools should be preferred. Windows has several inbox components...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

SharkMCP

SharkMCP An MCP server that exposes sharkd — Wireshark's programmatic interface — as a set of tools for LLMs. Load PCAP/PCAPNG files and analyse them with natural language. Requirements Python 3.10+ Wireshark provides sharkd Installation git clone https://github.com/weirdmachine64/sharkmcp.git cd...

Sniffle

Sniffle Sniffle is a sniffer for Bluetooth 5 and 4.x LE using TI CC1352/CC26x2 hardware. Sniffle has a number of useful features, including: Support for BT5/4.2 extended length advertisement and data packets Support for BT5 Channel Selection Algorithms 1 and 2 Support for all BT5 PHY modes regula...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

Winshark

Winshark Wireshark plugin to work with Event Tracing for Windows Microsoft Message Analyzer is being retired and its download packages were removed from microsoft.com sites on November 25 2019. Wireshark have built a huge library of network protocol dissectors. The best tool for Windows would be...