BlueFish

BlueFish BlueFish는 PCAPPacket Capture 파일 분석을 간소화하도록 설계된 Python 기반 자동화 도구입니다. Wireshark의 명령줄 도구인 tshark의 강력한 기능을 활용하여 네트워크 캡처에서 귀중한 정보를 추출합니다. BlueFish를 사용하면 잠재적인 로그인 시도를 빠르게 식별하고, 네트워크 트래픽 패턴을 분석하며, 다양한 네트워크 아티팩트를 추출할 수 있습니다. 주요 기능: 잠재적인 로그인 시도 및 자격 증명 추출 IP 및 MAC 주소 분석 네트워크 트래픽에서 포함된 객체 검색 이메일 주...

flowinspect

flowinspect Инструмент проверки сетевого трафика Описание: Он использует libnids через свои Python-привязки от Джона Оберхайда: pynids для дефрагментации IP и сборки TCP-пакетов UDP проверяется покадрово для генерации сетевых потоков. Затем эти потоки проверяются с помощью одного из четырёх режим...

squidmagic

Squidmagic은 Squid 프록시 서버와 Spamhaus를 사용하여 웹 기반 네트워크 트래픽을 분석하고 중앙 명령 및 제어C&C 서버와 악성 사이트를 탐지하도록 설계된 도구입니다. 의존성 설치 root@kitploit: pip install -r requirements.txt 사용법 root@kitploit: python squidmagic.py /squid/access.log | | | | / |/ | | | | |/ | ' \ / |/ | |/ | \ \ | | || | | | | | | | | | | | | | |...

NetSet

NetSet Утилита и автоматизатор операционной безопасности. Версия 1.1.0 NetSet предназначен для автоматизации ряда операций, которые помогут пользователю защитить свой сетевой трафик. Он также предоставляет простой способ получения прокси и запуска утилит через Tor. Все утилиты, устанавливаемые и...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

NetRipper

Описание NetRipper — это инструмент пост-эксплуатации, нацеленный на системы Windows, который использует перехват API для перехвата сетевого трафика и функций, связанных с шифрованием, от пользователя с низкими привилегиями, позволяя захватывать как трафик в открытом виде, так и зашифрованный...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like and . It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the network through...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

NetworkAssessment

NetworkAssessment: Инструмент оценки компрометации сети Инструмент оценки компрометации сети предназначен для анализа pcap-файлов с целью выявления потенциально подозрительного сетевого трафика. Этот инструмент фокусируется на обнаружении аномальной активности в сетевом трафике и поиске...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...

flightsim

Network Flight Simulator flightsim — это легковесная утилита, используемая для генерации вредоносного сетевого трафика и помощи командам безопасности в оценке средств защиты и видимости сети. Инструмент выполняет тесты для имитации DNS-туннелирования, DGA-трафика, запросов к известным активным...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

OpenFPC

OpenFPC Полный захват пакетов: с открытым исходным кодом и на вашем собственном стандартном оборудовании. OpenFPC — это набор скриптов, которые вместе обеспечивают легковесное средство для полного захвата и буферизации сетевого трафика. Его цель — позволить неспециалистам развернуть распределенно...

EUVD-2026-69732

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

EUVD-2026-69733

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...