wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

Krb5RoastParser

Krb5RoastParser 📑 Table of Contents ❓ What is Krb5RoastParser? ⭐ Features ⚙️ Installation ▶️ Execution 📈 Post Execution 📜 License ❓ What is Krb5RoastParser? Krb5RoastParser is a tool designed to parse Kerberos authentication packets AS-REQ, AS-REP and TGS-REP from .pcap files and generate...

BlueFish

BlueFish BlueFish is a Python-based automation tool designed to simplify the analysis of PCAP Packet Capture files. It leverages the power of Wireshark's command-line tool, tshark, to extract valuable information from network captures. With BlueFish, you can quickly identify potential login...

babyshark

babyshark Wireshark made easy in your terminal. Babyshark is a PCAP TUI that helps you answer: What’s using the network? What looks broken/weird? What should I select next? Status: v0.3.0 alpha. Offline .pcap / .pcapng viewing works without Wireshark Live capture requires tshark Wireshark CLI...

pcapinator

pcapinator An application to deal with lots of pcaps by running lots of tsharks Setup Install Python3, the one true Python... root@kitploit: pip install python-dateutil pandas Features Recursively process multiple PCAP files including those in subdirectories. Wrapper around editcap Wireshark Tool...

termshark

Termshark tshark のターミナルユーザーインターフェースで、Wireshark に触発されたものです。 V2.4 がリリースされました。パケット検索、カラーとカラムのプロファイル機能を搭載！詳細はチェンジログ をご覧ください。 リモートマシンで大きな pcap ファイルをデバッグしていて、scp でデスクトップに戻したくない場合、termshark が役立ちます！ 機能 pcap ファイルの読み取り、またはライブインターフェースのスニッフィング（tshark が許可されている場合） Wireshark のディスプレイフィルターを使用した pcap...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

pyshark

pyshark Python wrapper for tshark, allowing python packet parsing using wireshark dissectors. Extended documentation: http://kiminewt.github.io/pyshark Looking for contributors - for various reasons I have a hard time finding time to maintain and enhance the package at the moment. Any...

wireshark

通用信息 Wireshark 是一款网络流量分析器（或称“嗅探器”），适用于 Linux、macOS、BSD 以及其他 Unix 和类 Unix 操作系统，也适用于 Windows。它使用 Qt（一个图形用户界面库），并使用 libpcap 和 npcap 作为数据包捕获和过滤库。 Wireshark 发行版还附带 TShark，它是一个面向行的嗅探器（类似于 Sun 的 snoop 或 tcpdump），使用与 Wireshark 相同的解析、捕获文件读写和数据包过滤代码；同时还附带...

hfinger

Hfinger - fingerprinting malware HTTP requests Tool for fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :- Its main objective is to provide unique representations fingerprints of malware requests, which help in their identification. Unique...

tsharkVM

💡 更新: tshark-opensearch より新しいアプリケーション tshark-opensearch が利用可能になりました。 これは https://github.com/h21-lab/apps-collection-info リポジトリにあります。 👉 アクセスを取得 tshark ELK VM アプライアンス このプロジェクトは、tshark -T ek ndjson 出力の分析に使用できる仮想マシンを構築します。 仮想アプライアンスは vagrant を使用して構築され、事前インストールおよび事前設定された ELK スタックを備えた Debian を構築します。 VM...

sharker

Sharker: where Wireshark ends, we begin Sharker is a powerful and extensible tool for extracting valuable data from PCAP files or from live interfaces. It leverages the power of tshark to efficiently parse network captures and applies a flexible filtering system to pinpoint and extract juicy...

pyshark-legacy

pyshark This repository is for the legacy version of pyshark, which works on Python2.7+. It only receives bugfixes after version 0.3.8. For the new version that's only supported on Python 3.5+, please use themain repo Python wrapper for tshark, allowing python packet parsing using wireshark...

Wireshark

基本信息 Wireshark 是一款适用于 Linux、macOS、BSD 以及其他 Unix 和类 Unix 操作系统和 Windows 的网络流量分析器（或称“嗅探器”）。它使用 Qt（一个图形用户界面库），并以 libpcap 和 npcap 作为数据包捕获和过滤库。 Wireshark 发行版还附带 TShark，它是一款面向行的嗅探器（类似于 Sun 的 snoop 或 tcpdump），使用与 Wireshark 相同的解析、捕获文件读写和报文过滤代码；同时还附带...

attack_monitor

Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

PYSEC-2026-3426 wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured

Description Impact wireshark-mcp exposes a wiresharkexportobjects MCP tool that accepts an attacker-controlled destdir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox alloweddirs is None by default and only activates when the...

CVE-2026-43901

Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wiresharkexportobjects MCP tool that accepts an attacker-controlled destdir parameter and passes it to tshark's...

CVE-2026-43901

Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wiresharkexportobjects MCP tool that accepts an attacker-controlled destdir parameter and passes it to tshark's...

CVE-2026-43901 Wireshark MCP: Arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured

Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wiresharkexportobjects MCP tool that accepts an attacker-controlled destdir parameter and passes it to tshark's...