#1Tools for analyzing network traffic and communication logs to investigate security incidents.
Kitploit recommended
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…
capesandbox/capesoloStandalone Windows VM malware sandbox running capemon, with GUI triage viewer, YARA signatures, IOC extraction, network analysis, and…
leonward/openfpcOpenFPC, Open Source Full Packet Capture
halildeniz/networkassessmentNetworkAssessment: Network Compromise Assessment Tool
sydsec/sydOffline AI Security Assistant for Air-Gapped Pentesting
trinitor/netstat2neo4jcreate cypher create statements for neo4j out of netstat files from multiple machines
weirdmachine64/sharkmcpA swiss-knife MCP server for analysing PCAP files
emrekybs/bryobioIt was developed to speed up the processes of SOC Analysts during analysis
telefonica/hiddennetworks-pythonUSB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…
kcreyts/plugxdecoderDecodes PlugX traffic and encrypted/compressed artifacts
kdbugk/game-of-kingshot-reEducational reverse engineering study of a Unity/IL2CPP Android game. Documents gateway protocol decoding, native anti-tampering SDK analysis, SSL…
kybr-git/dc30-badge-challenge-writeupWriteup for the DEF CON 30 badge challenge
misp/misp-wiresharkLua plugin to extract data from Wireshark and convert it into MISP format
corelight/zeek-community-idZeek support for Community ID flow hashing.
appliedsec/forensicscannerForensic Scanner
lpefferkorn/ipdecapDecapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…
formerlab/shadow-fleet-tracker-lightOpen source Baltic Sea shadow fleet tracker. 1200+ vessels, live AIS, cable proximity alerts. No cloud, no subscription, runs locally
naacbin/covenantdecryptorDecrypts Covenant C2 communications by extracting RSA private keys from minidumps, recovering AES session keys, and converting network captures to…
