#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended
onyks-os/transparenttorproxyA Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and easy…
gyulyvgc/sniffnetComfortably monitor your network traffic 🕵️♂️
m4n3dw0lf/pythempentest framework
microsoft/etl2pcapngUtility that converts an .etl file containing a Windows network packet capture into .pcapng format.
sunghoojung/reverse-engineering-browserLocal-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…
davidhavoc/ayaflowA high-performance, eBPF-based network traffic analyzer written in Rust.
ntop/ndpiOpen Source Deep Packet Inspection Software Toolkit
ragnt/angryoxideOffensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…
aircrack-ng/aircrack-ngComplete suite for WiFi network security auditing, including packet capture, injection attacks, deauthentication, fake AP creation, and WEP/WPA PSK…
csploit/androidcSploit - The most complete and advanced IT security professional toolkit on Android.
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
greatscottgadgets/facedancerImplement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET
jpr5/ngrepngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…
emanuele-f/pcapdroidNo-root network monitor, firewall and PCAP dumper for Android
hslatman/awesome-industrial-control-system-securityA curated list of resources related to Industrial Control System (ICS) security.
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
microlaser/dns_watchdog_windows2PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…
robertdavidgraham/masscanTCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
