#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended
kiminewt/pyshark-legacyPython wrapper for tshark, allowing python packet parsing using wireshark dissectors (Python2 legacy version)
trinadh465/external_tcpdump_cve-2018-14879Command-line packet analyzer for network monitoring and data acquisition, capturing and displaying network traffic for troubleshooting and security…
danmcinerney/creds.pyHarvest FTP/POP/IMAP/HTTP/IRC creds
ashishraste/arp-dns-attacksARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library
corelight/cve-2022-21907Zeek package to detect CVE-2022-21907 HTTP exploit attempts by analyzing packet captures for malformed requests and triggering alerts.
zwclose/cve-2021-26258Files and tools for CVE-2021-26258
clausing/scriptsCollection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…
pion/handoffStart WebRTC in the browser—run it somewhere else
lixiang957/cve-2021-33959Proof-of-concept exploit for CVE-2021-33959 demonstrating UDP reflection amplification attack against Plex Media Server via crafted M-SEARCH packets…
martinvks/cve-2022-45059-demoInteractive demo of CVE-2022-45059 Varnish Cache request smuggling vulnerability. Includes Spring Boot web app, vulnerable proxy, automated victim…
vaelwolf/cve-2022-1388-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams
wrong-commit/cve-2010-4669Python-based exploit for CVE-2010-4669 using Scapy to send crafted packets for network vulnerability testing. Requires root and Python 2.
prprhyt/poc_tls1_3_cve-2020-13777Proof-of-concept for CVE-2020-13777 (GnuTLS TLS 1.3 reconnect vulnerability). Parses pcap files to demonstrate the flaw for educational and technical…
vulncheck-oss/go-exploit-cacheA utility for producing an HTTP cache database to use with go-exploit
qmonnet/rbpfRust virtual machine and JIT compiler for eBPF programs
0xxon/cve-2020-0601-pluginZeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts
0xblackash/cve-2026-110912Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…
