#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended
matheus-garbelini/esp32_bluetooth_classic_snifferActive Bluetooth BR/EDR Sniffer/Injector as cheap as any ESP32 board can get. Works with Scapy ;-)
boredhackerblog/teamcity-cve-2026-63077-pcapteamcity teamcity-CVE-2026-63077 exploitation pcap
seemoo-lab/internalblueBluetooth experimentation framework for Broadcom and Cypress chips.
awakecoding/wireshark-rdpWireshark RDP resources
lkarlslund/hashmuncherGrab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
yili-soc/vm-homelab-log4shell-assessmentFull-lifecycle vulnerability management on a live Log4Shell (CVE-2021-44228) target — scan, manual exploitation, network detection, and remediation…
hari-prasaanth/thick-client-pentest-checklistA OWASP Based Checklist With 80+ Test Cases
p1sec/qcsuperQCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
interceptsuite/interceptsuiteMITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.
h4cknain/cve-2024-21413-microsoft-outlook-moniker-link-vulnerabilityLab write-up analyzing CVE-2024-21413 Outlook Moniker Link exploitation, NetNTLMv2 credential leakage via SMB, detection with YARA/Wireshark, and…
i-am-shodan/usbarmyknifeUSB Army Knife – the ultimate close access tool for penetration testers and red teamers.
puniaze/portdogNetwork anomaly detector that monitors raw packets to identify port scanning activity in real time, with flexible sniffing duration controls and live…
samyk/keysweeperKeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
aseemjakhar/kcmdKankun Smart Socket Hijacker and Sniffer. The kankun smart socket and its mobile app use a hardcoded AES 256 bit key to encrypt and decrypt…
alt3kx/airdecloak-ngMy Aircrack-ng contribution with Thomas d'Otreppe
nccgroup/baskervilleSelective protocol extractor from PCAPs or interfaces
nccgroup/blesuiteBLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
