#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended
nccgroup/ebpfeBPF - extended Berkeley Packet Filter tooling
nccgroup/phantapPhantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
nccgroup/pcap-burpPcap importer for Burp
nccgroup/solitudeSolitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced…
nccgroup/upnp-pentest-toolkitUPnP Pentest Toolkit for Windows
d0rb/packetpirateA headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems.
rbowes-r7/refreshing-mcp-toolAn implementation of F5's `mcp` protocol, including MitM tooling to sniff traffic while vuln hunting
medpaf/hawkNetwork, recon and offensive-security tool for Linux.
dtrecherel/dnsspoofA DNS spoofer tool written in Python3.
bastilleresearch/nrf-research-firmwareFirmware and research tools for Nordic Semiconductor nRF24LU1+ based USB dongles and breakout boards.
synacktiv/pcapanA pcap capture analysis helper
knqyf263/ndffA flow-based network monitor with Deep Packet Inspection
corelight/raspi-corelightCorelight@Home script
corelight/zeek-elfA Zeek ELF File Analyzer
corelight/zeek-mercury-npfZeek plugin generating Mercury NPF fingerprints for TCP, TLS/DTLS, QUIC, HTTP, SSH, OpenVPN, and STUN to support network security monitoring.
corelight/zeek-openvpnA Zeek OpenVPN protocol analyzer plugin.
corelight/zeek-quicBro analyzer that detects Google's QUIC protocol
corelight/zeek-spicy-ipsecA Zeek IPSec protocol analyzer based on Spicy.
