#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended
nccgroup/upnp-pentest-toolkitUPnP Pentest Toolkit for Windows
d0rb/packetpirateA headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems.
rbowes-r7/refreshing-mcp-toolAn implementation of F5's `mcp` protocol, including MitM tooling to sniff traffic while vuln hunting
medpaf/hawkNetwork, recon and offensive-security tool for Linux.
dtrecherel/dnsspoofA DNS spoofer tool written in Python3.
bastilleresearch/nrf-research-firmwareFirmware and research tools for Nordic Semiconductor nRF24LU1+ based USB dongles and breakout boards.
synacktiv/pcapanA pcap capture analysis helper
knqyf263/ndffA flow-based network monitor with Deep Packet Inspection
corelight/raspi-corelightCorelight@Home script
corelight/zeek-elfA Zeek ELF File Analyzer
corelight/zeek-mercury-npfZeek plugin generating Mercury NPF fingerprints for TCP, TLS/DTLS, QUIC, HTTP, SSH, OpenVPN, and STUN to support network security monitoring.
corelight/zeek-openvpnA Zeek OpenVPN protocol analyzer plugin.
corelight/zeek-quicBro analyzer that detects Google's QUIC protocol
corelight/zeek-spicy-ipsecA Zeek IPSec protocol analyzer based on Spicy.
corelight/zeek-spicy-ospfA Zeek OSPF packet analyzer based on Spicy.
corelight/zeek-spicy-stunA Zeek STUN protocol analyzer based on Spicy.
corelight/zeek-spicy-wireguardA Zeek Wireguard protocol analyzer based on Spicy.
synacktiv/sharkerA simple, reliable and reasonably fast network capture analyzer.
