#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended
domcyrus/rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
kubeshark/kubesharkeBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…
fenkohq/dnsmonsterPassive DNS Capture and Monitoring Toolkit
ntop/ndpiOpen Source Deep Packet Inspection Software Toolkit
gyulyvgc/sniffnetComfortably monitor your network traffic 🕵️♂️
p1sec/qcsuperQCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
aixisstudio/snitchReal-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps…
gojue/ecaptureCapture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
seladb/pcapplusplusMultiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…
honeylabshq/spip-goSpip network sensor written in Go
zerbea/hcxdumptoolSmall tool to capture packets from wlan devices.
bluez/bluezLinux Bluetooth protocol stack with daemons, command-line clients, HCI monitor, and support for BR/EDR, LE, Mesh, audio profiles, providing device…
boredhackerblog/plex2shell_pcapPacket capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
sunghoojung/reverse-engineering-browserLocal-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
onyks-os/transparenttorproxyA Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and easy…
