#1Tools for capturing, inspecting, and analyzing network traffic in real-time or from capture files.
Kitploit recommended

Selective protocol extractor from PCAPs or interfaces
-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams

Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…

Zeek package to detect CVE-2022-21907 HTTP exploit attempts by analyzing packet captures for malformed requests and triggering alerts.

Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

Offline-first network investigation and response platform for Windows. Turns a pcap or live capture into a full forensic verdict — attack story,…

A Zeek OpenVPN protocol analyzer plugin.

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

Parsing Ramnit's traffic

RPi3+ Network Cracker Setup Tool

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

eWeLinkESPT is a tool that automatically decodes and decrypts the WiFi network credentials transmitted to a supported ESP-based IoT device by the…

Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…

Proof-of-concept exploit for CVE-2024-51179: crafted PFCP packet flooding causes denial of service in Open5GS UPF/SMF, disrupting 5G core PDU session…

Exploit vulnerabilities and vulnerability prevention implementation

This Python script helps to detect the Etherleak (CVE-2003-0001) vulnerability on a target host by analyzing the padding data in network packets. The…