
SharkMCP
A swiss-knife MCP server for analysing PCAP files
ctfdigital-forensicseducation+6

A swiss-knife MCP server for analysing PCAP files

DFIR forensics companion server + capture extension

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

Technical analysis of a SharePoint ToolShell (CVE-2025-53770) exploitation attempt involving RCE, webshell deployment, and MachineKey extraction.