PcapXray
srixivas/pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…
ctfdns-analysiseducation+7
1.9k5 months ago
srixivas/pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
emanuele-f/pcapdroidNo-root network monitor, firewall and PCAP dumper for Android
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
mandiant/flare-fakenet-ngFakeNet-NG - Next Generation Dynamic Network Analysis Tool
withsecurelabs/doublepulsar-detection-scriptA python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
echowei/deeptrafficDeep Learning models for network traffic classification
felixweyne/imaginaryc2Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures…
pjlantz/droidboxDynamic analysis sandbox for Android apps that monitors network traffic, file operations, cryptographic API usage, permission circumvention, and…
dinotools/dionaeaLow-interaction honeypot that emulates vulnerable network services to capture malware, shellcode, and exploit attempts, with IPv6 and TLS support.
fhightower/ioc-finderSimple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related…
claroty/aryaGenerates pseudo-malicious files from YARA rules to trigger AV/EDR detection, enabling malware research, rule QA, and network sensor pressure testing…
advdebug/brovanUser-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…
aniket2912/all-cehv13-module-wise-pdf-reportsPractical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…
capesandbox/capesoloStandalone Windows VM malware sandbox running capemon, with GUI triage viewer, YARA signatures, IOC extraction, network analysis, and…