
dns_watchdog_windows2
PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Passive service locator, a python sniffer that identifies servers, clients, names and much more

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

Visualize network topologies and collect graph statistics based on pcap files

create cypher create statements for neo4j out of netstat files from multiple machines

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

It was developed to speed up the processes of SOC Analysts during analysis

A pcap capture analysis helper

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

A Zeek STUN protocol analyzer based on Spicy.

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

A tool for processing a lot of pcaps using tshark

Pcap (capture file) Analysis Toolkit(v.1)

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Offline AI Security Assistant for Air-Gapped Pentesting

USB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…