
passer
Passive service locator, a python sniffer that identifies servers, clients, names and much more

Passive service locator, a python sniffer that identifies servers, clients, names and much more

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

A cross platform http sniffer with a web UI

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

A pcap capture analysis helper

A Zeek STUN protocol analyzer based on Spicy.

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Offline AI Security Assistant for Air-Gapped Pentesting

Pcap (capture file) Analysis Toolkit(v.1)

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Visualize network topologies and collect graph statistics based on pcap files