
PcapPlusPlus
Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

Packet capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…

It was developed to speed up the processes of SOC Analysts during analysis

A tool to analyze the network flow during attack/defence Capture the Flag competitions

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…


Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…

A tool to assist with network-based hunting for GRU's Drovorub malware c2

A network packet forensics tool for SSH

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

OpenFPC, Open Source Full Packet Capture

Selective protocol extractor from PCAPs or interfaces