
arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Offline AI Security Assistant for Air-Gapped Pentesting

It was developed to speed up the processes of SOC Analysts during analysis

Automation tool designed to simplify the analysis of PCAP (Packet Capture) files

Passive service locator, a python sniffer that identifies servers, clients, names and much more

A Zeek STUN protocol analyzer based on Spicy.

A tool for processing a lot of pcaps using tshark

A pcap capture analysis helper

A cross platform http sniffer with a web UI

Visualize network topologies and collect graph statistics based on pcap files

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.