
CapTipper
Malicious HTTP traffic explorer

Malicious HTTP traffic explorer

Malcom - Malware Communications Analyzer

A cross platform http sniffer with a web UI

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…

It was developed to speed up the processes of SOC Analysts during analysis

JA4+ is a suite of network fingerprinting standards

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

Decodes PlugX traffic and encrypted/compressed artifacts

Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…