Wireshark
wireshark/wiresharkWireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.
dns-analysisforensicsnetwork-forensics+3
wireshark/wiresharkWireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.
gamelinux/passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup
netsniff-ng/netsniff-ngA Swiss army knife for your daily Linux network plumbing.
omriher/captipperMalicious HTTP traffic explorer
tomchop/malcomMalcom - Malware Communications Analyzer
detuxsandbox/detuxThe Multiplatform Linux Sandbox
microsoft/etl2pcapngUtility that converts an .etl file containing a Windows network packet capture into .pcapng format.
proxymanapp/tcpviewerThe best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark
vignesh07/babysharkFlows-first PCAP TUI (case files, gorgeous UX). Do do do do.
anssi-fr/dfir4vspherePowershell module for VMWare vSphere forensics
nccgroup/pcap-burpPcap importer for Burp
leonward/openfpcOpenFPC, Open Source Full Packet Capture
emrekybs/bryobioIt was developed to speed up the processes of SOC Analysts during analysis
lpefferkorn/ipdecapDecapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
kavan00/android-projector-c2-malwareBreakdown of a c2-network of chinese beamers - SilentSDK-Analysis
securityronin/memory-forensicWalk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.