
dns_watchdog_windows2
PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua and Go NIDS (Network intrusion detection system).

It was developed to speed up the processes of SOC Analysts during analysis

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

JA4+ is a suite of network fingerprinting standards

Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…

A network sniffer that logs all DNS server replies for use in a passive DNS setup

create cypher create statements for neo4j out of netstat files from multiple machines

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

Visualize network topologies and collect graph statistics based on pcap files

A network packet forensics tool for SSH

A tool for processing a lot of pcaps using tshark

Offline AI Security Assistant for Air-Gapped Pentesting

Writeup for the DEF CON 30 badge challenge

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

All-in-One malware analysis tool.

The Multiplatform Linux Sandbox

A Zeek STUN protocol analyzer based on Spicy.