
An-Integrated-Wireless-Network-Forensic-Analysis-Framework
This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

OpenFPC, Open Source Full Packet Capture

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Malcom - Malware Communications Analyzer

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

A Swiss army knife for your daily Linux network plumbing.

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

A flow-based network monitor with Deep Packet Inspection

Bro analyzer that detects Google's QUIC protocol

Packet capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…

Zeek support for Community ID flow hashing.

A terminal UI for tshark, inspired by Wireshark

Provides packet processing capabilities for Go

TCP/IP packet demultiplexer. Download from:

Pcap importer for Burp