Tools

benjeems/packetstrider

A network packet forensics tool for SSH

gamelinux/passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

z4l4mi/ipgeo

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

emrekybs/bluefish

Automation tool designed to simplify the analysis of PCAP (Packet Capture) files

velocidex/velociraptor

Digging Deeper....

mspicer/pcapinator

A tool for processing a lot of pcaps using tshark

emrekybs/bryobio

It was developed to speed up the processes of SOC Analysts during analysis

al1ex/rdplinkenum

RDPLinkEnum

proxymanapp/tcpviewer

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

telefonica/hiddennetworks-python

USB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…

microlaser/dns_watchdog_windows2

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

wireshark/wireshark

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

medbenali/cyberscan

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

sydsec/syd

Offline AI Security Assistant for Air-Gapped Pentesting

trinitor/netstat2neo4j

create cypher create statements for neo4j out of netstat files from multiple machines

ga0/netgraph

A cross platform http sniffer with a web UI

1ultimat3/pcapviz

Visualize network topologies and collect graph statistics based on pcap files

wireshark/wireshark

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…