
gopassivedns
Network-based passive DNS logger capturing and logging DNS queries from live traffic or pcap files, outputting JSON for integration with SIEM and…

Network-based passive DNS logger capturing and logging DNS queries from live traffic or pcap files, outputting JSON for integration with SIEM and…

Lightweight network intrusion detection engine capturing live traffic with libpcap. Detects SYN/ICMP floods, port scans, and signature-based web…

Tallow - Transparent Tor for Windows

A wireshark plugin to instrument ETW

My Aircrack-ng contribution with Thomas d'Otreppe

Complete suite for WiFi network security auditing, including packet capture, injection attacks, deauthentication, fake AP creation, and WEP/WPA PSK…

Force Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic

Nmap Project's Windows packet capture and transmission library

A cli tool to proxy and analyze TCP connections.


Passive network security sniffer that analyzes 28 protocols (ARP, STP, OSPF, VLAN, SCADA) to detect vulnerabilities in network equipment without…


A command-line network packet crafting and injection utility

UPnP Pentest Toolkit for Windows

A Linux Packet Sniffing Suite for Automated MiTM Attacks

BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.

This project is now part of @mitmproxy.

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…