
ddos-reduction-system
Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

Dshell is a network forensic analysis framework.

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support


Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Analyzes .pcapng files to generate HTML reports for network traffic inspection and forensic review.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

Offline-first network investigation and response platform for Windows. Turns a pcap or live capture into a full forensic verdict — attack story,…

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

It was developed to speed up the processes of SOC Analysts during analysis

A tool to listen on a KNX bus via TPUART and the Calimero Project suite and to dump the data from the packets into a Wireshark-Compatible file hex…

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

Selective protocol extractor from PCAPs or interfaces

Packet capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…

This repository contains a list of new remediation scripts.