
usbsnoop
Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…

CDPSnarf is a network sniffer exclusively written to extract information from CDP (Cisco Discovery Protocol) packets.

Lua plugin to extract data from Wireshark and convert it into MISP format

A tool to listen on a KNX bus via TPUART and the Calimero Project suite and to dump the data from the packets into a Wireshark-Compatible file hex…

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

Selective protocol extractor from PCAPs or interfaces

Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…

Terminal UI for browsing and replaying AWS WAF v2 logs from CloudWatch, S3, and the sampling API, with YAML filtering, auth detection, and…

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

A fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)

Structured penetration testing lab documenting a full attack chain from network reconnaissance to root exploitation of vsftpd 2.3.4 backdoor, with…

Unsupervised deep autoencoder that flags anomalous mobile traffic: 25,000+ HTTP/HTTPS flows intercepted from a live iOS device with mitmproxy,…

🔍 A tool for sniffing unencrypted wireless probe requests from devices.

Cross-platform CLI for network performance testing over TCP, UDP, HTTP, HTTPS, and ICMP: bandwidth, connections/s, packets/s, latency, loss, jitter,…

HTTP/HTTPS MITM proxy and recorder.

Visualize network topologies and collect graph statistics based on pcap files

Eye candy ARP spoofer for Windows