
EKFiddle
Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.

Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.

ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library

An OpenFlow sniffer to help network troubleshooting in production networks.

Security-aware HTTP protocol parser library used by IDS/IPS engines to inspect and normalize HTTP traffic for threat detection.

A utility for producing an HTTP cache database to use with go-exploit

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

A Zeek package that detects when compromised eMudhra intermediate certificates are used in TLS 1.2 and below.

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks