
dns_watchdog_windows2
PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

DNS Enumeration Script

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

An advanced network scan and attack script based on GUI. 2nd version of no-GUI netattack.

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…

Poison, reset, spoof, redirect MITM script

A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "dropbox".

Corelight@Home script

A simple yet effective python3 script to perform DNS spoofing via ARP poisoning

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

Script and hardware kit to automatically deauth 802.11 clients en masse. Captures packets for later nefariousness.

Zeek script to detect exploitation attempts of CVE-2022-21449 targeting TLS clients

This Python script helps to detect the Etherleak (CVE-2003-0001) vulnerability on a target host by analyzing the padding data in network packets. The…

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

Zeek detection for CVE-2020-16898-"Bad Neighbor"