Awesome GitHub RepositoriesNetwork Security Analysis

Uptime Kuma is a self-hosted monitoring platform designed to track the availability and performance of network services and websites. It functions as a centralized dashboard that executes asynchronous health checks on a scheduled interval, providing real-time visibility into infrastructure health and service uptime. The platform distinguishes itself through a dedicated notification engine that dispatches alerts across multiple third-party messaging services, alongside a public status page generator that allows users to communicate service health and historical metrics via custom domains. Its

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t

RustScan is a high-speed TCP network scanner written in Rust, designed for security reconnaissance and network mapping. It functions as an automated port discovery engine that identifies open ports on remote hosts using IPv6 addresses, CIDR ranges, or bulk input files. The tool is built for rapid surface area discovery, utilizing parallel port processing and OS-aware performance optimizations to identify active services. It allows for scan precision tuning through adjustable connection timeout thresholds and concurrent request controls to balance speed and accuracy. The system integrates wit

Amass is a network attack surface mapper and reconnaissance framework designed to discover and map the external, internet-facing infrastructure of a target organization. It functions as an open source intelligence tool that identifies public network boundaries and locates hidden or forgotten subdomains to define an organization's total reachable footprint. The project utilizes passive-source data aggregation from external APIs and public databases alongside active DNS brute-forcing and recursive subdomain expansion. It employs a graph-based asset mapping system to visualize the relationships

CrackMapExec is a network penetration testing framework and automated security scanner designed to assess security postures across large IP ranges. It functions as a multi-protocol security scanner and network protocol auditor used to identify vulnerabilities and misconfigurations. The tool provides capabilities for Active Directory auditing to enumerate users and permissions, as well as post-exploitation enumeration to gather system metadata and discover lateral movement paths. It includes a framework for credential spraying and harvesting across various network services. The system utilize

ntopng هو أداة مراقبة حركة مرور الشبكة تعتمد على الويب ومجمع لبيانات التدفق. يعمل كمراقب لأمن الشبكة، ونظام إدارة شبكة SNMP، ومحلل بروتوكولات صناعية لبيئات OT و SCADA. يوفر النظام فحصاً متخصصاً للبروتوكولات الصناعية مثل Modbus و DNP3 و IEC 60870. يتميز من خلال الكشف السلوكي عن التهديدات، وتحليل حركة المرور المشفرة عبر بصمات المصافحة، والقدرة على تحديد الأجهزة وأنظمة التشغيل باستخدام أنماط DHCP وعناوين MAC. تشمل قدراته الأوسع تحليل حركة المرور في الوقت الفعلي والتقاط الحزم، ورسم خرائط طوبولوجيا الشبكة، وتنسيق تسلسلات هرمية للمجمعين. يدير النظام أيضاً التحكم في الوصول إلى الشبكة من خلال بوابات المصادقة، ويفرض حصصاً لحركة المرور، ويصدر بيانات التدفق والتنبيهات إلى قواعد بيانات خارجية مثل ClickHouse و Elasticsearch و Kafka. يدعم المشروع تنفيذ مثيلات مراقبة مستقلة متعددة على مضيف واحد باستخدام تكوينات معزولة.

Responder is a man-in-the-middle framework and network protocol spoofing tool designed to intercept network name queries and impersonate requested resources. It functions as a poisoner for LLMNR, NBT-NS, and MDNS, redirecting network traffic from clients to a controlled listener. The project serves as a credential capture tool that runs rogue servers for SMB, HTTP, and LDAP to collect NTLM hashes and clear text credentials. It enables the harvesting of encrypted authentication tokens and the interception of usernames and passwords sent without encryption. Its broader capabilities include int

Rayhunter is an IMSI catcher detection tool and cellular network monitor designed to identify cell-site simulators and fake base stations. It functions as an SDR signal analyzer that tracks tower connectivity, logs GPS locations, and monitors for network downgrades or disabled encryption on mobile hardware. The system distinguishes itself through heuristic-based traffic analysis used to detect suspicious identity requests, malformed system information, and the use of null ciphers. It includes a remote device management interface consisting of a REST API and web dashboard for controlling detec

An engine to make Tor network your default gateway

sslstrip is a MITM tool that implements Moxie Marlinspike's SSL stripping attacks.

SSH man-in-the-middle tool

A TCP/UDP Non-HTTP Proxy Extension for Burp Suite

Secure multithreaded packet sniffer

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

Hacking Toolkit

Title: TorCrawl.py Description: A Python script designed for anonymous web scraping via the Tor network. Author: MikeMeliz -->

A Linux packet crafting tool.

Discover internet-wide misconfigurations while drinking coffee

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

Man in the Middle SOCKS Proxy for JAVA