Awesome GitHub RepositoriesNetwork Security Analysis

Uptime Kuma is a self-hosted monitoring platform designed to track the availability and performance of network services and websites. It functions as a centralized dashboard that executes asynchronous health checks on a scheduled interval, providing real-time visibility into infrastructure health and service uptime. The platform distinguishes itself through a dedicated notification engine that dispatches alerts across multiple third-party messaging services, alongside a public status page generator that allows users to communicate service health and historical metrics via custom domains. Its

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t

RustScan is a high-speed TCP network scanner written in Rust, designed for security reconnaissance and network mapping. It functions as an automated port discovery engine that identifies open ports on remote hosts using IPv6 addresses, CIDR ranges, or bulk input files. The tool is built for rapid surface area discovery, utilizing parallel port processing and OS-aware performance optimizations to identify active services. It allows for scan precision tuning through adjustable connection timeout thresholds and concurrent request controls to balance speed and accuracy. The system integrates wit

Amass is a network attack surface mapper and reconnaissance framework designed to discover and map the external, internet-facing infrastructure of a target organization. It functions as an open source intelligence tool that identifies public network boundaries and locates hidden or forgotten subdomains to define an organization's total reachable footprint. The project utilizes passive-source data aggregation from external APIs and public databases alongside active DNS brute-forcing and recursive subdomain expansion. It employs a graph-based asset mapping system to visualize the relationships

CrackMapExec is a network penetration testing framework and automated security scanner designed to assess security postures across large IP ranges. It functions as a multi-protocol security scanner and network protocol auditor used to identify vulnerabilities and misconfigurations. The tool provides capabilities for Active Directory auditing to enumerate users and permissions, as well as post-exploitation enumeration to gather system metadata and discover lateral movement paths. It includes a framework for credential spraying and harvesting across various network services. The system utilize

ntopng est un outil de surveillance du trafic réseau basé sur le web et un agrégateur de données de flux. Il fonctionne comme un moniteur de sécurité réseau, un système de gestion de réseau SNMP et un analyseur de protocole industriel pour les environnements OT et SCADA. Le système fournit une inspection spécialisée pour les protocoles industriels tels que Modbus, DNP3 et IEC 60870. Il se distingue par la détection comportementale des menaces, l'analyse du trafic chiffré via l'empreinte numérique des poignées de main (handshake), et la capacité d'identifier le matériel et les systèmes d'exploitation en utilisant les modèles DHCP et d'adresses MAC. Ses capacités plus larges incluent l'analyse du trafic en temps réel et la capture de paquets, la cartographie de la topologie réseau et l'orchestration de hiérarchies de collecteurs à plusieurs niveaux. La plateforme gère également le contrôle d'accès réseau via des portails captifs, applique des quotas de trafic et exporte les données de flux et d'alertes vers des bases de données externes telles que ClickHouse, Elasticsearch et Kafka. Le projet prend en charge l'exécution de plusieurs instances de surveillance indépendantes sur un seul hôte en utilisant des configurations isolées.

Responder is a man-in-the-middle framework and network protocol spoofing tool designed to intercept network name queries and impersonate requested resources. It functions as a poisoner for LLMNR, NBT-NS, and MDNS, redirecting network traffic from clients to a controlled listener. The project serves as a credential capture tool that runs rogue servers for SMB, HTTP, and LDAP to collect NTLM hashes and clear text credentials. It enables the harvesting of encrypted authentication tokens and the interception of usernames and passwords sent without encryption. Its broader capabilities include int

Rayhunter is an IMSI catcher detection tool and cellular network monitor designed to identify cell-site simulators and fake base stations. It functions as an SDR signal analyzer that tracks tower connectivity, logs GPS locations, and monitors for network downgrades or disabled encryption on mobile hardware. The system distinguishes itself through heuristic-based traffic analysis used to detect suspicious identity requests, malformed system information, and the use of null ciphers. It includes a remote device management interface consisting of a REST API and web dashboard for controlling detec

An engine to make Tor network your default gateway

sslstrip is a MITM tool that implements Moxie Marlinspike's SSL stripping attacks.

SSH man-in-the-middle tool

A TCP/UDP Non-HTTP Proxy Extension for Burp Suite

Secure multithreaded packet sniffer

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

Hacking Toolkit

Title: TorCrawl.py Description: A Python script designed for anonymous web scraping via the Tor network. Author: MikeMeliz -->

A Linux packet crafting tool.

Discover internet-wide misconfigurations while drinking coffee

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

Man in the Middle SOCKS Proxy for JAVA