How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Pcap-Analyzer is a desktop utility designed for the forensic analysis of offline packet capture files. It functions by decoding binary network protocols into structured metadata, allowing users to examine network activity without requiring a live connection. The tool provides comprehensive capabilities for reconstructing communication sessions and extracting application-layer artifacts, such as transmitted files and credentials. It distinguishes itself through integrated geospatial mapping, which correlates source and destination network addresses with physical location databases to visualize
Responder is a man-in-the-middle framework and network protocol spoofing tool designed to intercept network name queries and impersonate requested resources. It functions as a poisoner for LLMNR, NBT-NS, and MDNS, redirecting network traffic from clients to a controlled listener. The project serves as a credential capture tool that runs rogue servers for SMB, HTTP, and LDAP to collect NTLM hashes and clear text credentials. It enables the harvesting of encrypted authentication tokens and the interception of usernames and passwords sent without encryption. Its broader capabilities include int
Suricata is an open-source network intrusion detection and prevention engine that analyzes live network traffic in real-time to identify and alert on malicious activity. It operates as a rule-based threat detection system, matching traffic against user-defined signatures to detect known attack patterns and policy violations, and can be placed inline to actively block malicious packets before they reach their target. The engine inspects a wide range of application-layer protocols including HTTP, DNS, TLS, SMB, and MQTT, and supports high-performance packet capture through specialized hardware a
Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe
PCredz is a network credential extraction tool and traffic analyzer designed to intercept passwords, hashes, and tokens from IPv4 and IPv6 traffic. It functions as both a real-time monitor for live network interfaces and a parser for saved packet capture files.
The main features of lgandx/pcredz are: Network Credential Capturers, Credential Interception, Dissection Engines, Network Traffic Analyzers, Historical Packet Parsing, Packet Capture Analysis, Protocol-Aware Extraction, Network Capture Parsers.
Projects with overlapping indexed features include: hatboy/pcap-analyzer — Pcap-Analyzer is a desktop utility designed for the forensic analysis of offline packet capture files. It functions by… spiderlabs/responder — Responder is a man-in-the-middle framework and network protocol spoofing tool designed to intercept network name… oisf/suricata — Suricata is an open-source network intrusion detection and prevention engine that analyzes live network traffic in… jaykali/maskphish — Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network… mayfrost/guides — This project is a comprehensive technical documentation repository focused on Linux system administration, network… wireshark/wireshark — Wireshark is a network protocol analyzer and traffic inspector used for capturing and inspecting network traffic. It…