scapy - Scapy: the Python-based interactive packet manipulation program & library

•    Python

---

Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work.

scapy python-modules network network-analysis network-visualization network-discovery python2 python3 python-2 python-3 pcap packet-capture packet-sniffer packet-analyser packet-analyzer packet-crafting security security-tools network-security

scapy-ssl_tls - SSL/TLS layers for scapy the interactive packet manipulation tool

•    Python

---

SSL/TLS layers for scapy the interactive packet manipulation tool. SSL/TLS and DTLS layers and TLS utiltiy functions for Scapy.

tls scapy scapy-ssl-tls ssl dtls

habu - Python Network Hacking Toolkit

•    Python

---

I'm developing Habu to teach (and learn) some concepts about Python and Network Hacking. These are basic functions that help with some tasks for Ethical Hacking and Penetration Testing.

network-analysis networking scapy python3 security-tools hacking penetration-testing pentesting pentest pentest-tool pentesting-networks security-audit security-testing

trackerjacker - Like nmap for mapping wifi networks you're not connected to, plus device tracking

•    Python

---

Like nmap for mapping wifi networks you're not connected to. Maps and tracks wifi networks and devices through raw 802.11 monitoring. Linux-only at this time (tested on Ubuntu, Kali, and RPi).

hacking wireless scapy network packets

opensvp - Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack

•    Python

---

Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack. It implements classic attacks as well as some new kind of attacks against application layer gateway (called helper in the Netfilter world). For example, opensvp is able under some conditions (see explanation below for details) to open a pin hole in a firewall protecting a ftp server: even if the filtering policy garantee that only the 21 port is open to the server, you can open 'any' port on the server by using opensvp.

security testing network scapy netfilter

docker-nfqueue-scapy - Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

•    Python

---

Docker container with an example python script to listen for packets on a netfilter queue and manipulate them with scapy. You can listen on any queue number, and you can push packets into the queue from any iptables rule. This container gives you a powerful prototyping and debugging tool for monitoring, manipulating, dropping, accepting, requeing, or forwarding network packets in python. You can read from a queue on the host with --net=host --cap-add=NET_ADMIN. Or, you can run it within another container's namespace to listen for packets on an nfqueue in that container's network namespace. This container includes a full installation of scapy and python netfilter queue (nfqueue) bindings, and an example python script nfqueue_listener.py to print incoming packets on the queue.

netfilter nfqueue docker scapy iptables

passer - Passive service locator, a python sniffer that identifies servers, clients, names and much more

•    Python

---

Quick notes for getting going with passer, the passive service sniffer. You're responsible for getting permission to sniff. If you're using windows or your paths to the support files don't match mine for some other reason, let me know where they are and I'll be glad to update the script.

python-2 scapy sniffer packet-sniffer packet-analyzer gplv3 macosx network-monitoring pcap pcap-analyzer security

tcp-connection-hijack-reset - Simple scapy-based tool to hijack and reset existing TCP connections

•    Python

---

Simple scapy + iptables/ipsets + nflog tool to hijack and reset existing TCP connections (for both ends), established from other pids. Purpose is not some malicious DoS attacks but rather kicking hung state-machines in otherwise nice software, while making the whole thing look like a random net hiccup, which most apps are designed to handle.

scapy nflog ipset tcp scraps networking attack