libtins - High-level, multiplatform C++ network packet sniffing and crafting library.

•    C++

---

libtins is a high-level, multiplatform C++ network packet sniffing and crafting library. Its main purpose is to provide the C++ developer an easy, efficient, platform and endianess-independent way to create tools which need to send, receive and manipulate specially crafted packets.

network packet-parsing packet-analyser packets sniffing pcap libpcap

airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.

•    Shell

---

This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at Github's Wiki.

evil-twin wps security beef bettercap sslstrip bash sniffing wireless aircrack handshake hacking pentesting pixie-dust wep docker denial-of-service wpa-wpa2 5ghz

BruteShark - Network Analysis Tool

•    CSharp

---

BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack. The main goal of the project is to provide solution to security researchers and network administrators with the task of network traffic analysis while they try to identify weaknesses that can be used by a potential attacker to gain access to critical points on the network.

network-diagram opensource pcap neo4j hacking sniffer bruteforce netcore kerberos pcapng pcap-files network-analysis cyber sniffing hashcat

Divert - Windows Packet Divert

•    C

---

Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert enables user-mode capturing/modifying/dropping of network packets sent to/from the Windows network stack. In summary, WinDivert can Capture network packets, Filter/drop network packets, Sniff network packets, (re)inject network packets, modify network packets. It can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc.

packet-capture packet-sniffer firewall divert-sockets packet-interception sniffing

sniffr - Browser, os and device detection

•    Javascript

---

Browser, OS and device detection based on the available user agent string. In case some browser-specific issue cannot be fixed uniformly across the browsers we may need to perform (sad gasp) some browser detection. For example, browser X crashes when function Y from library Z is used, so we have to detect when we are dealing with browser X and disable library Z.

browser-detection os-detection device-detection sniffing detection recognition browser os device

ksniff - Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark

•    Go

---

A kubectl plugin that utilize tcpdump and Wireshark to start a remote capture on any pod in your Kubernetes cluster. You get the full power of Wireshark with minimal impact on your running pods.

kubectl-plugins kubectl debugging sniffing wireshark

mimetype - A golang library for detecting mime types and extensions based on magic numbers

•    Go

---

The library exposes three functions you can use in order to detect a file type. See Godoc for full reference. See TestAppend for a working example. See Contribute if you consider the missing mime type should be included in the library by default.

mimetype mime-types magic-numbers filetype mime lookup extension validation sniffing

mimemagic - Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, XML document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database

•    Go

---

Powerful and versatile MIME sniffing package using pre-compiled glob patterns, magic number signatures, xml document namespaces, and tree magic for mounted volumes, generated from the XDG shared-mime-info database. See the Godoc reference, and cmd/mimemagic for an example implementation.

mime mime-types mime-database filetype detection sniffing magic-numbers extension xdg freedesktop

sharesniffer - Network share sniffer and auto-mounter for crawling remote file systems

•    Python

---

sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares.

sniffer storage file-sharing filesystem nfs smb cifs network-analysis crawler automount sniffing fileshare nmap nmap-scripts

btle-sniffer - Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them

•    Python

---

As this project relies on BlueZ, it will only run on Linux systems. The project further requires GLib2, PyGobject (commonly known as python-gi, python-gobject or pygobject, but not packaged on PyPi) and D-Bus.

bluetooth bluetooth-low-energy sniffer sniffing security security-audit security-scanner security-protocol security-vulnerability security-hardening wireless wireless-network wireless-communication

UserAgentParser - UserAgent parsing done right

•    PHP

---

User agent parsing is, was and will always be a painful thing. The target of this package is to make it less painful, by providing an abstract layer for many user agent parsers.

useragentparser sniffing parsing detection useragent