Forensics / Malware Analysis / Networking
by do son · Published June 18, 2019 · Last modified February 21, 2021
histstat This is a cross-platform command-line tool for obtaining live, rudimentary network connection data on a computer system. This tool was designed for network and security analysts to easily view connections on a system...
NETworkManager A powerful tool for managing networks and troubleshoot network problems! Features Network Interface – Information, Configure The Network Interface tool detects all network adapters of the computer with the most important information (such as IP...
Venom – A Multi-hop Proxy for Penetration Testers Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet and...
nac_bypass Script collection to bypass Network Access Control (NAC, 802.1x) Requirements The basic requirement for an NAC bypass is access to a device that has already been authenticated. This device is used to log...
Overview Exitmap is a fast and modular Python-based scanner for Tor exit relays. Exitmap modules implement tasks that are run over (a subset of) all exit relays. If you have a background in functional...
fingerprint all the things! A script for extracting network metadata and fingerprints such as JA3 and HASSH from packet capture files (pcap) or live network traffic. The main use-case is for monitoring honeypots, but you can also...
Linux / Networking / Reverse Engineering
by do son · Published May 29, 2019 · Last modified June 29, 2023
BPF Compiler Collection (BCC) BCC is a toolkit for creating efficient kernel tracing and manipulation programs and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known...
Bagel Bagel is a little native iOS network debugger. It’s not a proxy debugger so you don’t have to mess around with certificates, proxy settings etc. As long as your iOS devices and your...
Stunnel is a proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs’ code. Its architecture is optimized for security, portability, and scalability (including load-balancing), making it suitable...
LET’S MAP [YOUR] NETWORK (v2.0) It is utmost important for any security engineer to understand their network first before securing it and it becomes a daunting task to have a ‘true’ understanding of a...
Xplico Xplico is a Network Forensic Analysis Tool (NFAT). The goal of Xplico is extracted from internet traffic to capture the data of the application contained. For example, from a pcap file Xplico extracts...
Networking / Web Information Gathering
by do son · Published April 18, 2019 · Last modified October 10, 2021
htrace.sh Simple shell script to debugging http/https traffic tracing and response headers. Support external security tools: Mozilla Observatory and SSL Labs API. It is useful for: checking properly domain configuration (web servers/reverse proxies) displaying basic HTTP...
The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4, and VMPS. It is available under the terms of the GNU GPLv2. Using RADIUS allows authentication and...
Arkime is an open-source, large-scale, full packet capturing, indexing, and a database system. Arkime augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An...
FakeNet-NG is a next-generation dynamic network analysis tool for malware analysts and penetration testers. It is open source and designed for the latest versions of Windows (and Linux, for certain modes of operation). FakeNet-NG...
Secure Your Connection
