FastNetMon – A high-performance DoS/DDoS load analyzer built on top of multiple packet capture engines (NetFlow, IPFIX, sFLOW, SnabbSwitch, netmap, PF_RING, PCAP). What can we do? We can detect hosts in our networks sending...
Sloth Sloth is a Mac application that displays all open files and sockets in use by all running applications on your system. This makes it easy to inspect which apps are using which files...
Cuishark A protocol analyzer like a Wireshark on CUI. It is very-powerful protocol analyzer which has really rich UI. And you can use such a rich UI for protocol analysis on just CUI without...
ProxyBroker ProxyBroker is an open source tool that asynchronously finds public proxies from multiple sources and concurrently checks them. Features Finds more than 7000 working proxies from ~50 sources. Support protocols: HTTP(S), SOCKS4/5. Also,...
Tcpreplay is a suite of GPLv3 licensed utilities for UNIX (and Win32 under Cygwin) operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal/Wireshark. It allows you to classify traffic as client...
htun htun is a transparent tunnel for transporting IP traffic over HTTP or TCP. It was developed with situations in mind where traffic to the internet is restricted. For instance, some networks don’t allow...
Wonder Shaper is a script that allows the user to limit the bandwidth of one or more network adapters. It does so by using iproute’s tc command but greatly simplifies its operation. Wonder Shaper...
PcapViz PcapViz visualizes network topologies and provides graph statistics based on pcap files. It should be possible to determine key topological nodes or data exfiltration attempts more easily. Features Draw network topologies (Layer 2)...
Maintaining Access / Networking
by do son · Published February 22, 2019 · Last modified August 19, 2021
shellz is a small utility to track and control your ssh, telnet, web and custom shells. Changelog v1.6 New Features c9aea01 new: added kubernetes support (closes #12) Fixes f951d8b fix: using more recent go versions Misc 1bfad07 misc: updated...
joincap Merge multiple pcap files together, gracefully. Why? I believe skipping corrupt packets is better than failing the entire merge job. When using tcpslice ormergecap sometimes pcapfix is needed to fix bad input pcap files. One option is to...
Networking / Sniffing & Spoofing
by do son · Published February 19, 2019 · Last modified April 25, 2021
rshijack tcp connection hijacker, rust rewrite of shijack from 2001. This was written for TAMUctf 2018, brick house 100. The target was a telnet server that was protected by 2FA. Since the challenge wasn’t authenticated, there...
DNS Tunnel Checker Basic DNS server checker tool based on a server+client architecture to map out which resource record types are useable over a DNS server. With reasonable knowledge, this tool can be used...
orjail a more secure way to force programs to exclusively use tor network. why? we’ve tried to deanonymize a program executed in torsocks environment and that was not so difficult as torsocks use LD_PRELOAD,...
Ethr Ethr is a cross-platform network performance measurement tool written in golang. The goal of this project is to provide a native tool for comprehensive network performance measurements of bandwidth, connections/s, packets/s, latency, loss...
sshuttle: where transparent proxy meets VPN meets ssh A transparent proxy server that works as a poor man’s VPN. Forwards over ssh. Doesn’t require admin. Works with Linux and MacOS. Supports DNS tunneling. sshuttle...
Secure Your Connection
