Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

A cli tool to proxy and analyze TCP connections.

the TCPdump network dissector

How to get free wifi.

Process-aware, eBPF-based tcpdump

Ferries Packets Across Forbidden Boundaries 👀

A Software Probe for network packet capturing and forwarding in Cloud/Kubernetes and Virtualized environment.

🤒 A modern alternative network traffic sniffer.

A command line utility helps to capture and dump HTTP stream

A repository of DFIR-related Mind Maps geared towards the visual learners!

tcpterm is a packet visualizer in TUI.

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

Dump unix domain socket traffic with bpf

A fancy-schmancy tcpdump-esque TUI, programmed in Go.

webShark: Wireshark & PCAPs in your browser, 100% Open-Source Cloudshark alternative based on sharkd

Hotwire allows you to study network traffic of a few popular protocols in a simple way

Justniffer Just A Network TCP Packet Sniffer. Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate web server log files, track response times and extract all "intercepted" files from the HTTP traffic

Merge multiple pcap files together, gracefully.

Upload files done during my research.

Tool for capture and parse grpc traffic

I developed a rigorous cybersecurity project portfolio on mock clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.

TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool

Learn how to set up a fake authentication web page on a fake WiFi network.

A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.

cheatsheat-tcpdump

ebpf-based tcpdump

IoT networking utilities for RT-Thread. Such as: ping, tftp, iperf, netio, ntp, telnet and tcpdump.

tcpslice concatenates multiple pcap files together, or extracts time slices from one or more pcap files.

kubectl plugin that performs tpcdump network captures on resources inside kubernetes cluster