pcap-analysis

应急响应流量分析工具，支持pcap、excel、log等多种数据源，同时结合加解密、反编译等多个常用工作流。

a collection of useful wireshark/tshark plugins

Forensic System: Professionelles Analyse-Tool für Computer- und Netzwerk-Forensik (DFIR). Bietet automatische Korrelation von Endpunkt-Prozessen und Netzwerk-Traffic, RAM-Analyse und gerichtsverwertbare Beweissicherung.

ICS/OT cybersecurity scanner — Modbus, S7Comm & DNP3. Passive PCAP analysis + safe read-only Modbus scans. JSON/HTML reports + executive dashboards.

🗝️ The Voidweaver's Trail: Season 1 Investigation Reports for Echo Response. Uncovering hidden identities and securing the Nullform Key across the Cyber Realm via advanced forensics and cryptanalysis.

Python network forensics tool that detects C2 beaconing, port scans, data exfiltration, DNS tunneling, and 20+ threat patterns in PCAP files. Behavioral analysis for the encrypted traffic era. Every finding maps to MITRE ATT&CK.

C2 Framework Fingerprinter: identifies Cobalt Strike, Metasploit, Sliver, Havoc, Covenant, Brute Ratel from PCAP traffic using beacon analysis, URI patterns, JA3, and HTTP headers

Professional VoIP diagnostic tool - Analyzes PCAP files and detects one-way audio, NAT issues, call quality problems

RogueByte WhatsApp Forensics Ultimate v2.0 - Advanced WhatsApp & Network Digital Forensics Engine

AirSentinel is a Python-based cross-platform tool with a PyQt5 GUI for live Wi-Fi scanning and offline PCAP analysis. It detects network details, assigns risk levels, and exports results in JSON, Markdown, or PDF, making it valuable for cybersecurity research and testing.

Analysis and Visualization of network traffic from data centres based on trace.pcap file.

HTTP PCAP analysis using Wireshark, NetworkMiner and IP geolocation to investigate network traffic behaviour

Benchmark code and interactive results for autonomous network-attack detection by tool-using LLM agents investigating raw PCAPs.

A security-focused Python/Scapy platform for network visibility, behavioral detection, offline PCAP investigation, IOC extraction, and controlled response.

I do not know what I am doing yet! But it is my research!

A powerful, multi-threaded password cracking tool written in Go with support for multiple hash types, PCAP analysis, and custom transformation rules.

Stratum is an open-source PCAP analyzer that turns network captures into flows, protocol events, correlated activity, and security findings through a compact web interface.

Scripts check the reputation of IP addresses and domain names present in your .pcap file using VirusTotal's free API. Provide an URL to your local LLM to prepare an automatic report. No data gets leaked to cloud LLM models.

AEGIS-Omega is a high-performance, hybrid multi-layer Intrusion Detection System (IDS). It features a 4-layer detection strategy—Signature Analysis, Autoencoder Anomaly Detection, BiLSTM Deep Learning, and Ensemble Fusion—to identify attack types with 95% F1-score. Includes a FastAPI backend, React dashboard, and PCAP,Netflow analysis.

🛡️ Enhance network security with AEGIS-Ω, a hybrid intrusion detection system that combines signature and anomaly detection using advanced deep learning methods.