flare-fakenet-ng
Network sniffer
A tool to intercept and analyze network traffic for malware analysis and testing
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
2k stars
113 watching
362 forks
Language: Python
last commit: about 2 months ago
Linked from 1 awesome list
fakenet-nggsoc-2024malware-analysismandiant-flaretraffic-redirection
Related projects:
Repository | Description | Stars |
---|---|---|
mandiant/capa | An executable file analysis tool that identifies capabilities and potential malicious behaviors. | 4,944 |
austin-taylor/flare | An analytical framework designed to identify malicious behavior in networks by analyzing network traffic and domain information. | 449 |
tomchop/malcom | Analyzes network traffic to detect malware communication and behavior | 1,158 |
ch3k1/squidmagic | Analyzes web-based network traffic to detect malicious command and control servers using Squid proxy server and Spamhaus | 78 |
nesfit/netfoxdetective | A network forensic analysis tool that extracts content from communication protocols and visualizes it in various ways | 38 |
hatriot/zarp | A network attack tool designed to manage and analyze local networks | 1,449 |
srinivas11789/pcapxray | A tool to visualize network traffic and extract information from packet captures | 1,700 |
xplico/xplico | Analyzes network traffic data from captured packets to extract and decode specific protocols and information. | 183 |
activecm/rita | A framework for detecting malicious communication patterns in network traffic by analyzing Zeek logs. | 215 |
hgascon/acapulco | A tool for analyzing and visualizing network traffic data using event clustering and parallel coordinates graphs. | 10 |
cisagov/malcolm | A network traffic analysis tool suite that accepts various data formats and provides visualization and incident response capabilities. | 2,001 |
eremit4/cs-discovery | Detects malicious servers in network traffic by analyzing encoded byte patterns | 20 |
antirez/hping | A network tool for custom TCP/IP packet sending and target reply display | 1,455 |
dhoelzer/showmethepackets | Tools and resources for network monitoring and analysis used in the SANS SEC503 course | 214 |
mandiant/goresym | A tool for extracting metadata from compiled Go binaries | 628 |