network-forensics

Star

Here are 56 public repositories matching this topic...

Language: All

Filter by language

All 56 Python 19 HTML 4 Jupyter Notebook 4 Shell 4 PowerShell 3 C++ 2 JavaScript 2 C 1 Go 1 Rust 1

Sort: Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

seladb / PcapPlusPlus

Star 3k

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

windows linux pcap networking cpp dpdk network-forensics pf-ring packet-parsing mac-osx network-tools winpcap pcap-files packet-processing libpcap multiplatform ebpf packet-crafting tcp-reassembly pcapplusplus

Updated Oct 17, 2025
C++

FoxIO-LLC / ja4

Star 1.6k

JA4+ is a suite of network fingerprinting standards

network-forensics cybersecurity network-analysis ja3 jarm ja3-fingerprint ja4 ja4x ja4-fingerprint ja4h

Updated Oct 10, 2025
Rust

MISP / misp-warninglists

Star 589

Warning lists to inform users of MISP about potential false-positives or other information in indicators

network-forensics dfir misp threat-intelligence false-positive misp-warninglists

Updated Oct 15, 2025
Python

medbenali / CyberScan

Star 451

CyberScan: Network's Forensics ToolKit

opensource service-discovery network-forensics geolocation network-visualization network-analysis network-security information-gathering portscanner pcap-analyzer

Updated Jan 23, 2019
Python

faucetsdn / poseidon

Star 432

Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.

docker security machine-learning automation pcap networking network-forensics sdn network-monitoring network-traffic-capture pcap-files sdn-controller network-analysis hacktoberfest software-defined-network network-traffic faucet pcap-analyzer network-traffic-classification

Updated Jul 3, 2025
Python

fkie-cad / friTap

Star 420

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

android linux tls ssl security security-audit https network-forensics binary-analysis frida network-analysis tcpdump network-capture hooking ssldump android-https-capture

Updated Oct 2, 2025
JavaScript

stamparm / blackbook

Star 260

Blackbook of malware domains

security network-forensics domains intrusion-detection network-monitoring threats malware-detection

Updated Jun 12, 2025

asiamina / A-Course-on-Digital-Forensics

Star 194

A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University

network-forensics reverse-engineering courses digital-forensics memory-forensics mobile-forensics disk-forensics

Updated Oct 5, 2023
Rich Text Format

lyscf / FlowSage

Star 59

一款专为 CTF 竞赛设计的智能流量分析工具,支持多协议解析与自动化 Flag 提取,助力快速解题。

golang network-forensics traffic-analysis ctf

Updated Sep 22, 2025

nipunjaswal / networkforensics

Star 55

Hands-On Network Forensics by Nipun Jaswal

network-forensics forensics malware-analysis pcap-analyzer forensics-investigations

Updated Jun 26, 2023
Python

light-hat / smart_pcap

Star 43

In progress. Web service for analyzing network traffic dumps (PCAP) with RAG. Detection of attacks through signature methods, integration with Threat Intelligence systems and AI.

security machine-learning ai docker-compose network-forensics web-application forensics cybersecurity web-service pcap-analyzer rag

Updated Oct 17, 2025
Python

fkie-cad / pcapFS

Star 41

A FUSE module to mount captured network data

fuse pcap network-forensics forensics pcapng pcap-files

Updated Jun 20, 2025
C++

cdpxe / nefias

Star 27

Network Forensic & Anomaly Detection System; tailored for covert channel/network steganography detection

linux shell bash security network network-forensics distributed-computing steganography network-monitoring infosec networks scientific-computations shell-scripts information-security information-hiding anomaly-detection scientific-research network-steganography covert-channels network-covert-channels

Updated May 13, 2024
Shell

cdpxe / NetworkCovertChannels

Star 16

Some network covert channel projects of my own research, containing a protocol channel tool (protocol switching covert channel, PCT/PSCC), a protocol hopping covert channel (PHCC) tool, the protocol channel-aware active warden (PCAW) and ... VSTT.

network-forensics network-science steganography active infosec secret-sharing warden network-analysis information-security covert-channel information-hiding network-security stego scientific-software network-steganography network-traffic-generator protocol-channels protocol-hopping protocol-switching-covert-channels protocol-hopping-covert-channels

Updated Apr 2, 2025
C

fkie-cad / TLExport

Star 8

The goal of this project is to help researchers/investigaters to export the decrypted TLS content into a PCAP

pcap network-forensics pcapng network-analysis

Updated Aug 17, 2024
Python

farazulhoda / network-traffic-analysis

Star 7

The Network Traffic Analyzer is a Python script designed for capturing and analyzing network traffic, focusing primarily on DNS traffic. This tool provides users with the capability to monitor network activity in real-time and extract relevant information from captured packets.

open-source network-forensics python3 cybersecurity data-analysis packet-sniffer network-analysis whois-lookup traffic-monitoring network-traffic security-analysis python-scripting dns-analysis scapy-library networking-utility network-monitoring-tool

Updated Apr 9, 2024
HTML

MartinaZembjakova / Network-forensic-tools-taxonomy

Star 7

Overview of some network tools that can be used during the network forensics (extended with some publicly available datasets)

network-forensics overview network-tools network-dataset

Updated May 10, 2021
HTML

bustaPcap

abaker2010 / bustaPcap

Star 5

Program for static analysis of pcap files and recreation of information sent

python pcap network-forensics python3 network-tools python-3 pcapng network-analysis pcap-analyzer pyshark pcap-parser

Updated Jun 29, 2023
Python

Khaoulahidaawi / NIPDS

Star 4

Designing and implementing a Packet-Based Intelligent Network phishing Intrusion Detection system. The idea of the design is to use machine learning to classify Network packets to benign and phishing in real-time flow (for both http/https protocol) based on DNS records and domain name features. It operates by using a pre-programmed list of known...

dns http ai network machine-learning-algorithms network-forensics phishing http-server ids intrusion-detection nids network-analysis dns-record phishing-attacks dpkt phishing-detection scapy-library network-based

Updated Aug 1, 2022
Jupyter Notebook

MikeHorn-git / Hydra

Star 2

Hunt sql commands in pcap

pcap network-forensics forensics sqlinjection pyshark

Updated Sep 5, 2025
Python

Improve this page

Add a description, image, and links to the network-forensics topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the network-forensics topic, visit your repo's landing page and select "manage topics."

Learn more

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly