1.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+555 stars
from 19,683 · score 6.32
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
22 repositories by Attention Score · Aug 8, 2026 – Nov 5, 2026 (UTC)
2.fortra / impacket
Impacket is a collection of Python classes for working with network protocols.
- impacket
- smb
- python
- netbios
- msrpc
- wmi
- +4 more
+316 stars
from 15,916 · score 5.76
3.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- pcap
- security
- arkime
- cybersecurity
- infosec
- +7 more
+120 stars
from 2,466 · score 4.80
4.basil00 / WinDivert
WinDivert: Windows Packet Divert
- windivert
- packet-capture
- packet-sniffer
- firewall
- divert-sockets
- network-programming
- +1 more
+103 stars
from 3,239 · score 4.64
5.probelabs / goreplay
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
+48 stars
from 19,277 · score 3.89
6.the-tcpdump-group / libpcap
the LIBpcap interface to various kernel packet capture mechanism
- pcap
- pcapng
- packet-capture
- sniffer
- libpcap
- bpf
- +2 more
+45 stars
from 3,140 · score 3.83
7.sipcapture / homer
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
- monitoring
- troubleshooting
- voip
- rtc
- pcap
- flow
- +14 more
+33 stars
from 1,997 · score 3.53
8.pmacct / pmacct
pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].
- netflow
- ipfix
- sflow
- bgp
- bmp
- kafka
- +14 more
+26 stars
from 1,231 · score 3.30
9.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+24 stars
from 5,484 · score 3.22
10.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
- infosec
- network-traffic-analysis
- +7 more
+23 stars
from 474 · score 3.18
11.haga-rak / fluxzy.core
Fast and fully streamed Man-On-The-Middle to intercept, record, impersonate and alter HTTP/1.1, H2, websocket and gRPC traffic.
+21 stars
from 355 · score 3.09
+16 stars
from 909 · score 2.83
13.jpr5 / ngrep
ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
- sniffer
- grepping
+12 stars
from 1,014 · score 2.56
14.square / PonyDebugger
Remote network and data debugging for your native iOS app using Chrome Developer Tools
+7 stars
from 5,841 · score 2.08
15.cisco / joyArchived
A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
+6 stars
from 1,360 · score 1.95
16.kbandla / dpkt
fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
+6 stars
from 1,157 · score 1.95
17.gamelinux / passivedns
A network sniffer that logs all DNS server replies for use in a passive DNS setup
+5 stars
from 1,732 · score 1.79
18.irino / softflowd
softflowd: A flow-based network traffic analyser capable of Cisco NetFlow data export software.
- netflow
- netflow-exports
- netflow-v9
- netflow-v5
- ipfix
- psamp
+5 stars
from 213 · score 1.79
19.Tbruno25 / can-explorer
Visualize CAN Bus messages in real time
+2 stars
from 302 · score 1.10
20.packetfu / packetfu
PacketFu, a mid-level packet manipulation library for Ruby
+1 stars
from 393 · score 0.69
21.eik00d / CANToolz
CANToolz - framework for black-box CAN network analysis
+1 stars
from 317 · score 0.69
22.ebu / smpte2110-analyzer
Analyzer to inspect network packets generated by the SMPTE ST 2110 specification.
+1 stars
from 91 · score 0.69