1.GyulyVGC / sniffnet
Comfortably monitor your network traffic 🕵️♂️
- networking
- packet-sniffer
- linux
- macos
- packet-capture
- rust
- +14 more
+4,922 stars
from 36,927 · score 8.50
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
60 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.putyy / res-downloader
TranslatedDownload common network resources from WeChat Channels (视频号), mini programs, Douyin, Kuaishou, Xiaohongshu, live streams, m3u8, Kugou, QQ Music, and more!
- wechat-video
- douyin
- kuaishou
- res-downloader
- xiaohongshu
+3,993 stars
from 17,085 · score 8.29
3.mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+3,451 stars
from 43,167 · score 8.15
+2,423 stars
from 10,108 · score 7.79
5.wanghongenpin / proxypin
Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems
- proxy
- zhuabao
- proxypin
- capture-traffic
- charles
- fiddler
+1,433 stars
from 12,902 · score 7.27
6.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+1,202 stars
from 19,033 · score 7.09
7.emanuele-f / PCAPdroid
No-root network monitor, firewall and PCAP dumper for Android
+1,127 stars
from 3,944 · score 7.03
8.wireshark / wireshark
Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark. You're welcome to submit pull requests there.
- wireshark
- packet-capture
- tshark
- stratoshark
+920 stars
from 9,222 · score 6.83
9.fortra / impacket
Impacket is a collection of Python classes for working with network protocols.
- impacket
- smb
- python
- netbios
- msrpc
- wmi
- +4 more
+646 stars
from 15,578 · score 6.47
10.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
- network-visualization
- network-discovery
- +9 more
+460 stars
from 12,213 · score 6.13
11.gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
+457 stars
from 15,073 · score 6.13
12.avwo / whistle
HTTP, HTTP2, HTTPS, Websocket debugging proxy
+339 stars
from 15,426 · score 5.83
13.kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
- devops
- sniffer
- +14 more
+288 stars
from 11,838 · score 5.67
14.arkime / arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
- network-monitoring
- pcap
- packet-capture
- nsm
- javascript
- c
- +2 more
+229 stars
from 7,328 · score 5.44
15.cilium / hubble
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
+216 stars
from 4,160 · score 5.38
16.basil00 / WinDivert
WinDivert: Windows Packet Divert
- windivert
- packet-capture
- packet-sniffer
- firewall
- divert-sockets
- network-programming
- +1 more
+196 stars
from 3,144 · score 5.28
17.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- pcap
- security
- arkime
- cybersecurity
- infosec
- +7 more
+192 stars
from 2,387 · score 5.26
18.pythops / oryx
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
+163 stars
from 2,448 · score 5.10
19.mock-server / mockserver-monorepo
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
- mock-server
- proxy
- java-client
- javascript-client
- node-module
- node-client
- +9 more
+149 stars
from 4,854 · score 5.01
+131 stars
from 6,641 · score 4.88
+127 stars
from 1,467 · score 4.85
22.linux-can / can-utils
Linux-CAN / SocketCAN user space applications
+121 stars
from 2,831 · score 4.80
23.ProxymanApp / atlantis
Capture HTTP/HTTPS, and Websocket from iOS app without proxy.
- proxyman
- ios
- maninthemiddle
- swizzle
- urlsession
- https-traffic
+117 stars
from 1,492 · score 4.77
24.cilium / pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
+115 stars
from 3,732 · score 4.75
+110 stars
from 2,700 · score 4.71
26.mandiant / flare-fakenet-ng
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
- gsoc-2026
+108 stars
from 2,116 · score 4.69
27.the-tcpdump-group / libpcap
the LIBpcap interface to various kernel packet capture mechanism
- pcap
- pcapng
- packet-capture
- sniffer
- libpcap
- bpf
- +2 more
+104 stars
from 3,081 · score 4.65
28.seladb / PcapPlusPlus
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP, WinDivert and PF_RING.
- pf-ring
- dpdk
- packet-parsing
- winpcap
- pcap-files
- pcap
- +14 more
+103 stars
from 3,060 · score 4.64
29.probelabs / goreplay
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
+102 stars
from 19,225 · score 4.63
30.sipcapture / homer
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
- monitoring
- troubleshooting
- voip
- rtc
- pcap
- flow
- +14 more
+98 stars
from 1,932 · score 4.60
31.hengyoush / kyanos
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
- command-line-tool
- ebpf
- network
- bpf
- capture
- sniffer
- +4 more
+90 stars
from 4,988 · score 4.51
32.odedshimon / BruteShark
Network Analysis Tool
- hacking
- pcap-files
- pcap
- cyber
- network-analysis
- hashcat
- +11 more
+86 stars
from 3,328 · score 4.47
33.mozillazg / ptcpdump
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
- ebpf-go
- network-capture
- +9 more
+74 stars
from 1,225 · score 4.32
34.ntop / PF_RING
High-speed packet processing framework
- pf-ring
- capture-packets
- high-speed
- 100gbit
- 10gbit
- 40gbit
+72 stars
from 2,918 · score 4.29
+72 stars
from 1,083 · score 4.29
36.google / gopacket
Provides packet processing capabilities for Go
+57 stars
from 6,740 · score 4.06
37.pmacct / pmacct
pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].
- netflow
- ipfix
- sflow
- bgp
- bmp
- kafka
- +14 more
+56 stars
from 1,201 · score 4.04
38.irontec / sngrep
Ncurses SIP Messages flow viewer
+50 stars
from 1,165 · score 3.93
39.alibaba / lightproxy
💎 Cross platform Web debugging proxy
+48 stars
from 3,161 · score 3.89
40.pmusolino / Wormholy
iOS network debugging, like a wizard 🧙♂️
+44 stars
from 2,580 · score 3.81
41.DanMcInerney / net-creds
Sniffs sensitive data from interface or pcap
+41 stars
from 1,827 · score 3.74
42.appneta / tcpreplay
Edit and replay captured network traffic at arbitrary speeds — a suite of pcap tools for *NIX and Windows.
- tcpreplay
- pcap
- netmap
- c
- replays-pcap-files
- flow
- +5 more
+41 stars
from 1,312 · score 3.74
43.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+32 stars
from 5,473 · score 3.50
44.calebmadrigal / trackerjacker
Like nmap for mapping wifi networks you're not connected to, plus device tracking
+27 stars
from 2,718 · score 3.33
45.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+27 stars
from 1,761 · score 3.33
46.kasketis / netfox
A lightweight, one line setup, iOS / OSX network debugging library! 🦊
- networking
- debugging
- urlsession
- urlrequest
- urlprotocol
- request
- +14 more
+26 stars
from 3,726 · score 3.30
47.nfstream / nfstream
NFStream: a Flexible Network Data Analysis Framework.
- data-science
- data-analysis
- data-mining
- network-analysis
- network-security
- network-monitoring
- +13 more
+25 stars
from 1,200 · score 3.26
48.kpcyrd / sniffglue
Secure multithreaded packet sniffer
+24 stars
from 1,246 · score 3.22
49.square / PonyDebugger
Remote network and data debugging for your native iOS app using Chrome Developer Tools
+22 stars
from 5,827 · score 3.14
50.simsong / tcpflow
TCP/IP packet demultiplexer. Download from:
- digital-forensics
- forensics
- tcp-protocol
- tcpip
+17 stars
from 1,762 · score 2.89
51.deepfence / PacketStreamerArchived
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
- soc
- network-analysis
- tcpdump-like
- packet-capture
- packet-sniffer
- observability
- +10 more
+15 stars
from 1,915 · score 2.77
52.adamfisk / LittleProxy
High performance HTTP proxy originally written by your friends at Lantern and now maintained by a stellar group of volunteer open source programmers.
+13 stars
from 2,118 · score 2.64
53.cisco / joyArchived
A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
+12 stars
from 1,353 · score 2.56
54.kbandla / dpkt
fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
+11 stars
from 1,152 · score 2.48
55.kdzwinel / betwixt
:zap: Web Debugging Proxy based on Chrome DevTools Network panel.
+10 stars
from 4,544 · score 2.40
56.google / nogotofailArchived
An on-path blackbox network traffic security testing tool
+9 stars
from 2,940 · score 2.30
+9 stars
from 2,710 · score 2.30
58.gamelinux / passivedns
A network sniffer that logs all DNS server replies for use in a passive DNS setup
+8 stars
from 1,729 · score 2.20
59.coderyi / NetworkEye
a iOS network debug library, monitor HTTP requests
- network-debug
- http-monitor
- ios
- objective-c
- networkeye
- nsurlconnection
- +4 more
+3 stars
from 1,396 · score 1.39
60.h2non / toxyArchived
Hackable HTTP proxy for resiliency testing and simulated network conditions
- http-proxy
- proxy
- reactive
- failure
- simulation
- network
- +4 more
+2 stars
from 2,709 · score 1.10