Ranked by Attention Score: stars gained over the last 90 complete days
50 repositories by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
TranslatedDownload common network resources from WeChat Channels (视频号), mini programs, Douyin, Kuaishou, Xiaohongshu, live streams, m3u8, Kugou, QQ Music, and more!
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Comfortably monitor your network traffic 🕵️♂️
Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems
No-root network monitor, firewall and PCAP dumper for Android
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark. You're welcome to submit pull requests there.
Impacket is a collection of Python classes for working with network protocols.
Scapy: the Python-based interactive packet manipulation program & library.
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
HTTP, HTTP2, HTTPS, Websocket debugging proxy
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
WinDivert: Windows Packet Divert
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
Linux-CAN / SocketCAN user space applications
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
the LIBpcap interface to various kernel packet capture mechanism
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP, WinDivert and PF_RING.
Packet, where are you? -- eBPF-based Linux kernel networking debugger
Capture HTTP/HTTPS, and Websocket from iOS app without proxy.
Network Analysis Tool
High-speed packet processing framework
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
Sniffs sensitive data from interface or pcap
Dshell is a network forensic analysis framework.
Provides packet processing capabilities for Go
iOS network debugging, like a wizard 🧙♂️
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
💎 Cross platform Web debugging proxy
A lightweight, one line setup, iOS / OSX network debugging library! 🦊
Like nmap for mapping wifi networks you're not connected to, plus device tracking
Remote network and data debugging for your native iOS app using Chrome Developer Tools
TCP/IP packet demultiplexer. Download from:
High performance HTTP proxy originally written by your friends at Lantern and now maintained by a stellar group of volunteer open source programmers.
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
:zap: Web Debugging Proxy based on Chrome DevTools Network panel.
A network sniffer that logs all DNS server replies for use in a passive DNS setup
Sherlock Holmes of the networking layer. :male_detective:
Hackable HTTP proxy for resiliency testing and simulated network conditions