ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
created at Dec. 30, 2009, 8:14 a.m.
A Single Library Parser to extract meta information,static analysis and detect macros within the files.
created at Sept. 23, 2017, 1:26 p.m.
Simple tool to find the yara matches on a file
created at Aug. 22, 2018, 6:52 a.m.
Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
created at July 26, 2015, 6 a.m.
Cryptographic Dataset Generation & Modelling Framework
created at Sept. 2, 2018, 3:15 p.m.
Ghidra is a software reverse engineering (SRE) framework
created at March 1, 2019, 3:27 a.m.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
created at Dec. 17, 2014, 1:53 a.m.