Add network tools

This commit is contained in:
rshipp 2015-05-09 12:20:31 -06:00
parent 28c61e28b7
commit 8051d42fc7

View File

@ -218,6 +218,21 @@ A curated list of awesome malware analysis tools and resources. Inspired by
*Analyze network interactions.*
* [INetSim](http://www.inetsim.org/) - Network service emulation, useful when
building a malware lab.
* [mitmproxy](https://mitmproxy.org/) - Intercept network traffic on the fly.
* [NetworkMiner](http://www.netresec.com/?page=NetworkMiner) - Network
forensic analysis tool, with a free version.
* [ngrep](http://ngrep.sourceforge.net/) - Search through network traffic
like grep.
* [Tcpdump](http://www.tcpdump.org/) - Collect network traffic.
* [tcpick](http://tcpick.sourceforge.net/) - Trach and reassemble TCP streams
from network traffic.
* [tcpxtract](http://tcpxtract.sourceforge.net/) - Extract files from network
traffic.
* [Wireshark](https://www.wireshark.org/) - The network traffic analysis
tool.
## Memory Forensics
*Tools for dissecting malware in memory images or running systems.*