From fb35ce1de120e5fb483bbdd2126a387da292186e Mon Sep 17 00:00:00 2001 From: Meitar M Date: Fri, 26 Jul 2019 14:15:43 -0400 Subject: [PATCH 1/3] =?UTF-8?q?Add=20new=20section=20("Network=20Packet=20?= =?UTF-8?q?Replay=E2=80=A6")=20with=20three=20tools.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index c8d8415..3a05dbc 100644 --- a/README.md +++ b/README.md @@ -39,6 +39,7 @@ Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Plea * [Exfiltration Tools](#exfiltration-tools) * [Network Reconnaissance Tools](#network-reconnaissance-tools) * [Protocol Analyzers and Sniffers](#protocol-analyzers-and-sniffers) + * [Network Traffic Replay and Editing Tools](#network-traffic-replay-and-editing-tools) * [Proxies and Machine-in-the-Middle (MITM) Tools](#proxies-and-machine-in-the-middle-mitm-tools) * [Transport Layer Security Tools](#transport-layer-security-tools) * [Wireless Network Tools](#wireless-network-tools) @@ -365,6 +366,12 @@ See also [awesome-industrial-control-system-security](https://github.com/hslatma * [sniffglue](https://github.com/kpcyrd/sniffglue) - Secure multithreaded packet sniffer. * [tcpdump/libpcap](http://www.tcpdump.org/) - Common packet analyzer that runs under the command line. +### Network Traffic Replay and Editing Tools + +* [bittwist](http://bittwist.sourceforge.net/) - Simple yet powerful libpcap-based Ethernet packet generator useful in simulating networking traffic or scenario, testing firewall, IDS, and IPS, and troubleshooting various network problems. +* [tcpreplay](https://tcpreplay.appneta.com/) - Suite of free Open Source utilities for editing and replaying previously captured network traffic. +* [WireEdit](https://wireedit.com/) - Full stack WYSIWYG pcap editor (requires a free license to edit packets). + ### Proxies and Machine-in-the-Middle (MITM) Tools * [BetterCAP](https://www.bettercap.org/) - Modular, portable and easily extensible MITM framework. From 365786a0146ee13cbff62e45de2008abfb969fd2 Mon Sep 17 00:00:00 2001 From: Meitar M Date: Fri, 26 Jul 2019 14:25:48 -0400 Subject: [PATCH 2/3] Add TraceWrangler, a powerful pcap and pcapng file editor. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 3a05dbc..310d62f 100644 --- a/README.md +++ b/README.md @@ -370,6 +370,7 @@ See also [awesome-industrial-control-system-security](https://github.com/hslatma * [bittwist](http://bittwist.sourceforge.net/) - Simple yet powerful libpcap-based Ethernet packet generator useful in simulating networking traffic or scenario, testing firewall, IDS, and IPS, and troubleshooting various network problems. * [tcpreplay](https://tcpreplay.appneta.com/) - Suite of free Open Source utilities for editing and replaying previously captured network traffic. +* [TraceWrangler](https://www.tracewrangler.com/) - Network capture file toolkit that can edit and merge `pcap` or `pcapng` files with batch editing features. * [WireEdit](https://wireedit.com/) - Full stack WYSIWYG pcap editor (requires a free license to edit packets). ### Proxies and Machine-in-the-Middle (MITM) Tools From f6561276635aa7cc1912f915a60b789031717a9a Mon Sep 17 00:00:00 2001 From: Meitar M Date: Fri, 26 Jul 2019 14:29:24 -0400 Subject: [PATCH 3/3] Move `hping3`, `pig`, and `scapy` to new, more specific section. --- README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 310d62f..5af3440 100644 --- a/README.md +++ b/README.md @@ -309,12 +309,9 @@ See also [awesome-industrial-control-system-security](https://github.com/hslatma * [Zarp](https://github.com/hatRiot/zarp) - Network attack tool centered around the exploitation of local networks. * [dnstwist](https://github.com/elceef/dnstwist) - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage. * [dsniff](https://www.monkey.org/~dugsong/dsniff/) - Collection of tools for network auditing and pentesting. -* [hping3](https://github.com/antirez/hping) - Network tool able to send custom TCP/IP packets. * [impacket](https://github.com/CoreSecurity/impacket) - Collection of Python classes for working with network protocols. -* [pig](https://github.com/rafael-santiago/pig) - GNU/Linux packet crafting tool. * [routersploit](https://github.com/reverse-shell/routersploit) - Open source exploitation framework similar to Metasploit but dedicated to embedded devices. * [rshijack](https://github.com/kpcyrd/rshijack) - TCP connection hijacker, Rust rewrite of `shijack`. -* [scapy](https://github.com/secdev/scapy) - Python-based interactive packet manipulation program and library. ### DDoS Tools @@ -368,10 +365,13 @@ See also [awesome-industrial-control-system-security](https://github.com/hslatma ### Network Traffic Replay and Editing Tools -* [bittwist](http://bittwist.sourceforge.net/) - Simple yet powerful libpcap-based Ethernet packet generator useful in simulating networking traffic or scenario, testing firewall, IDS, and IPS, and troubleshooting various network problems. -* [tcpreplay](https://tcpreplay.appneta.com/) - Suite of free Open Source utilities for editing and replaying previously captured network traffic. * [TraceWrangler](https://www.tracewrangler.com/) - Network capture file toolkit that can edit and merge `pcap` or `pcapng` files with batch editing features. * [WireEdit](https://wireedit.com/) - Full stack WYSIWYG pcap editor (requires a free license to edit packets). +* [bittwist](http://bittwist.sourceforge.net/) - Simple yet powerful libpcap-based Ethernet packet generator useful in simulating networking traffic or scenario, testing firewall, IDS, and IPS, and troubleshooting various network problems. +* [hping3](https://github.com/antirez/hping) - Network tool able to send custom TCP/IP packets. +* [pig](https://github.com/rafael-santiago/pig) - GNU/Linux packet crafting tool. +* [scapy](https://github.com/secdev/scapy) - Python-based interactive packet manipulation program and library. +* [tcpreplay](https://tcpreplay.appneta.com/) - Suite of free Open Source utilities for editing and replaying previously captured network traffic. ### Proxies and Machine-in-the-Middle (MITM) Tools