BruteShark
A Network Forensic Analysis Tool (NFAT) for deep inspection of PCAP files and live traffic, extracting credentials, building network maps, and reconstructing sessions.
What is BruteShark?
BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep inspection of network traffic from PCAP files or live captures. It extracts credentials, builds network maps, reconstructs sessions, carves files, and analyzes VoIP calls to help identify security vulnerabilities. The tool provides both a GUI for Windows and a CLI for Windows and Linux, with a modular architecture for extensibility.
Security researchers, network administrators, and forensic analysts who need to analyze network traffic for weaknesses, incident response, or penetration testing.
BruteShark offers a comprehensive, open-source alternative to commercial NFAT tools, with features like Hashcat integration for hash cracking, visual network mapping, and cross-platform support. Its modular design allows for easy expansion and independent use of components.
Overview
Network Analysis Tool
Use Cases
Best For
- Extracting credentials and authentication hashes from captured network traffic
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
