pcapfex
A Python tool that finds and extracts files from packet capture (pcap) files for forensic analysis.
What is pcapfex?
pcapfex is a Python-based forensic tool that extracts files from packet capture (pcap) files. It automatically scans network traffic data to identify and recover embedded files, even when non-standard protocols are used, aiding in digital forensics and security investigations.
Digital forensics analysts, security researchers, and network administrators who need to extract files from network packet captures for investigation or analysis.
It offers a simple, extensible solution for file extraction from pcaps with a plugin system that allows customization, distinguishing it from more rigid or protocol-specific tools.
Overview
'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files
Use Cases
Best For
- Extracting files from network packet captures for forensic investigations
- Recovering data from pcap files using non-standard or custom protocols
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
