From 8051d42fc70fda37c8972ee63042e9c4d35a5c0d Mon Sep 17 00:00:00 2001 From: rshipp Date: Sat, 9 May 2015 12:20:31 -0600 Subject: [PATCH] Add network tools --- README.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/README.md b/README.md index f01c2f1..c680b44 100644 --- a/README.md +++ b/README.md @@ -218,6 +218,21 @@ A curated list of awesome malware analysis tools and resources. Inspired by *Analyze network interactions.* +* [INetSim](http://www.inetsim.org/) - Network service emulation, useful when + building a malware lab. +* [mitmproxy](https://mitmproxy.org/) - Intercept network traffic on the fly. +* [NetworkMiner](http://www.netresec.com/?page=NetworkMiner) - Network + forensic analysis tool, with a free version. +* [ngrep](http://ngrep.sourceforge.net/) - Search through network traffic + like grep. +* [Tcpdump](http://www.tcpdump.org/) - Collect network traffic. +* [tcpick](http://tcpick.sourceforge.net/) - Trach and reassemble TCP streams + from network traffic. +* [tcpxtract](http://tcpxtract.sourceforge.net/) - Extract files from network + traffic. +* [Wireshark](https://www.wireshark.org/) - The network traffic analysis + tool. + ## Memory Forensics *Tools for dissecting malware in memory images or running systems.*