diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json index cfbf33a..b74a4b2 100644 --- a/.obsidian/workspace.json +++ b/.obsidian/workspace.json @@ -13,12 +13,12 @@ "state": { "type": "markdown", "state": { - "file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md", + "file": "tools/security/pentest-recon-enum/Packet Capture & Analysis.md", "mode": "source", "source": false }, "icon": "lucide-file", - "title": "Recon & Threat Reputation" + "title": "Packet Capture & Analysis" } } ] @@ -94,7 +94,7 @@ "state": { "type": "backlink", "state": { - "file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md", + "file": "tools/security/pentest-recon-enum/Packet Capture & Analysis.md", "collapseAll": false, "extraContext": false, "sortOrder": "alphabetical", @@ -104,7 +104,7 @@ "unlinkedCollapsed": true }, "icon": "links-coming-in", - "title": "Backlinks for Recon & Threat Reputation" + "title": "Backlinks for Packet Capture & Analysis" } }, { @@ -113,12 +113,12 @@ "state": { "type": "outgoing-link", "state": { - "file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md", + "file": "tools/security/pentest-recon-enum/Packet Capture & Analysis.md", "linksCollapsed": false, "unlinkedCollapsed": true }, "icon": "links-going-out", - "title": "Outgoing links from Recon & Threat Reputation" + "title": "Outgoing links from Packet Capture & Analysis" } }, { @@ -156,13 +156,13 @@ "state": { "type": "outline", "state": { - "file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md", + "file": "tools/security/pentest-recon-enum/Packet Capture & Analysis.md", "followCursor": false, "showSearch": false, "searchQuery": "" }, "icon": "lucide-list", - "title": "Outline of Recon & Threat Reputation" + "title": "Outline of Packet Capture & Analysis" } }, { @@ -196,6 +196,8 @@ }, "active": "9b2e89c682f5d2ef", "lastOpenFiles": [ + "tools/security/pentest-recon-enum/Recon & Threat Reputation.md", + "tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md", "tools/security/Untitled.md", "tools/security/ssl-tls-web-security.md", "README.md", @@ -223,8 +225,6 @@ "documentation/learning-resources/daily-knowledge-news.md", "documentation", "docs/sysadmin-devops/terminal-shell-productivity/shell-functions.md", - "docs/sysadmin-devops/terminal-shell-productivity/shell-one-liners.md", - "tools/system-services.md", "tools/security/hardening-compliance", "tools/network-engineering/diagnostics-troubleshooting/protocols-general", "docs/sysadmin-devops/ssh-remote-access", diff --git a/tools/security/pentest-recon-enum/Packet Capture & Analysis.md b/tools/security/pentest-recon-enum/Packet Capture & Analysis.md index f970dad..06189c8 100644 --- a/tools/security/pentest-recon-enum/Packet Capture & Analysis.md +++ b/tools/security/pentest-recon-enum/Packet Capture & Analysis.md @@ -1,10 +1,14 @@ -|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit| -|---|---|---|---|---|---| -|tcpdump|[https://www.tcpdump.org/](https://www.tcpdump.org/)|—|Powerful CLI packet capture and analyzer with filtering expression support.|[capture, analyzer, cli, c]|Active| -|tshark|[https://www.wireshark.org/](https://www.wireshark.org/)|—|CLI version of Wireshark for dumping and analyzing network traffic.|[capture, analyzer, cli]|Active| -|Termshark|[https://termshark.io/](https://termshark.io/)|— (source on GitHub)|Terminal UI frontend for tshark with Wireshark-like interface.|[capture, tui, wireshark, go]|Active| -|ngrep|—|[jpr5/ngrep](https://github.com/jpr5/ngrep)|Grep-like tool for searching network packets by string/pattern.|[grep, capture, cli, c]|Stable| -|netsniff-ng|[http://netsniff-ng.org/](http://netsniff-ng.org/)|—|High-performance toolkit for network sniffing, analysis, and plumbing.|[capture, toolkit, cli, c]|Active| -|stenographer|—|[google/stenographer](https://github.com/google/stenographer)|High-speed packet capture spooler to disk for later analysis.|[capture, spool, go]|~Older| -|tcpterm|—|[sachaos/tcpterm](https://github.com/sachaos/tcpterm)|TUI visualizer for TCP packet streams.|[visualizer, tui, rust]|Stable| -|sockdump|—|[mechpen/sockdump](https://github.com/mechpen/sockdump)|Dumps Unix domain socket traffic for debugging.|[socket, dump, cli, go]|Stable| \ No newline at end of file +# Packet Capture & Analysis Tools + +CLI and TUI tools for capturing, dumping, filtering, analyzing, and visualizing network traffic — essential for diagnostics, forensics, pentesting, and reconnaissance. + +| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars | +| ------------ | -------------------------- | ------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------- | --------------------------- | ------------- | ----- | +| tcpdump | https://www.tcpdump.org/ | [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) | Powerful CLI packet capture and analyzer with advanced filtering expression support. | capture, analyzer, cli, c, pcap | ~Mar 2026 (very active) | 1988 | ~3k+ | +| tshark | https://www.wireshark.org/ | — (part of Wireshark repo) | CLI version of Wireshark for capturing, dumping, and dissecting network traffic. | capture, analyzer, cli, wireshark | ~Feb 2026 (Wireshark 4.6.4) | 1998 | — | +| Termshark | https://termshark.io/ | [gcla/termshark](https://github.com/gcla/termshark) | Terminal UI frontend for tshark with Wireshark-like interface and packet browsing. | capture, tui, wireshark, go | ~Jul 2022 (v2.4.0) | 2018 | ~7k+ | +| ngrep | — | [jpr5/ngrep](https://github.com/jpr5/ngrep) | Grep-like tool for searching and displaying network packets by string or regex pattern. | grep, capture, cli, c | ~Feb 2026 (v1.49.0) | 1999 | ~3k+ | +| netsniff-ng | http://netsniff-ng.org/ | [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) | High-performance toolkit for network sniffing, analysis, monitoring, and plumbing. | capture, toolkit, cli, c, performance | ~Jan 2025 (v0.6.9) | 2011 | ~3k+ | +| stenographer | — | [google/stenographer](https://github.com/google/stenographer) | High-speed packet capture spooler to disk for large-scale forensics and IDS buffering. | capture, spool, go, forensics | ~Nov 2020 (archived) | 2014 | ~2k+ | +| tcpterm | — | [sachaos/tcpterm](https://github.com/sachaos/tcpterm) | TUI visualizer for monitoring and displaying TCP packet streams in real time. | visualizer, tui, rust, tcp | ~Stable (low activity) | 2018 | ~1k+ | +| sockdump | — | [mechpen/sockdump](https://github.com/mechpen/sockdump) | Dumps Unix domain socket traffic for local debugging and protocol inspection. | socket, dump, cli, go, unix | ~Stable (low activity) | 2019 | — | \ No newline at end of file diff --git a/tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md b/tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md index 208f261..051a88b 100644 --- a/tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md +++ b/tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md @@ -1,7 +1,11 @@ -|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit| -|---|---|---|---|---|---| -|nmap|[https://nmap.org/](https://nmap.org/)|[nmap/nmap](https://github.com/nmap/nmap)|Versatile network discovery and security auditing tool with port scanning, OS detection, scripting.|[scanner, port, recon, nse, cli]|~Mar 2026 (frequent)| -|zmap|[https://zmap.io/](https://zmap.io/)|[zmap/zmap](https://github.com/zmap/zmap)|Fast single-packet scanner for large-scale Internet surveys and port scanning.|[scanner, fast, internet-wide, cli, c]|~Nov 2025 (bug fixes)| -|RustScan|—|[RustScan/RustScan](https://github.com/RustScan/RustScan)|Ultra-fast port scanner that wraps nmap for full scans after quick open port discovery.|[scanner, fast, rust, wrapper, cli]|Active (~2025+)| -|masscan|—|[robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan)|Asynchronous SYN scanner capable of scanning the entire Internet in minutes.|[scanner, fast, async, cli, c]|Active (maintenance)| -|pbscan|—|[gvb84/pbscan](https://github.com/gvb84/pbscan)|Stateless SYN scanner with efficient banner grabbing and multi-threading.|[scanner, syn, banner, cli, c]|~Older (stable)| \ No newline at end of file +# Port Scanners & Network Discovery Tools + +Essential CLI tools for port scanning, host discovery, OS fingerprinting, and large-scale network reconnaissance during pentesting and enumeration. + +| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars | +| -------- | ----------------- | ------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- | ----------------------------------------- | ----------------------- | ------------- | ----- | +| nmap | https://nmap.org/ | [nmap/nmap](https://github.com/nmap/nmap) | Versatile network discovery and security auditing tool with port scanning, OS detection, scripting. | scanner, port, recon, nse, cli, os-detect | ~Mar 2026 (frequent) | 1997 | 10k+ | +| zmap | https://zmap.io/ | [zmap/zmap](https://github.com/zmap/zmap) | Fast single-packet scanner optimized for large-scale Internet-wide surveys and port scanning. | scanner, fast, internet-wide, cli, c | ~May 2025 (v4.3.4) | 2013 | 6.1k | +| RustScan | — | [bee-san/RustScan](https://github.com/bee-san/RustScan) | Ultra-fast port scanner that wraps nmap for full scans after quick open port discovery. | scanner, fast, rust, wrapper, cli | ~Feb 2025 (v2.4.1) | 2019 | ~3k+ | +| masscan | — | [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) | Asynchronous SYN scanner capable of scanning the entire Internet in minutes at high speed. | scanner, fast, async, cli, c | ~Jun 2025 (maintenance) | 2013 | ~20k+ | +| pbscan | — | [gvb84/pbscan](https://github.com/gvb84/pbscan) | Stateless SYN scanner with efficient banner grabbing and multi-threading support. | scanner, syn, banner, cli, c | ~Older (stable) | ~2015 | — |