odedshimon/BruteShark

Health v2 · maintenance only

Adoption not part of the score

3395 stars · 357 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

BruteShark is an open-source Network Forensic Analysis Tool (NFAT) that deeply inspects network traffic from PCAP/PCAPng files or live captures. It extracts passwords and password hashes (convertible to Hashcat format), reconstructs TCP sessions, and builds network maps.

Use cases

• analyze pcap files for security weaknesses
• extract password hashes from network captures
• reconstruct tcp sessions from pcap
• convert captured hashes to hashcat format for brute force
• build a network diagram from traffic
• live capture and inspect network traffic
• network forensic analysis of kerberos authentication

When to choose

• you need to analyze PCAP files for credentials, hashes, or session content
• you want a free open-source alternative to commercial NFAT tools
• you need both a GUI (Windows) and CLI (Windows/Linux) analyzer
• you want reusable .NET libraries for network traffic analysis

When to avoid

• you need real-time intrusion detection or continuous network monitoring
• you require a maintained tool with frequent updates (latest release 2023)
• you need deep packet analysis beyond what its modules cover
• you want a non-.NET or scriptable Python-based analysis stack

Facets

application · maturity maintenance

security networking parser cryptography developer-tools security networking penetration-testing reverse-engineering windows cli cross-platform network-forensics pcap-analysis nfat password-extraction hashcat packet-capture tcp-session-reconstruction network-map csharp linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="odedshimon/BruteShark")