mandiant/flare-fakenet-ng

Health v2 · maintenance only

Adoption not part of the score

2183 stars · 377 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

FakeNet-NG is a dynamic network analysis tool that intercepts and redirects network traffic while simulating legitimate network services. It is aimed at malware analysts and penetration testers running on Windows and Linux.

Use cases

• analyze malware network behavior in a sandbox
• capture network signatures of malware
• redirect all traffic to a fake DNS or web server
• simulate network services for isolated VM analysis
• test application network functionality as a pentester
• prototype proof-of-concept exploits with configurable interception

When to choose

• you need to observe what malware does on the network without real internet access
• you want a single tool that fakes DNS, HTTP, and other protocols
• you are doing malware analysis in an isolated Windows VM
• you need configurable traffic interception for pentesting

When to avoid

• you need passive traffic capture only without redirection
• you require production-grade network simulation at scale
• you cannot run in an isolated environment since it alters system network settings
• you need non-Windows/Linux platforms like macOS

Facets

cli-tool · maturity active

networking security developer-tools simulation security penetration-testing networking developer-tools windows python cli malware-analysis traffic-redirection network-simulation penetration-testing flare linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mandiant/flare-fakenet-ng")