Brute Shark is one tool network analysis (NFAT) to collect, analyze, process and collect network packets (mainly archives PCAP). Περιλαμβάνει: εξαγωγή κωδικών access, δημιουργία χαρτογράφισης δικτύου, ανακατασκευή συνεδριών TCP, εξαγωγή κατακερματισμένων κωδικών πρόσβασης, ακόμη και μετατροπή τους σε μορφή Hashcat, προκειμένου να εκτελεστεί μια επίθεση Brute Force εκτός σύνδεσης.
The main goal of the program is to provide a reliable solution to penetration testers and network administrators in order to control network traffic, while trying to identify vulnerabilities that can be used by a potential intruder to gain access to critical network points.
Two versions of Brute Shark are available, one based on the GUI (Windows) and one with a command line interface (Windows and Linux).
The various functions of the program can also be used independently as an infrastructure for analyzing network traffic on Linux or Windows computers.
The project was developed in my spare time to address two of my main passions: architecture; software and network data analysis.
Operation of the program
- Export and encode user credentials
- Extract hashes and break through hashcat
- Create a network diagram
- TCP connection reconstructions
Password Extracting (HTTP, TELNET, IMAP, FTP, SMTP)
Hashes Extracting (HTTP-Digest, NTLM, CRAM-MD5)
Building a Network Diagram
Reconstruct all TCP Sessions
File Carving
Brute Shark CLI
Download
- Windows - download the file from here Windows Installer (64 Bit).
- Linux - download the file from here BruteSharkCli.zip and run BruteSharkCli.exe using MONO:
wget https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli.zip unzip BruteSharkCli.zip mono BruteSharkCli / BruteSharkCli.exe