A zero-dependency PCAP/PCAPNG analysis tool focused on authentication troubleshooting, built entirely with Python's standard library.

Stars

11

7-day growth

No data

Forks

4

Open issues

0

License

No data

Last updated

2026-06-26

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It requires no external packages like scapy or Wireshark, yet supports deep analysis of Kerberos, NTLM, RADIUS, WPA, TLS, and many other protocols, and includes a web dashboard with optional hashcat integration for cracking.

Who it is for

  • Security professionals and penetration testers
  • Network administrators troubleshooting authentication issues
  • IT support staff diagnosing login failures
  • Forensic analysts examining network captures

Use cases

  • Troubleshooting Kerberos error codes (e.g., PREAUTH_FAILED, CLIENT_REVOKED)
  • Extracting crackable NetNTLMv1/v2, Kerberoast, and AS-REP roast hashes
  • Validating PCAP file integrity and metadata without external tools
  • Assessing cleartext credentials in legacy protocols (FTP, TELNET, SNMP)

Strengths

  • Pure Python, zero dependencies (uses only standard library)
  • Broad protocol coverage: Kerberos, NTLM, RADIUS, WPA, TLS, LDAP, HTTP, MSSQL, and more
  • Built-in web dashboard with hashcat job management and token-based security
  • Exports hashcat-ready files and intelligently prioritizes crackable accounts

Considerations

  • Cannot read encrypted TLS traffic without keys
  • Lightweight TCP reassembly may miss data in heavily fragmented or out-of-order captures
  • Does not decrypt Kerberos or NTLM cipher contents (only metadata and errors)

README quick start

Quick start

Description

a packet capture tool to identify and extract key material and clear text credentials from common networking protocols. very alpha, use at own risk. Copyright (c) Xservus Limited

Related repositories

Similar projects matched by category, topics, and programming language.

nsdkinx
Featured
nsdkinx GitHub avatar

twell

Twell is a tiny, embeddable, zero-allocation physics engine for interruptible, Apple-style UI animations, available as a single-header C library with Python bindings.

MobileDesign & Creative
17
V4bel
V4bel GitHub avatar

Januscape

Januscape (CVE-2026-53359) is a 16-year-old use-after-free vulnerability in KVM/x86's shadow MMU that allows a guest to escape to the host on both Intel and AMD architectures.

C
512
bryanthaboi
bryanthaboi GitHub avatar

pokemon-gen1-recomp-project

A native LÖVE2D recreation of Pokémon Red and Blue that extracts game data from a player-supplied ROM to provide enhanced features like modding, controls rebinding, and link play.

C
349