PIPI

NetworkMiner 2.8

NetworkMiner 2.8 Released

| | CAPWAP, CIDR, IEC-104, NamedPipe, NetworkMiner, PIPI, smtp, SOCKS
I am happy to announce the release of NetworkMiner 2.8 today! This new version comes with an improved user interface, better parsing of IEC-104 traffic and decapsulation of CAPWAP traffic. The professional ...
NETRESEC Network Security Blog
NetworkMiner 2.7.3

NetworkMiner 2.7.3 Released

| | 6ece5ece4192683d2d84e25b0ba7e04f9cb7eb7c, Abuse.ch, BitRAT, carve, Cobalt Strike, CobaltStrike, DBSBL, DNSBL, Emotet, FileScan.IO, JA3, JoeSandbox, memdump, meterpreter, NetworkMiner, NetworkMinerCLI, OSINT, PIPI, Protocol Detection, Qbot, RFC8422, TrickBot, unfurl, X.509
NetworkMiner now extracts meterpreter payloads from reverse shells and performs offline lookups of JA3 hashes and TLS certificates. Our commercial tool, NetworkMiner Professional, additionally comes with a packet carver that extracts network ...
NETRESEC Network Security Blog
Services tab in CapLoader

Detecting Cobalt Strike and Hancitor traffic in PCAP

| | 1768.py, CapLoader, Cobalt Strike, CobaltStrike, Hancitor, Netresec, nsm, pcap, periodicity, PIPI, Protocol Identification, video, videotutorial, Windows Sandbox
This video shows how Cobalt Strike and Hancitor C2 traffic can be detected using CapLoader. Your browser does not support the video tag. I bet you're going: 😱 OMG he's analyzing Windows ...
NETRESEC Network Security Blog
NetworkMiner 2.4

NetworkMiner 2.4 Released

| | asset inventory, EternalBlue, GPG, ICS, IPv6, KERBEROS, Linux, MAC address, Mono, OSINT, PIPI, Satori, SIP, VoIP
We are proud to announce the release of NetworkMiner 2.4 today! The new version comes with several improvements, such as username extraction from Kerberos traffic, better OS fingerprinting and even better Linux ...
NETRESEC Network Security Blog