_ ReconLab
Commands  /  Sniffing & Spoofing

Sniffing & Spoofing

Packet capture, MITM, ARP/DNS spoofing and traffic analysis. · 15 commands

Wireshark

passive
The reference graphical packet analyzer.
KaliParrotLinux

tcpdump

passive
Command-line packet capture.
KaliParrotLinux

TShark

passive
Wireshark’s power in a terminal.
KaliParrotLinux

Ettercap

high
Classic suite for MITM on a LAN.
KaliParrot

bettercap

high
Modern, modular MITM & network attack swiss-army knife.
KaliParrot

Responder

high
LLMNR/NBT-NS/MDNS poisoner & credential capture.
KaliParrot

mitmproxy

medium
Interactive HTTPS intercepting proxy.
KaliParrotLinux

dsniff

high
Classic suite for password sniffing on a LAN.
KaliParrotLinux

arpspoof

high
Redirect LAN traffic via ARP poisoning.
KaliParrotLinux

macchanger

low
View and spoof network MAC addresses.
KaliParrotLinux

mitm6

high
Abuse IPv6 to MITM Windows networks.
KaliParrot

Scapy

medium
Interactive packet manipulation in Python.
KaliParrotLinux

sslstrip

high
Downgrade HTTPS to HTTP in a MITM.
KaliParrotLinux

ngrep

passive
grep for network packets.
KaliParrotLinux

tcpreplay

medium
Replay captured packets onto a network.
KaliParrotLinux