摘要: 网络取证工具, 一般而言是安全研究专家用以测试目标网络系统安全性的特殊工具, 而今天我们要给大家介绍的恰恰就是这样的一种工具。此工具拥有特定名称, 它具备极为强大的GUI界面, 而且能够助力我们对捕获的数据包展开离线分析。此工具不但可以扫描出来目标网络范围之内的全部主机, 以及网络通信流量, 并且能够以高亮的样式标注重要流量以及Tor流量, 而且, 还能够识别并扫描出潜在的恶意流量。该工具包含了以下组件：1. 网络图表2. 设备/流量细节和分析3. 恶意流量识别4. Tor流量5. GUI, 用户能够借助于它, 以及和它相关的参数选项, 去上传pcap文件。网络取证工具使用有那么一种数据包捕捉工具, 它是能够直接从上面去把它获取到的, 然后那些研究人员凭借这个工具所给出的信息, 就能够去开展目标初始调查。项目地址：【传送门】安装和使用命令git clone /main.py命令运行之后, 图形化的用户接口会被启动, 用户将被询问上传pcap文件。譬如有这样的情况, 在我们所处的这个地方, 上传了一个与钓鱼活动存在关联的pcap文件, 借助这款工具所给予的帮助, 我们能够将Web流量提取出来, 能够将Tor流量提取出来, 能够将恶意流量提取出来, 还能够将其他类型的流量提取出来。分析这个过程, 是需要耗费掉那么一点儿时间的, 在分析完成了之后, 我们将会具备获得目标通信流量的此项能力, 还有设备以及数据包的详尽分析报告。分析提取出的目标URL地址为一个钓鱼页面。目标IP地址是那个, 然而在我们进行分析的阶段, 这个IP地址已然没办法成功解析了。除此之外，该工具还包含了下列库：Scapy：爬取pcap文件中的数据包信息；：用于获取whois信息中的IP地址；：网络编程库；：图形处理模块；Stem：一款与Tor网络进行交互的控制器；：一个用于可视化查看数据包的接口；：复杂网络分析库；：一款 2D绘图库；WWw.msslke.cN/post/46509.htmlWWw.msslke.cN/post/35982.htmlWWw.msslke.cN/post/37022.htmlWWw.msslke.cN/post/12721.htmlWWw.msslke.cN/post/14601.htmlWWw.msslke.cN/post/27312.htmlWWw.msslke.cN/post/2624.htmlWWw.msslke.cN/post/4450.htmlWWw.msslke.cN/post/47929.htmlWWw.msslke.cN/post/38770.htmlWWw.msslke.cN/post/18227.htmlWWw.msslke.cN/post/4757.htmlWWw.msslke.cN/post/10582.htmlWWw.msslke.cN/post/34713.htmlWWw.msslke.cN/post/23937.htmlWWw.msslke.cN/post/46633.htmlWWw.msslke.cN/post/35389.htmlWWw.msslke.cN/post/595.htmlWWw.msslke.cN/post/34461.htmlWWw.msslke.cN/post/17131.htmlWWw.msslke.cN/post/45916.htmlWWw.msslke.cN/post/39366.htmlWWw.msslke.cN/post/26294.htmlWWw.msslke.cN/post/45379.htmlWWw.msslke.cN/post/39701.htmlWWw.msslke.cN/post/37881.htmlWWw.msslke.cN/post/28868.htmlWWw.msslke.cN/post/25129.htmlWWw.msslke.cN/post/43362.htmlWWw.msslke.cN/post/18859.htmlWWw.msslke.cN/post/28130.htmlWWw.msslke.cN/post/11701.htmlWWw.msslke.cN/post/31473.htmlWWw.msslke.cN/post/21616.htmlWWw.msslke.cN/post/44121.htmlWWw.msslke.cN/post/36804.htmlWWw.msslke.cN/post/39746.htmlWWw.msslke.cN/post/33124.htmlWWw.msslke.cN/post/24307.htmlWWw.msslke.cN/post/29461.htmlWWw.msslke.cN/post/10961.htmlWWw.msslke.cN/post/19073.htmlWWw.msslke.cN/post/25709.htmlWWw.msslke.cN/post/45494.htmlWWw.msslke.cN/post/16142.htmlWWw.msslke.cN/post/11956.htmlWWw.msslke.cN/post/21781.htmlWWw.msslke.cN/post/48115.htmlWWw.msslke.cN/post/9579.htmlWWw.msslke.cN/post/39990.htmlWWw.msslke.cN/post/20494.htmlWWw.msslke.cN/post/4377.htmlWWw.msslke.cN/post/47489.htmlWWw.msslke.cN/post/15457.htmlWWw.msslke.cN/post/24702.htmlWWw.msslke.cN/post/9869.htmlWWw.msslke.cN/post/42147.htmlWWw.msslke.cN/post/8872.htmlWWw.msslke.cN/post/31161.htmlWWw.msslke.cN/post/5519.htmlWWw.msslke.cN/post/29384.htmlWWw.msslke.cN/post/32124.htmlWWw.msslke.cN/post/15365.htmlWWw.msslke.cN/post/30674.htmlWWw.msslke.cN/post/27542.htmlWWw.msslke.cN/post/24870.htmlWWw.msslke.cN/post/18753.htmlWWw.msslke.cN/post/41338.htmlWWw.msslke.cN/post/37225.htmlWWw.msslke.cN/post/46771.htmlWWw.msslke.cN/post/17688.htmlWWw.msslke.cN/post/39049.htmlWWw.msslke.cN/post/5366.htmlWWw.msslke.cN/post/11305.htmlWWw.msslke.cN/post/7466.htmlWWw.msslke.cN/post/15412.htmlWWw.msslke.cN/post/35530.htmlWWw.msslke.cN/post/48200.htmlWWw.msslke.cN/post/4232.htmlWWw.msslke.cN/post/27334.htmlWWw.msslke.cN/post/24627.htmlWWw.msslke.cN/post/30981.htmlWWw.msslke.cN/post/9224.htmlWWw.msslke.cN/post/37011.htmlWWw.msslke.cN/post/11095.htmlWWw.msslke.cN/post/10483.htmlWWw.msslke.cN/post/34421.htmlWWw.msslke.cN/post/14689.htmlWWw.msslke.cN/post/11589.htmlWWw.msslke.cN/post/3134.htmlWWw.msslke.cN/post/349.htmlWWw.msslke.cN/post/39306.htmlWWw.msslke.cN/post/28395.htmlWWw.msslke.cN/post/48393.htmlWWw.msslke.cN/post/28642.htmlWWw.msslke.cN/post/40712.htmlWWw.msslke.cN/post/11611.htmlWWw.msslke.cN/post/8465.htmlWWw.msslke.cN/post/9841.htmlWWw.msslke.cN/post/35393.htmlWWw.msslke.cN/post/18347.htmlWWw.msslke.cN/post/8000.htmlWWw.msslke.cN/post/12449.htmlWWw.msslke.cN/post/11574.htmlWWw.msslke.cN/post/46291.htmlWWw.msslke.cN/post/23695.htmlWWw.msslke.cN/post/15038.htmlWWw.msslke.cN/post/33745.htmlWWw.msslke.cN/post/6241.htmlWWw.msslke.cN/post/43870.htmlWWw.msslke.cN/post/35341.htmlWWw.msslke.cN/post/13977.htmlWWw.msslke.cN/post/25045.htmlWWw.msslke.cN/post/33437.htmlWWw.msslke.cN/post/43711.htmlWWw.msslke.cN/post/46340.htmlWWw.msslke.cN/post/23819.htmlWWw.msslke.cN/post/5612.htmlWWw.msslke.cN/post/14374.htmlWWw.msslke.cN/post/43670.htmlWWw.msslke.cN/post/1806.htmlWWw.msslke.cN/post/38932.htmlWWw.msslke.cN/post/39353.htmlWWw.msslke.cN/post/8015.htmlWWw.msslke.cN/post/15617.htmlWWw.msslke.cN/post/20990.htmlWWw.msslke.cN/post/28894.htmlWWw.msslke.cN/post/20851.htmlWWw.msslke.cN/post/19975.htmlWWw.msslke.cN/post/26129.htmlWWw.msslke.cN/post/30470.htmlWWw.msslke.cN/post/43087.htmlWWw.msslke.cN/post/12109.htmlWWw.msslke.cN/post/16764.htmlWWw.msslke.cN/post/14530.htmlWWw.msslke.cN/post/10549.htmlWWw.msslke.cN/post/33764.htmlWWw.msslke.cN/post/47151.htmlWWw.msslke.cN/post/25977.htmlWWw.msslke.cN/post/17842.htmlWWw.msslke.cN/post/45941.htmlWWw.msslke.cN/post/24993.htmlWWw.msslke.cN/post/33255.htmlWWw.msslke.cN/post/3499.htmlWWw.msslke.cN/post/23068.htmlWWw.msslke.cN/post/42523.htmlWWw.msslke.cN/post/23743.htmlWWw.msslke.cN/post/26301.htmlWWw.msslke.cN/post/12357.htmlWWw.msslke.cN/post/46561.htmlWWw.msslke.cN/post/10504.htmlWWw.msslke.cN/post/16689.htmlWWw.msslke.cN/post/7524.htmlWWw.msslke.cN/post/36635.htmlWWw.msslke.cN/post/18348.htmlWWw.msslke.cN/post/12487.htmlWWw.msslke.cN/post/2225.htmlWWw.msslke.cN/post/2719.htmlWWw.msslke.cN/post/2432.htmlWWw.msslke.cN/post/39218.htmlWWw.msslke.cN/post/3697.htmlWWw.msslke.cN/post/31251.htmlWWw.msslke.cN/post/35204.htmlWWw.msslke.cN/post/41077.htmlWWw.msslke.cN/post/40020.htmlWWw.msslke.cN/post/27478.htmlWWw.msslke.cN/post/16765.htmlWWw.msslke.cN/post/27868.htmlWWw.msslke.cN/post/33900.htmlWWw.msslke.cN/post/2376.htmlWWw.msslke.cN/post/41151.htmlWWw.msslke.cN/post/35390.htmlWWw.msslke.cN/post/21076.htmlWWw.msslke.cN/post/14507.htmlWWw.msslke.cN/post/41476.htmlWWw.msslke.cN/post/39081.htmlWWw.msslke.cN/post/8654.htmlWWw.msslke.cN/post/43992.htmlWWw.msslke.cN/post/43801.htmlWWw.msslke.cN/post/19440.htmlWWw.msslke.cN/post/35774.htmlWWw.msslke.cN/post/12180.htmlWWw.msslke.cN/post/11417.htmlWWw.msslke.cN/post/2895.htmlWWw.msslke.cN/post/38460.htmlWWw.msslke.cN/post/10530.htmlWWw.msslke.cN/post/2667.htmlWWw.msslke.cN/post/40892.htmlWWw.msslke.cN/post/202.htmlWWw.msslke.cN/post/9238.htmlWWw.msslke.cN/post/24243.htmlWWw.msslke.cN/post/12351.htmlWWw.msslke.cN/post/17183.htmlWWw.msslke.cN/post/35020.htmlWWw.msslke.cN/post/45783.htmlWWw.msslke.cN/post/33649.htmlWWw.msslke.cN/post/28787.htmlWWw.msslke.cN/post/14041.htmlWWw.msslke.cN/post/40544.htmlWWw.msslke.cN/post/28662.htmlWWw.msslke.cN/post/43205.htmlWWw.msslke.cN/post/40022.htmlWWw.msslke.cN/post/32757.htmlWWw.msslke.cN/post/2045.htmlWWw.msslke.cN/post/27591.htmlWWw.msslke.cN/post/37676.htmlWWw.msslke.cN/post/14009.htmlWWw.msslke.cN/post/14421.htmlWWw.msslke.cN/post/25920.htmlWWw.msslke.cN/post/21.htmlWWw.msslke.cN/post/25579.htmlWWw.msslke.cN/post/1392.htmlWWw.msslke.cN/post/14334.htmlWWw.msslke.cN/post/45947.htmlWWw.msslke.cN/post/24876.htmlWWw.msslke.cN/post/22929.htmlWWw.msslke.cN/post/11504.htmlWWw.msslke.cN/post/11901.htmlWWw.msslke.cN/post/39074.htmlWWw.msslke.cN/post/31871.htmlWWw.msslke.cN/post/7267.htmlWWw.msslke.cN/post/16698.htmlWWw.msslke.cN/post/48322.htmlWWw.msslke.cN/post/423.htmlWWw.msslke.cN/post/45928.htmlWWw.msslke.cN/post/23201.htmlWWw.msslke.cN/post/2880.htmlWWw.msslke.cN/post/26630.htmlWWw.msslke.cN/post/1277.htmlWWw.msslke.cN/post/8772.htmlWWw.msslke.cN/post/17052.htmlWWw.msslke.cN/post/11905.htmlWWw.msslke.cN/post/17137.htmlWWw.msslke.cN/post/34749.htmlWWw.msslke.cN/post/14859.htmlWWw.msslke.cN/post/42259.htmlWWw.msslke.cN/post/24546.htmlWWw.msslke.cN/post/10089.htmlWWw.msslke.cN/post/1367.htmlWWw.msslke.cN/post/45851.htmlWWw.msslke.cN/post/15760.htmlWWw.msslke.cN/post/32450.htmlWWw.msslke.cN/post/3286.htmlWWw.msslke.cN/post/20628.htmlWWw.msslke.cN/post/25742.htmlWWw.msslke.cN/post/18411.htmlWWw.msslke.cN/post/45522.htmlWWw.msslke.cN/post/32002.htmlWWw.msslke.cN/post/47050.htmlWWw.msslke.cN/post/34561.htmlWWw.msslke.cN/post/45872.htmlWWw.msslke.cN/post/26645.htmlWWw.msslke.cN/post/28504.htmlWWw.msslke.cN/post/38771.htmlWWw.msslke.cN/post/30448.htmlWWw.msslke.cN/post/42658.htmlWWw.msslke.cN/post/26049.htmlWWw.msslke.cN/post/10667.htmlWWw.msslke.cN/post/41506.htmlWWw.msslke.cN/post/46113.htmlWWw.msslke.cN/post/38841.htmlWWw.msslke.cN/post/26111.htmlWWw.msslke.cN/post/15313.htmlWWw.msslke.cN/post/42989.htmlWWw.msslke.cN/post/31059.htmlWWw.msslke.cN/post/13762.htmlWWw.msslke.cN/post/31309.htmlWWw.msslke.cN/post/8598.htmlWWw.msslke.cN/post/16467.htmlWWw.msslke.cN/post/39109.htmlWWw.msslke.cN/post/36264.htmlWWw.msslke.cN/post/44642.htmlWWw.msslke.cN/post/31517.htmlWWw.msslke.cN/post/39454.htmlWWw.msslke.cN/post/31187.htmlWWw.msslke.cN/post/18743.htmlWWw.msslke.cN/post/44945.htmlWWw.msslke.cN/post/40188.htmlWWw.msslke.cN/post/30930.htmlWWw.msslke.cN/post/31619.htmlWWw.msslke.cN/post/9510.htmlWWw.msslke.cN/post/5901.htmlWWw.msslke.cN/post/46607.htmlWWw.msslke.cN/post/18801.htmlWWw.msslke.cN/post/47769.htmlWWw.msslke.cN/post/42632.htmlWWw.msslke.cN/post/23744.htmlWWw.msslke.cN/post/11939.htmlWWw.msslke.cN/post/10318.htmlWWw.msslke.cN/post/48540.htmlWWw.msslke.cN/post/15661.htmlWWw.msslke.cN/post/15559.htmlWWw.msslke.cN/post/9949.htmlWWw.msslke.cN/post/7810.htmlWWw.msslke.cN/post/22489.htmlWWw.msslke.cN/post/10684.htmlWWw.msslke.cN/post/36957.htmlWWw.msslke.cN/post/30585.htmlWWw.msslke.cN/post/44538.htmlWWw.msslke.cN/post/26851.html