tcpdump

Sniffing & Spoofingkali · parrot

Classic CLI packet analyzer for capturing and filtering network traffic.

Install

sudo apt install tcpdump

sudo tcpdump -i eth0 -w out.pcap
sudo tcpdump -n port 80

Use only on systems you are authorized to test. Follow program scope.

Wireshark

World's foremost network protocol analyzer. Capture and inspect traffic graphically.

Bettercap

Modern, modular MITM framework for network recon and attacks.

Ettercap

Comprehensive suite for MITM attacks on LAN — ARP spoofing and content filtering.

Macchanger

Change network interface MAC addresses for privacy during wireless assessments.