Wireshark
featuredWorld's foremost network protocol analyzer. Capture and inspect traffic graphically.
Bettercap
Modern, modular MITM framework for network recon and attacks.
Ettercap
Comprehensive suite for MITM attacks on LAN — ARP spoofing and content filtering.
Macchanger
Change network interface MAC addresses for privacy during wireless assessments.
Proxychains
Force any TCP connection through a proxy (SOCKS/HTTP). Useful with Tor/AnonSurf.
tcpdump
Classic CLI packet analyzer for capturing and filtering network traffic.