CFNAT

  • Tech Stack: Python, Pyshark, Wireshark, Tshark, Mergecap, Ngrep, Dpkt, Debian.

  • CFNAT can capture the network traffic and analyze that captured file and extract much useful information. It can also analyze any stored pcap file which was previously captured. What makes CFNAT unique is its capability of having many features, including sorting the top-visited websites, emails mentioned while capturing, all request URLs, do manual packet filters, which are more difficult using in Wireshark, do SMTP analysis, and the most exciting features which are to detect web application attacks from OWASP Top 10 Web Application Security Risks such as Local File Inclusion (LFI), SQL Injection and Cross-site scripting (XSS).