Skip to content

Releases: odedshimon/BruteShark

Network Map Supports Domain Users And Data Transferred Amounts

30 Sep 23:33
3debfe8
Compare
Choose a tag to compare

This version contains few improvements and features:

First, the network map had upgraded by adding additional fields that enables to get insights about domain users and the amount of data transferred from each point in the network:

  1. Sent data - The amount of data (bytes) sent by the host.
  2. Received data - The amount of data received (bytes) by the host.
  3. Domains - the domains that the host is a member of.
  4. Domain users - domain users that logged into the host.
    This fields will also appear at the "BruteShark Network Nodes Data.json" file that holds all the nodes details.

Secondly, the BruteSharkDesktop installer file was upgraded:

  1. Allow to upgrade existing version of BruteSharkDesktop without the need to manually remove the old version.
  2. Set the license also at the installer prompt.

This version of BruteSharkDesktop also includes a feature of notifying about new versions released.

NodeDetails (2)
NodeDetailsJson

Display and Export Network Node Details

15 Sep 17:13
172686c
Compare
Choose a tag to compare

This version contains an implantation of new network model.
That data structure role is to store the current network state including all the extracted items.
Apart from the fact that this refactor improves the readability and structure of the code, thanks to this data structure different display components can share information while maintaining unconsciousness from each other (e.g the Network Map user control can now access DNS records if there are any).

Main Features:

  • Network Map user control now have a control describes the node details: open ports, DNS records, sessions count.
  • The exported files including a new file named "BruteShark Network Nodes Data.json" that holds all the nodes details (following issue #77).
  • Better performance.

NodeDetails2
image

Add "Clear Results" button & Bug fix

01 Sep 19:29
0c1efc9
Compare
Choose a tag to compare
  1. Add "Clear Results" button (following #95).
  2. Bug fix - although a certain network interface was selected at the user interface, another network card was selected behind the scenes (following to #99, #100).
  3. Upgrade to SharpPcap 6.0.0 (better performance among other improvements).

image

Improved Kerberos Hashes Parsing

01 May 21:49
4333c6e
Compare
Choose a tag to compare
  • Fix a bug that cause Kerberos hashes over TCP hashes was not extracted due to lack of proper parsing of "Record mark" section parsing (See issue: #90 )
  • Implement Kerberos TGS-REP Etype 17 and 18 hashes parsing include Hashcat export.
  • Upgrade all projects NuGets.
  • Add a link to download BruteSharkCli for windows.

Untitled

New module: Extract Voip Calls

11 Apr 14:15
572c8ff
Compare
Choose a tag to compare

Both versions of BruteShark (BruteSharkDesktop & BruteSharkCli) is now capable to extract Voip calls.

  • Voip calls can be exported to raw-audio files
  • Example PCAP files where added to the repo.
    Voip
    Voip CLI

Live Capture

08 Mar 21:10
3243903
Compare
Choose a tag to compare

Both versions of BruteShark is now capable of live capturing and analyzing network data directly from a network interface!
This version featuring all required features for operating the live capture option easily and smoothly:

  • List all available network interfaces names.
  • Enable configure BPF filters.
  • Enable using promiscuous mode.
    Live2
    Live3

Improve Exporting Of BruteSharkCli

25 Jan 18:35
2022b25
Compare
Choose a tag to compare

Add exporting of extracted files to BruteSharkCli.
Fix a bug while exporting network map to JSON.

image
image
image

Cli Single Command Mode

23 Jan 00:18
d99533c
Compare
Choose a tag to compare

BruteSharkCli now has two modes: single command and shell mode. The single command mode works by geting all the relevant parameters for the processing and then printing the results to stdout or files. The shell mode allows to perform each step individually.

Example Video: https://youtu.be/GjGV5vwIGi8
Please see the 'Usage' section for detailed documentation and examples.

Single Command Run

PCAPNG File Format Support

08 Jan 23:08
1a462c2
Compare
Choose a tag to compare

BruteShark can now handle pcapng files (as well as the old pcap file format).
PCAPNG example files where added to the repo at, so you can check it by yourself : https://github.com/odedshimon/BruteShark/tree/master/Pcap_Examples/Pcap_Examples_PCAPNG

New Module: Parsing DNS Data

14 Dec 19:32
efba805
Compare
Choose a tag to compare

New Module Release: DNS Module.
The module Enables to parse DNS queries.
DNS data also shown in the Network Map user window.

Thanks to @BrendanGrant for implementing this module!

UDP Module
DNS Map 3