PacketProbe - Passive Vulnerability Scanner

PacketProbe is a Python-based passive vulnerability scanner that analyses PCAP files to detect insecure protocols and leaked FTP credentials. It's ideal for blue teamers, SOC analysts, or students learning about network forensics and protocol security.

---

Features

• Passive analysis of .pcap files (no network interaction)
• Detects insecure protocols:
  • FTP
  • TELNET
  • HTTP
  • TLS 1.0 / 1.1
  • SSL
• Extracts leaked FTP credentials
• Prints scan summaries with risk explanations and secure recommendations
• Generates exportable plaintext report files

---

Requirements

• Python 3.10+
• PyShark
• Colorama
• Tkinter (usually comes pre-installed with Python)

Install dependencies:

pip install pyshark colorama

Creating Python Virtual Environment:

# Windows
python -m venv venv
.\venv\Scripts\activate

# macOS/Linux
python3 -m venv venv
source venv/bin/activate

How To Run

In your terminal run

python .\packetprobe.py

You should be then be prompted if you would like to proceed.

Entering Y, a file explorer will appear to select the PCAP to analyse.