Simple ARP/ND spoofing and password sniffing for Windows (and some really basic SSL stripping too).
Switch branches/tags
Nothing to show
Clone or download


Nighthawk is an experimental implementation of ARP/ND spoofing, password sniffing and simple SSL stripping for Windows. It is no longer under active development.



  • ARP spoofing (IPv4) and RA spoofing (IPv6) over local network
  • Password sniffing for most common HTML form fields (name-based matching), HTTP basic authentication, FTP, POP3, SMTP, IMAP
  • Basic SSL stripping (doesn't work on HTTPS-only sites) and cookie stripping
  • Quick attack mode


This software may be used only for educational and security testing purposes with your network administrator's consent. The author takes no responsibility for improper (or even illegal) usage, data loss or other damage that might occur during its usage.