Skip to content

Network

merces edited this page May 30, 2023 · 1 revision

Echo Mirage is a generic network proxy. It uses DLL injection and function hooking techniques to redirect network related function calls so that data transmitted and received by local applications can be observed and modified.

Windows encryption and OpenSSL functions are also hooked so that plain text of data being sent and received over an encrypted session is available.

Traffic can be intercepted in real-time, or manipulated with regular expressions and a number of action directives.


By the way, the reason why we don't have Fiddler here is that its license does not allow us to.

FakeNet-NG is a next generation dynamic network analysis tool for malware analysts and penetration testers.

The famous network scanner. It also includes the Zenmap GUI, Ndiff, Ncat, and Nping tools.