Skip to content
Simple ARP/ND spoofing and password sniffing for Windows (and some really basic SSL stripping too).
Branch: master
Clone or download
Pull request Compare This branch is even with klemenb:master.
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.


Nighthawk is an experimental implementation of ARP/ND spoofing, password sniffing and simple SSL stripping for Windows. It is no longer under active development.



  • ARP spoofing (IPv4) and RA spoofing (IPv6) over local network
  • Password sniffing for most common HTML form fields (name-based matching), HTTP basic authentication, FTP, POP3, SMTP, IMAP
  • Basic SSL stripping (doesn't work on HTTPS-only sites) and cookie stripping
  • Quick attack mode


This software may be used only for educational and security testing purposes with your network administrator's consent. The author takes no responsibility for improper (or even illegal) usage, data loss or other damage that might occur during its usage.

You can’t perform that action at this time.