BruteShark

BruteShark is ranked #11 of 29 in network packet analyzer software on The Geeks Club. It runs on Linux, Windows. There is a free plan.

BruteShark plans and pricing

BruteShark Free GPL-3.0 licensed · Windows GUI and Windows/Linux CLI · requires packet capture drivers github.com · 2 Oct 2026

Compared on network packet analyzer software

Free plan: Yes
Live capture: Yes
Command-line tool: Yes
Operating systems: Windows and Linux
Capture file formats: PCAP and PCAPNG
Protocol dissectors: Yes

Best BruteShark alternatives

9.2 NETCAP Free plan

8.9 Malcolm Free plan

8.4 Wireshark Free plan

8.4 TShark Free plan

8.2 Arkime Free plan

8.2 PacketSafari Free plan

BruteShark

Purpose: BruteShark is a network forensic analysis tool for inspecting network traffic, mainly PCAP files, and capturing traffic from a network interface.
Intended users: The project describes its intended users as security researchers and network administrators analyzing traffic for network weaknesses.
Credentials: It extracts and encodes usernames and passwords from protocols including HTTP, FTP, Telnet, IMAP, and SMTP.
Authentication hashes: It extracts authentication hashes including Kerberos, NTLM, CRAM-MD5, and HTTP-Digest hashes, and can convert supported hashes to Hashcat input format.
Network mapping: It builds a visual network diagram with nodes, open ports, and domain users, and can export network connections and endpoint data as JSON for analysis with tools such as Neo4j.
Other analysis: Its listed capabilities include DNS query extraction, TCP and UDP session reconstruction, file carving, and extracting SIP/RTP VoIP calls.
File carving limit: File extraction uses a header-footer carving method and the README describes it as effective for files with known headers and footers, such as JPG, PNG, and PDF.
Interfaces: The project offers a Windows GUI and a command-line interface for Windows and Linux; the CLI is described as having the desktop version's features.
Capture prerequisites: The download instructions list Npcap and the appropriate .NET Core runtime for Windows, and libpcap for Linux.
Large-file guidance: The usage instructions say traffic analysis consumes time and resources and recommend selecting only required modules for large files.
Integrations: The README identifies Hashcat for preparing extracted hashes and Neo4j as an example external tool for analyzing exported network-map JSON.
Support: The maintainer invites feedback by email at [email protected] or through a GitHub issue.
License: The GitHub repository identifies the project as GPL-3.0 licensed.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Network Packet Analyzer Software in 2026#11 of 29

Is BruteShark yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote BruteShark

Sources

github.com/odedshimon/BruteShark· checked 2 Oct 2026