Network

Echo Mirage

Echo Mirage is a generic network proxy. It uses DLL injection and function hooking techniques to redirect network related function calls so that data transmitted and received by local applications can be observed and modified.

Windows encryption and OpenSSL functions are also hooked so that plain text of data being sent and received over an encrypted session is available.

Traffic can be intercepted in real-time, or manipulated with regular expressions and a number of action directives.

By the way, the reason why we don't have Fiddler here is that its license does not allow us to.

FakeNet-NG

FakeNet-NG is a next generation dynamic network analysis tool for malware analysts and penetration testers.

Nmap

The famous network scanner. It also includes the Zenmap GUI, Ndiff, Ncat, and Nping tools. On a Command Prompt, start with:

nmap

Wireshark

The most famous network traffic capture and analysis tool. You can also use it for USB and other protocols.