{
  "category": "protocol-analysis",
  "count": 113,
  "kind": "repository-category",
  "labels": [
    "Protocols",
    "协议"
  ],
  "note": "Automatically discovered repository index, unreviewed. Stars, licenses and last-push times are collection-time snapshots.",
  "note_zh": "自动发现的仓库索引，未审核。星标、许可证与最近推送时间均为采集时快照。",
  "page_url": "https://awesomerea.org/browse/protocol-analysis/",
  "page_url_zh": "https://awesomerea.org/zh/browse/protocol-analysis/",
  "repositories": [
    {
      "category": "protocol-analysis",
      "description_en": "All-in-one protocol analysis toolkit: built-in browser capture, MITM proxy, JS hooks, fingerprint spoofing, AI analysis, and an MCP server for seamless AI agent and IDE integration.",
      "description_language": "bilingual",
      "description_zh": "全能协议分析工具：内置浏览器抓包、MITM 代理、JS hook、指纹伪装、AI 分析及 MCP Server，可无缝对接 AI 智能体与 IDE。",
      "full_name": "Mouseww/anything-analyzer",
      "id": "scan-1208430144",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T01:35:36.267239Z",
      "pushed_at": "2026-10-06T09:06:32Z",
      "readme_sha256": "9324c2ab3c00e6ed77558676ca7e4e825e392fedd26afea8a70a1293a7631da0",
      "readme_url": "https://github.com/Mouseww/anything-analyzer/blob/main/README.md",
      "stars": 3776,
      "targets": [
        "website"
      ],
      "topics": [
        "2api",
        "ai-tools",
        "analysis-cli",
        "api-analysis",
        "automation-tools",
        "blackbox-testing",
        "network-analysis",
        "protocol-analysis",
        "reverse-engineering",
        "traffic-analysis"
      ],
      "url": "https://github.com/Mouseww/anything-analyzer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "a Python API for your car",
      "description_language": "bilingual",
      "description_zh": "适用于你汽车的 Python API。",
      "full_name": "commaai/opendbc",
      "id": "scan-92912604",
      "license": "MIT",
      "observed_at": "2026-10-16T01:35:37.407695Z",
      "pushed_at": "2026-10-15T23:31:02Z",
      "readme_sha256": "a669e54032458aba8cb180815f72dd7242f70b3ea996891adebd9c0f08b919af",
      "readme_url": "https://github.com/commaai/opendbc/blob/master/README.md",
      "stars": 3493,
      "targets": [
        "protocol"
      ],
      "topics": [
        "automotive",
        "can",
        "dbc",
        "reverse-engineering"
      ],
      "url": "https://github.com/commaai/opendbc",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.",
      "description_language": "bilingual",
      "description_zh": "SteamKit2 是与 Valve 的 Steam 网络互操作的 .NET 库，旨在提供简单且可扩展的接口，以执行网络上的各种操作。",
      "full_name": "SteamRE/SteamKit",
      "id": "scan-10376425",
      "license": "LGPL-2.1",
      "observed_at": "2026-10-16T01:35:37.803900Z",
      "pushed_at": "2026-10-15T09:20:52Z",
      "readme_sha256": "a7bf2380c03987fc10f96ddf45e24856de3f40cd59e4bdebc81a1883d249ef40",
      "readme_url": "https://github.com/SteamRE/SteamKit/blob/master/readme.md",
      "stars": 3210,
      "targets": [
        "app",
        "game",
        "protocol"
      ],
      "topics": [
        "c-sharp",
        "networking",
        "nuget",
        "protobuf",
        "reverse-engineering",
        "steam",
        "steam-network",
        "steamkit2",
        "valve"
      ],
      "url": "https://github.com/SteamRE/SteamKit",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "The RF and reverse engineering framework for everyone. Follow and ★ to show your support!",
      "description_language": "bilingual",
      "description_zh": "面向所有人的射频与逆向工程框架。欢迎关注并点亮 ★ 表示支持！",
      "full_name": "ainfosec/FISSURE",
      "id": "scan-522654460",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:35:28.441391Z",
      "pushed_at": "2026-10-12T21:42:48Z",
      "readme_sha256": "e5d6d5778ca38471569bdbe8e14ca4e03aec5b65b0653c21b835cc9c7f5f684d",
      "readme_url": "https://github.com/ainfosec/FISSURE/blob/Python3/README.md",
      "stars": 2069,
      "targets": [
        "protocol"
      ],
      "topics": [
        "bladerf",
        "gnuradio",
        "hackrf",
        "limesdr",
        "machine-learning",
        "plutosdr",
        "protocols",
        "python",
        "reverse-engineering",
        "rf",
        "rtl-sdr",
        "scapy",
        "sdr",
        "sdrplay",
        "signals",
        "tools",
        "usrp",
        "wifi",
        "wireless"
      ],
      "url": "https://github.com/ainfosec/FISSURE",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A toolset for reverse engineering and fuzzing Protobuf-based apps",
      "description_language": "bilingual",
      "description_zh": "用于逆向工程和模糊测试基于 Protobuf 的应用的工具集。",
      "full_name": "marin-m/pbtk",
      "id": "scan-81985530",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:35:28.992056Z",
      "pushed_at": "2026-10-15T20:25:42Z",
      "readme_sha256": "63ecd2ac98bce07b6de9dedcceb3e47751ab76175007dc8bd4415b2d287e580b",
      "readme_url": "https://github.com/marin-m/pbtk/blob/master/README.md",
      "stars": 1691,
      "targets": [
        "app",
        "protocol"
      ],
      "topics": [
        "decompiler",
        "fuzzing",
        "protobuf",
        "python",
        "reverse-engineering"
      ],
      "url": "https://github.com/marin-m/pbtk",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "CAN Commander is a comprehensive tool designed for the reverse engineering of CAN (Controller Area Network) bus systems. This project aims to provide a robust platform for automotive enthusiasts, engineers, and security researchers to interact with and analyze CAN networks, facilitating a deeper understanding and manipulation of communication.",
      "description_language": "bilingual",
      "description_zh": "CAN Commander 是用于 CAN（控制器局域网）总线系统逆向工程的综合工具，旨在为汽车爱好者、工程师与安全研究人员提供可靠平台，与 CAN 网络交互并进行分析，从而深入理解和操控通信。",
      "full_name": "MatthewKuKanich/CAN_Commander",
      "id": "scan-694460342",
      "license": null,
      "observed_at": "2026-10-16T01:35:30.987546Z",
      "pushed_at": "2026-04-25T03:31:15Z",
      "readme_sha256": "129d9119fc58986ad185c912fb2cc4b311f75537088a5eaf433fe31a553d1aaa",
      "readme_url": "https://github.com/MatthewKuKanich/CAN_Commander/blob/main/README.md",
      "stars": 1078,
      "targets": [
        "protocol"
      ],
      "topics": [],
      "url": "https://github.com/MatthewKuKanich/CAN_Commander",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Resources about network security, including: Proxy/GFW/ReverseProxy/Tunnel/VPN/Tor/I2P, and MiTM/PortKnocking/NetworkSniff/NetworkAnalysis/etc。More than 1700 open source tools for now. Post incoming.",
      "description_language": "bilingual",
      "description_zh": "网络安全资源，涵盖代理/GFW/反向代理/隧道/VPN/Tor/I2P，以及中间人攻击、端口敲门、网络嗅探、网络分析等。目前收录 1700 多个开源工具，后续将补充文章。",
      "full_name": "alphaSeclab/awesome-network-stuff",
      "id": "scan-229676987",
      "license": null,
      "observed_at": "2026-10-16T01:36:53.886119Z",
      "pushed_at": "2019-12-30T09:39:43Z",
      "readme_sha256": "ca7871f2ed372ce78a68492c587a166ca4b0f18b950bc22b594a1626fa2783bb",
      "readme_url": "https://github.com/alphaSeclab/awesome-network-stuff/blob/master/Readme.md",
      "stars": 926,
      "targets": [],
      "topics": [
        "gfw",
        "i2p",
        "mitm",
        "network-forensic",
        "network-poison",
        "network-spoof",
        "network-visualization",
        "port-knocking",
        "protocol-analysis",
        "proxy",
        "reverse-proxy",
        "shadowsocks",
        "sniffer",
        "tor",
        "tunnel",
        "tunnelvpn",
        "v2ray"
      ],
      "url": "https://github.com/alphaSeclab/awesome-network-stuff",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Netzob: Protocol Reverse Engineering, Modeling and Fuzzing",
      "description_language": "bilingual",
      "description_zh": "Netzob：协议逆向工程、建模与模糊测试",
      "full_name": "netzob/netzob",
      "id": "scan-4675010",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:47:55.980552Z",
      "pushed_at": "2024-04-18T05:07:04Z",
      "readme_sha256": "cf984d0fb9d3eea7f43743879b152debe6d92d99be2e70d09527e632e2ecb37b",
      "readme_url": "https://github.com/netzob/netzob/blob/master/README.rst",
      "stars": 838,
      "targets": [
        "protocol"
      ],
      "topics": [
        "automata",
        "fuzzing",
        "network",
        "protocols",
        "python",
        "reverse-engineering",
        "traffic-generation",
        "zoby"
      ],
      "url": "https://github.com/netzob/netzob",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Apple Continuity Protocol Reverse Engineering and Dissector",
      "description_language": "bilingual",
      "description_zh": "Apple Continuity 协议逆向工程与协议解析器",
      "full_name": "furiousMAC/continuity",
      "id": "scan-237125301",
      "license": "GPL-2.0",
      "observed_at": "2026-10-16T10:47:56.067750Z",
      "pushed_at": "2026-02-27T02:52:13Z",
      "readme_sha256": "a23f48d545aa2096a7df5cb8338838358712ae511ee547e2297416a01af823c0",
      "readme_url": "https://github.com/furiousMAC/continuity/blob/master/README.md",
      "stars": 688,
      "targets": [
        "protocol"
      ],
      "topics": [
        "apple",
        "ble",
        "bluetooth",
        "bluetooth-low-energy",
        "continuity-protocol",
        "handoff",
        "privacy",
        "research-project",
        "wireshark-dissector"
      ],
      "url": "https://github.com/furiousMAC/continuity",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.",
      "description_language": "bilingual",
      "description_zh": "让协议解密更轻松，简化研究人员的加密流量分析工作。",
      "full_name": "fkie-cad/friTap",
      "id": "scan-411940494",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:35:41.212005Z",
      "pushed_at": "2026-09-29T15:28:32Z",
      "readme_sha256": "75be7d7f268d5056954ff4807e4ae7222c1ec682d63a9edab9725742165c071e",
      "readme_url": "https://github.com/fkie-cad/friTap/blob/main/README.md",
      "stars": 556,
      "targets": [
        "app",
        "binary",
        "protocol"
      ],
      "topics": [
        "android",
        "android-https-capture",
        "binary-analysis",
        "frida",
        "hooking",
        "https",
        "linux",
        "network-analysis",
        "network-capture",
        "network-forensics",
        "security",
        "security-audit",
        "ssl",
        "ssldump",
        "tcpdump",
        "tls"
      ],
      "url": "https://github.com/fkie-cad/friTap",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol",
      "description_language": "bilingual",
      "description_zh": "面向控制器局域网（CAN）协议的自动化载荷逆向工程流程",
      "full_name": "brent-stone/CAN_Reverse_Engineering",
      "id": "scan-174594172",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:47:56.507075Z",
      "pushed_at": "2024-04-27T22:40:25Z",
      "readme_sha256": "8297c3f8b3cb8073c7e33611dd3569c2be724af8625b461cec555f64de584f82",
      "readme_url": "https://github.com/brent-stone/CAN_Reverse_Engineering/blob/master/README.md",
      "stars": 456,
      "targets": [
        "protocol"
      ],
      "topics": [
        "can-bus",
        "cyber-physical-systems",
        "empirical-data-modeling",
        "machine-learning",
        "protocol-analyser",
        "reverse-engineering"
      ],
      "url": "https://github.com/brent-stone/CAN_Reverse_Engineering",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Fichero D11s thermal label printer - BLE protocol reverse engineering and Python CLI tool",
      "description_language": "bilingual",
      "description_zh": "Fichero D11s 热敏标签打印机的 BLE 协议逆向工程与 Python 命令行工具",
      "full_name": "0xMH/fichero-printer",
      "id": "scan-1165098044",
      "license": null,
      "observed_at": "2026-10-16T10:47:56.453256Z",
      "pushed_at": "2026-03-02T16:22:17Z",
      "readme_sha256": "6348d113a79acef972999dc0d4a991561ff35eb888fc8b3b29f3fd307a9a1ab3",
      "readme_url": "https://github.com/0xMH/fichero-printer/blob/main/README.md",
      "stars": 302,
      "targets": [],
      "topics": [],
      "url": "https://github.com/0xMH/fichero-printer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Nili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing.",
      "description_language": "bilingual",
      "description_zh": "Nili 是一个用于网络扫描、中间人操作、协议逆向工程和模糊测试的工具。",
      "full_name": "niloofarkheirkhah/nili",
      "id": "scan-98451624",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:47:56.531041Z",
      "pushed_at": "2019-10-23T00:52:48Z",
      "readme_sha256": "948d6d3bf451a5a27271ba2bf3e84c7a27c6856c6a5b9d4396e283d17134b17c",
      "readme_url": "https://github.com/niloofarkheirkhah/nili/blob/master/README.md",
      "stars": 219,
      "targets": [],
      "topics": [],
      "url": "https://github.com/niloofarkheirkhah/nili",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock and Linux Sockets out of the box.  ⚡ ",
      "description_language": "bilingual",
      "description_zh": "Deluder 用于拦截不支持代理的应用流量，目前开箱即用地支持 OpenSSL、GnuTLS、SChannel、WinSock 和 Linux Sockets。⚡",
      "full_name": "Warxim/deluder",
      "id": "scan-726033460",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:36:05.631755Z",
      "pushed_at": "2025-11-14T17:27:27Z",
      "readme_sha256": "06aefbf9f8eeee9a2144b8cd028b7e3724fe9c099fa7303f34b468cbea2526d0",
      "readme_url": "https://github.com/Warxim/deluder/blob/main/README.md",
      "stars": 215,
      "targets": [
        "app",
        "binary",
        "protocol"
      ],
      "topics": [
        "ethical-hacking",
        "ethical-hacking-tools",
        "frida",
        "hacking",
        "hacking-tool",
        "hacking-tools",
        "hackingtools",
        "mitm",
        "penetration-testing",
        "pentest",
        "pentest-tool",
        "pentesting",
        "pentesting-tools",
        "security"
      ],
      "url": "https://github.com/Warxim/deluder",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A course on \"Digital Forensics\" designed and offered in the Computer Science Department at Texas Tech University ",
      "description_language": "bilingual",
      "description_zh": "在 Texas Tech University 计算机科学系设计并开设的“数字取证”课程。",
      "full_name": "asiamina/A-Course-on-Digital-Forensics",
      "id": "scan-132551361",
      "license": null,
      "observed_at": "2026-10-18T14:36:34.824259Z",
      "pushed_at": "2023-10-05T20:39:49Z",
      "readme_sha256": "bce86d73c5b40c9136b30396b1a3f9f4ab7642dee1bca3e271b2356b128a25e1",
      "readme_url": "https://github.com/asiamina/A-Course-on-Digital-Forensics/blob/ff4c30bfbd79d0b4a6feaca7fd088b5c78f3cad7/README.md",
      "stars": 203,
      "targets": [
        "app",
        "binary",
        "protocol"
      ],
      "topics": [
        "courses",
        "digital-forensics",
        "disk-forensics",
        "memory-forensics",
        "mobile-forensics",
        "network-forensics",
        "reverse-engineering"
      ],
      "url": "https://github.com/asiamina/A-Course-on-Digital-Forensics",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Cryptographic protocol analysis for real-world protocols.",
      "description_language": "bilingual",
      "description_zh": "对现实世界中的密码协议进行分析。",
      "full_name": "symbolicsoft/verifpal",
      "id": "scan-355471550",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:36:53.843588Z",
      "pushed_at": "2026-10-15T13:52:36Z",
      "readme_sha256": "6a217e6e20305f816f04a3e9ac3e1aad76d1e2b42cfa597d390319abb6dc4808",
      "readme_url": "https://github.com/symbolicsoft/verifpal/blob/master/README.md",
      "stars": 133,
      "targets": [],
      "topics": [
        "cryptographic-protocols",
        "cryptography",
        "formal-methods",
        "formal-verification",
        "protocol-analysis",
        "protocol-verification",
        "symbolic-protocol-analysis"
      ],
      "url": "https://github.com/symbolicsoft/verifpal",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Selected JavaScript reverse-engineering examples from various websites, with detailed explanations, concept summaries, cryptographic algorithms, difficulty comparisons, and links. Covers challenges including environment reconstruction, extracting JavaScript, webpack, and Ruishu.",
      "description_language": "bilingual",
      "description_zh": "精选不同网站的 JavaScript 逆向实例，提供详细讲解、知识点概括、加密算法、难度对比及跳转链接，涵盖补环境、提取 JavaScript、webpack 和瑞数等难点。",
      "full_name": "Annyfee/spider-js-reverse",
      "id": "scan-984134896",
      "license": null,
      "observed_at": "2026-10-16T07:14:51.201520Z",
      "pushed_at": "2025-09-05T04:23:15Z",
      "readme_sha256": "a74028c31ab91f7bbd2f85cb9c4e194b9fff4de84f1badcc835a9017d40f48b6",
      "readme_url": "https://github.com/Annyfee/spider-js-reverse/blob/master/README.md",
      "stars": 111,
      "targets": [
        "website"
      ],
      "topics": [
        "anti-crawler",
        "anti-debugging",
        "crawler-tools",
        "decrypt-js",
        "developer-tools",
        "frontend-security",
        "javascript",
        "javascript-obfuscation",
        "js-reverse",
        "mitmproxy",
        "python",
        "reverse-engineering",
        "reverse-js",
        "web-scraping"
      ],
      "url": "https://github.com/Annyfee/spider-js-reverse",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "MAPS cloud scanner and response parser for Microsoft Defender research.",
      "description_language": "bilingual",
      "description_zh": "用于 Microsoft Defender 研究的 MAPS 云扫描器及响应解析器。",
      "full_name": "HackingLZ/maps_scanner",
      "id": "scan-1161848333",
      "license": null,
      "observed_at": "2026-10-16T01:36:53.919391Z",
      "pushed_at": "2026-02-19T22:18:44Z",
      "readme_sha256": "a7d2c00f72a49b609b42771983a6eba5f78c97476638a64d5c64e5cdbbf44376",
      "readme_url": "https://github.com/HackingLZ/maps_scanner/blob/main/README.md",
      "stars": 96,
      "targets": [],
      "topics": [
        "malware-analysis",
        "maps",
        "protocol-analysis",
        "python",
        "security-research",
        "windows-defender"
      ],
      "url": "https://github.com/HackingLZ/maps_scanner",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "PowMr Inverter serial communication protocol reverse engineering",
      "description_language": "bilingual",
      "description_zh": "PowMr 逆变器串行通信协议逆向工程",
      "full_name": "leodesigner/powmr_comm",
      "id": "scan-628983998",
      "license": "MIT",
      "observed_at": "2026-10-16T10:47:56.892946Z",
      "pushed_at": "2023-07-25T14:01:40Z",
      "readme_sha256": "39405f7d56911f9eb1db81d9a2b3676a0be7c41f450184da26757c8326496320",
      "readme_url": "https://github.com/leodesigner/powmr_comm/blob/main/README.md",
      "stars": 96,
      "targets": [],
      "topics": [
        "esp8266-arduino",
        "inverter",
        "iot",
        "modbus",
        "mqtt",
        "powmr",
        "solar",
        "wifi"
      ],
      "url": "https://github.com/leodesigner/powmr_comm",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering toolkit for Apple's wireless ecosystem",
      "description_language": "bilingual",
      "description_zh": "面向 Apple 无线生态系统的逆向工程工具集",
      "full_name": "seemoo-lab/apple-continuity-tools",
      "id": "scan-267555888",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:47:35.667513Z",
      "pushed_at": "2026-08-17T12:30:57Z",
      "readme_sha256": "06f7f00cc4b5f035ba936d3c31493c7396ff316e8ebf7b7c9c4b495460f79f71",
      "readme_url": "https://github.com/seemoo-lab/apple-continuity-tools/blob/main/README.md",
      "stars": 90,
      "targets": [
        "app",
        "binary",
        "protocol"
      ],
      "topics": [
        "apple",
        "frida",
        "ios",
        "macos",
        "reverse-engineering"
      ],
      "url": "https://github.com/seemoo-lab/apple-continuity-tools",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "NetPlier: Probabilistic Network Protocol Reverse Engineering from Message Traces",
      "description_language": "bilingual",
      "description_zh": "NetPlier：基于消息轨迹的概率式网络协议逆向工程",
      "full_name": "yapengye/NetPlier",
      "id": "scan-261396357",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:47:57.309170Z",
      "pushed_at": "2024-07-25T10:57:09Z",
      "readme_sha256": "7e466b6ca7c6cf90d846fe52b1258321553661fbd8871a389bc52113c7e398f0",
      "readme_url": "https://github.com/yapengye/NetPlier/blob/master/README.md",
      "stars": 75,
      "targets": [],
      "topics": [],
      "url": "https://github.com/yapengye/NetPlier",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A Wireshark dissector for the Apple Remote Invocation (ARI) protocol, used between Intel base band chips and the iOS CommCenter for various management purposes, SMS, telephony and much more.",
      "description_language": "bilingual",
      "description_zh": "Apple Remote Invocation（ARI）协议的 Wireshark 解析器；该协议在 Intel 基带芯片与 iOS CommCenter 之间用于各类管理任务、短信、电话及更多功能。",
      "full_name": "seemoo-lab/aristoteles",
      "id": "scan-391738404",
      "license": "MIT",
      "observed_at": "2026-10-18T18:08:08.643162Z",
      "pushed_at": "2026-09-30T19:18:09Z",
      "readme_sha256": "5e49a83e7e7813c7ab3c8748b3f877bdb58ee86a2794e3de97b51edbb11c2f4d",
      "readme_url": "https://github.com/seemoo-lab/aristoteles/blob/25cb9bb5c35993ed0c74248b96f0065d5479f447/README.md",
      "stars": 74,
      "targets": [
        "app",
        "binary",
        "protocol"
      ],
      "topics": [
        "apple",
        "dissector",
        "frida",
        "ghidra",
        "wireshark",
        "wireshark-dissector"
      ],
      "url": "https://github.com/seemoo-lab/aristoteles",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "ICMPWatch: ICMP Packet Sniffer",
      "description_language": "bilingual",
      "description_zh": "ICMPWatch：ICMP 数据包嗅探器",
      "full_name": "HalilDeniz/ICMPWatch",
      "id": "scan-681064518",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:53.971226Z",
      "pushed_at": "2024-10-15T19:02:45Z",
      "readme_sha256": "981b14e6d5fa568e2482fd03cd1411ef970614f3711412b63b4d9c9befecd69d",
      "readme_url": "https://github.com/HalilDeniz/ICMPWatch/blob/main/Readme.md",
      "stars": 60,
      "targets": [],
      "topics": [
        "cybersecurity",
        "data-capture",
        "icmpwatch",
        "network",
        "network-analysis",
        "network-monitoring",
        "network-security",
        "packet-sniffing",
        "pcap",
        "protocol-analysis",
        "python-tools",
        "traffic-monitor"
      ],
      "url": "https://github.com/HalilDeniz/ICMPWatch",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering smart ring protocols",
      "description_language": "bilingual",
      "description_zh": "智能戒指协议逆向工程",
      "full_name": "ringverse/protocol",
      "id": "scan-882717213",
      "license": null,
      "observed_at": "2026-10-16T10:47:57.399361Z",
      "pushed_at": "2026-06-18T18:08:56Z",
      "readme_sha256": "b459c6da8520097f70116f7efa1a2196dd4e9002c6c077b7d8a6e30ade25e955",
      "readme_url": "https://github.com/ringverse/protocol/blob/main/README.md",
      "stars": 56,
      "targets": [],
      "topics": [
        "ble",
        "bluetooth",
        "bluetooth-le",
        "bluetooth-low-energy",
        "hardware",
        "oura",
        "oura-ring",
        "protocol",
        "protocols",
        "reverse-engineering",
        "smart-ring",
        "smartring"
      ],
      "url": "https://github.com/ringverse/protocol",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "“Protocol Informatics” is a project to design for automatically network protocol reverse engineering based on frame or packet analysis. \"PI\" is short for “Protocol Informatics”, which introduces local and global sequence alignment algorithms. The PI project is famous in network protocol reverse engineering based on network trace. I am not the author of PI project. However, the previous website storing PI project disappeared. That makes me to open a github issue to keep the codes of PI poject.",
      "description_language": "bilingual",
      "description_zh": "Protocol Informatics 项目旨在基于帧或数据包分析自动进行网络协议逆向工程。项目简称 PI，引入了局部和全局序列比对算法，在基于网络轨迹的协议逆向工程领域颇有名气。我不是 PI 项目的作者，但此前保存该项目的网站已经消失，因此我在 GitHub 上开设一个议题，以保存 PI 项目的代码。",
      "full_name": "bitpeach/Protocol-Informatics",
      "id": "scan-91528010",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:47:57.671657Z",
      "pushed_at": "2018-04-07T12:18:09Z",
      "readme_sha256": "1aaaf7b82d231e30c127296f4963f2500079c1a8d86617c3620a7bb4225284e1",
      "readme_url": "https://github.com/bitpeach/Protocol-Informatics/blob/master/README.md",
      "stars": 53,
      "targets": [
        "website"
      ],
      "topics": [
        "network-protocol",
        "network-trace",
        "packet-analysis",
        "python",
        "reverse-engineering"
      ],
      "url": "https://github.com/bitpeach/Protocol-Informatics",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).",
      "description_language": "bilingual",
      "description_zh": "可自行托管的 PCAP 分析平台，提供 LLM 驱动的事件分诊、基于特征签名的威胁检测及 AI 生成的事件叙述。支持跨抓包文件监测网络变化、通过 nDPI 深度检测数据包，以及自动生成 Wireshark 过滤器。配合本地 LLM（Ollama、LM Studio）可完全离线运行。",
      "full_name": "NotYuSheng/TracePcap",
      "id": "scan-1146618872",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:53.964846Z",
      "pushed_at": "2026-09-28T16:50:40Z",
      "readme_sha256": "395d2d50992f492dc846ec09bb341b22ad19d2d2dea82f58f454512e802dbb27",
      "readme_url": "https://github.com/NotYuSheng/TracePcap/blob/main/README.md",
      "stars": 51,
      "targets": [],
      "topics": [
        "ai",
        "blue-team",
        "cyber-defense",
        "cybersecurity",
        "dfir",
        "incident-response",
        "llm",
        "ndpi",
        "network-forensics",
        "network-monitoring",
        "ollama",
        "packet-analysis",
        "pcap",
        "pcap-analyzer",
        "protocol-analysis",
        "soc",
        "threat-hunting",
        "triage",
        "tshark",
        "wireshark"
      ],
      "url": "https://github.com/NotYuSheng/TracePcap",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A high-performance, lightweight SDK for the GB/T 27930-2023 (Yunkuaichong 1.6) protocol. Its framework-free design targets charging-station/platform integration, simplifying protocol parsing, command generation, and validation.",
      "description_language": "bilingual",
      "description_zh": "高性能、轻量级 GB/T 27930-2023（云快充 1.6）协议 SDK，采用不依赖框架的设计，专为充电桩与平台对接场景打造，简化协议解析、指令生成与校验流程。",
      "full_name": "KevenPotter/k-cloud-charge-analysis",
      "id": "scan-1239462929",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:54.309173Z",
      "pushed_at": "2026-07-15T02:56:44Z",
      "readme_sha256": "4deca37a21aacd48fe45957d5006659dfdeaddc5972a115889caa55ffb6b9fbc",
      "readme_url": "https://github.com/KevenPotter/k-cloud-charge-analysis/blob/main/README.md",
      "stars": 44,
      "targets": [],
      "topics": [
        "charging-piles",
        "cloud-charge",
        "gbt-27930",
        "iot",
        "java",
        "protocol-analysis",
        "sdk",
        "smart-socket",
        "ykc",
        "ykc-v16"
      ],
      "url": "https://github.com/KevenPotter/k-cloud-charge-analysis",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Daikin BLE controller, protocol reverse engineering",
      "description_language": "bilingual",
      "description_zh": "Daikin BLE 控制器的协议逆向工程",
      "full_name": "blafois/Daikin-Madoka-BRC1H-BLE-Reverse",
      "id": "scan-235463230",
      "license": null,
      "observed_at": "2026-10-16T10:47:58.435636Z",
      "pushed_at": "2022-09-26T08:56:58Z",
      "readme_sha256": "3c52c96b6b03271330b59be0454c58b922548ae8eca9419546b15e9897ad519a",
      "readme_url": "https://github.com/blafois/Daikin-Madoka-BRC1H-BLE-Reverse/blob/master/README.md",
      "stars": 39,
      "targets": [],
      "topics": [],
      "url": "https://github.com/blafois/Daikin-Madoka-BRC1H-BLE-Reverse",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering the client/server communication protocol of Agar.io.",
      "description_language": "bilingual",
      "description_zh": "对 Agar.io 的客户端／服务器通信协议进行逆向工程。",
      "full_name": "dollthing/Agar.io-Protocol",
      "id": "scan-35840284",
      "license": null,
      "observed_at": "2026-10-16T10:47:58.380192Z",
      "pushed_at": "2016-07-02T21:28:49Z",
      "readme_sha256": "f908dc97d6c3f49e87af2dccca1425d735e301aca7bcaf3b086950922c4420b5",
      "readme_url": "https://github.com/dollthing/Agar.io-Protocol/blob/master/README.md",
      "stars": 38,
      "targets": [],
      "topics": [],
      "url": "https://github.com/dollthing/Agar.io-Protocol",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Analysis and basic wrapper library for the Lego Dimensions \"Gateway\" peripheral",
      "description_language": "bilingual",
      "description_zh": "Lego Dimensions“Gateway”外设的分析及基础封装库。",
      "full_name": "woodenphone/lego_dimensions_protocol",
      "id": "scan-46774024",
      "license": null,
      "observed_at": "2026-10-16T01:36:54.286263Z",
      "pushed_at": "2019-09-18T04:42:23Z",
      "readme_sha256": "585efc9433c5865caf470447dd81e1191baac3d4e5e2d25e4ff52b36be8a16cf",
      "readme_url": "https://github.com/woodenphone/lego_dimensions_protocol/blob/master/readme.md",
      "stars": 34,
      "targets": [],
      "topics": [
        "driver",
        "example-implementation",
        "lego-dimensions",
        "lego-dimensions-pad",
        "lego-hardware",
        "nfc",
        "original-research",
        "peripherals",
        "protocol-analysis",
        "python-scripts",
        "reference-implementation",
        "reverse-engineering",
        "rfid",
        "toypad",
        "usb-hid",
        "usb-reverse-engineering"
      ],
      "url": "https://github.com/woodenphone/lego_dimensions_protocol",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Cross-language packet capture normalizer and collector-inference engine: parse recorded Redis traces into a stable intermediate format (Go) and infer communication patterns from it (Rust).",
      "description_language": "bilingual",
      "description_zh": "跨语言抓包规范化与采集器推断引擎：用 Go 将录制的 Redis 跟踪记录解析为稳定的中间格式，再用 Rust 从中推断通信模式。",
      "full_name": "haebibisimax/PortSmith",
      "id": "scan-1215521842",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:54.436411Z",
      "pushed_at": "2026-10-14T17:16:26Z",
      "readme_sha256": "3fbe2acd881127a555ccf9ee2da5ec76f53b5a5b49d53379cd38d5d417a46df4",
      "readme_url": "https://github.com/haebibisimax/PortSmith/blob/main/README.md",
      "stars": 33,
      "targets": [],
      "topics": [
        "cli",
        "cross-language",
        "developer-tools",
        "go",
        "golang",
        "interop",
        "networking",
        "observability",
        "pcap",
        "protocol-analysis",
        "redis",
        "rust",
        "rustlang",
        "tracing"
      ],
      "url": "https://github.com/haebibisimax/PortSmith",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Wiredigg is a comprehensive network analysis tool with advanced security features designed for network administrators, security professionals, and IT enthusiasts. It provides real-time packet capture, protocol analysis, anomaly detection, and threat identification capabilities in a modern, user-friendly interface.",
      "description_language": "bilingual",
      "description_zh": "Wiredigg 是一款具有高级安全功能的综合网络分析工具，面向网络管理员、安全专业人员和 IT 爱好者。它通过现代、易用的界面提供实时抓包、协议分析、异常检测和威胁识别功能。",
      "full_name": "JustVugg/Wiredigg",
      "id": "scan-952601533",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:54.477186Z",
      "pushed_at": "2025-11-13T06:54:38Z",
      "readme_sha256": "77a2423ab98cf6752b5990d7cea387d593d753f8bbda60f44cb683b5398021ae",
      "readme_url": "https://github.com/JustVugg/Wiredigg/blob/main/README.md",
      "stars": 29,
      "targets": [],
      "topics": [
        "anomaly-detection",
        "cybersecurity",
        "gui",
        "intrusion-detection",
        "modern-ui",
        "network-analysis",
        "network-monitoring",
        "network-security",
        "network-tools",
        "open-source",
        "packet-capture",
        "packet-sniffer",
        "protocol-analysis",
        "python",
        "real-time-monitoring",
        "security-tools",
        "sniffer",
        "sysadmin",
        "threat-detection"
      ],
      "url": "https://github.com/JustVugg/Wiredigg",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Vent-Axia wired remote protocol analysis & reverse engineering",
      "description_language": "bilingual",
      "description_zh": "Vent-Axia 有线遥控器协议分析与逆向工程",
      "full_name": "aelias-eu/vent-axia-remote",
      "id": "scan-317959121",
      "license": "MIT",
      "observed_at": "2026-10-16T10:47:59.742415Z",
      "pushed_at": "2025-05-19T16:00:30Z",
      "readme_sha256": "9b2d3e1b6b7c6e162267d53ab42c423c74970c7529ea7d18162a0e81389a1abf",
      "readme_url": "https://github.com/aelias-eu/vent-axia-remote/blob/main/README.md",
      "stars": 24,
      "targets": [],
      "topics": [
        "hvac",
        "mvhr",
        "protocol",
        "rs232",
        "serial",
        "vent-axia"
      ],
      "url": "https://github.com/aelias-eu/vent-axia-remote",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Thermal pocket printer - BLE protocol reverse engineering, Python CLI, and web GUI",
      "description_language": "bilingual",
      "description_zh": "便携式热敏打印机的 BLE 协议逆向工程、Python 命令行工具和 Web 图形界面",
      "full_name": "ChiaraCannolee/thermal-pocket-printer-basic",
      "id": "scan-1228766880",
      "license": "MIT",
      "observed_at": "2026-10-16T10:47:59.932733Z",
      "pushed_at": "2026-09-04T22:50:22Z",
      "readme_sha256": "29a7d68722443a27a6526e1590ed78095ea07af862c9f99171c81dea14e580f2",
      "readme_url": "https://github.com/ChiaraCannolee/thermal-pocket-printer-basic/blob/main/README.md",
      "stars": 24,
      "targets": [
        "website"
      ],
      "topics": [],
      "url": "https://github.com/ChiaraCannolee/thermal-pocket-printer-basic",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Bbuzz: a bit-aware network protocol fuzzing and reverse engineering framework",
      "description_language": "bilingual",
      "description_zh": "Bbuzz：支持位级处理的网络协议模糊测试与逆向工程框架",
      "full_name": "lockout/Bbuzz",
      "id": "scan-86676316",
      "license": "MIT",
      "observed_at": "2026-10-16T10:47:59.701028Z",
      "pushed_at": "2021-01-27T13:24:19Z",
      "readme_sha256": "ca4c08ac709be8cdfc7e1a50afb6706f8710fe297610c51954063fe7e7d50ba2",
      "readme_url": "https://github.com/lockout/Bbuzz/blob/master/README.md",
      "stars": 24,
      "targets": [],
      "topics": [],
      "url": "https://github.com/lockout/Bbuzz",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "TenkenMe Codex — reverse engineering, protocol analysis, runtime debugging, Skills and MCP workflows.",
      "description_language": "bilingual",
      "description_zh": "TenkenMe Codex：逆向工程、协议分析、运行时调试，以及技能与 MCP 工作流。",
      "full_name": "neuxsbot-tk/tenkenme-codex",
      "id": "scan-1325588165",
      "license": "NOASSERTION",
      "observed_at": "2026-10-16T10:47:59.936659Z",
      "pushed_at": "2026-08-26T08:47:53Z",
      "readme_sha256": "5792d66fdaf366e5014c52bcfe2c214184883ca6a21b2572b27c832df2d71a4a",
      "readme_url": "https://github.com/neuxsbot-tk/tenkenme-codex/blob/main/README.md",
      "stars": 24,
      "targets": [],
      "topics": [],
      "url": "https://github.com/neuxsbot-tk/tenkenme-codex",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "This is an industrial dataset contains eight different types of ICS protocols, mainly collected for the evaluation of protocol reverse engineering tools. We hope it can be supplemented in the future.",
      "description_language": "bilingual",
      "description_zh": "包含八种 ICS 协议的工业数据集，主要为评估协议逆向工程工具而收集。希望今后能继续补充。",
      "full_name": "hi-zer/Industrial-protocols-dataset",
      "id": "scan-564202399",
      "license": null,
      "observed_at": "2026-10-16T10:48:00.269017Z",
      "pushed_at": "2024-01-07T12:14:59Z",
      "readme_sha256": "e46e3cb2244a2078044d6966c119b2595b2c54c5ab24e7f7f025a528575db50f",
      "readme_url": "https://github.com/hi-zer/Industrial-protocols-dataset/blob/main/README.md",
      "stars": 22,
      "targets": [],
      "topics": [],
      "url": "https://github.com/hi-zer/Industrial-protocols-dataset",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Protocol Reverse Engineering Workbench",
      "description_language": "bilingual",
      "description_zh": "协议逆向工程工作台。",
      "full_name": "luelista/pre_workbench",
      "id": "scan-217003884",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:48:00.117768Z",
      "pushed_at": "2025-04-15T18:55:00Z",
      "readme_sha256": "8a319935b656176bf26ba3bc8cf5e0b90ca498e5044767e0a5045b63bcf45cb4",
      "readme_url": "https://github.com/luelista/pre_workbench/blob/main/README.md",
      "stars": 22,
      "targets": [],
      "topics": [],
      "url": "https://github.com/luelista/pre_workbench",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Protocol Reverse Engineering Resources",
      "description_language": "bilingual",
      "description_zh": "协议逆向工程资源。",
      "full_name": "scratchadams/PRE-Resources",
      "id": "scan-639017923",
      "license": null,
      "observed_at": "2026-10-16T10:48:00.013663Z",
      "pushed_at": "2023-05-10T15:25:12Z",
      "readme_sha256": "d2cdeb60ca1d414804002107156b50039f4c8be870a805ce8105088be7584242",
      "readme_url": "https://github.com/scratchadams/PRE-Resources/blob/main/README.md",
      "stars": 22,
      "targets": [],
      "topics": [],
      "url": "https://github.com/scratchadams/PRE-Resources",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Online engine for reasoning about the Noise Protocol Framework.",
      "description_language": "bilingual",
      "description_zh": "用于推理 Noise Protocol Framework 的在线引擎。",
      "full_name": "symbolicsoft/noiseexplorer",
      "id": "scan-355473594",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:36:54.884787Z",
      "pushed_at": "2026-04-07T09:19:40Z",
      "readme_sha256": "d75af7f67e856de62ba68c664812d0dbf54d9ffa1840d0f5d226c12fff7f1664",
      "readme_url": "https://github.com/symbolicsoft/noiseexplorer/blob/master/README.md",
      "stars": 21,
      "targets": [],
      "topics": [
        "cryptographic-protocols",
        "cryptography",
        "formal-methods",
        "formal-verification",
        "protocol-analysis",
        "protocol-verification",
        "symbolic-protocol-analysis"
      ],
      "url": "https://github.com/symbolicsoft/noiseexplorer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Re-implementation of the protocol reverse engineering approach FieldHunter",
      "description_language": "bilingual",
      "description_zh": "协议逆向工程方法 FieldHunter 的重新实现。",
      "full_name": "vs-uulm/fieldhunter",
      "id": "scan-487991740",
      "license": null,
      "observed_at": "2026-10-16T10:48:00.823030Z",
      "pushed_at": "2022-10-17T00:45:27Z",
      "readme_sha256": "237cbd5f9b5a472c793f2ea92f25d1d6ae651994518f5cbc9034a0b6bbd89c45",
      "readme_url": "https://github.com/vs-uulm/fieldhunter/blob/master/README.md",
      "stars": 18,
      "targets": [],
      "topics": [],
      "url": "https://github.com/vs-uulm/fieldhunter",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A lightweight controller offering complete control over all 24 RGB zones of Lenovo Legion LOQ series keyboards through Windows Dynamic Lighting, achieving high-frequency LED refresh rates up to 60 Hz.  Built by reverse-engineering the keyboard’s USB protocol using Wireshark packet captures.",
      "description_language": "bilingual",
      "description_zh": "轻量级控制器，通过 Windows 动态照明全面控制联想 Legion LOQ 系列键盘的全部 24 个 RGB 分区，LED 刷新率最高可达 60 Hz。通过 Wireshark 抓包逆向分析键盘 USB 协议而构建。",
      "full_name": "Dhruvgoel3829/LOQ-24-zone-RGB-controller",
      "id": "scan-1139035972",
      "license": "MIT",
      "observed_at": "2026-10-16T10:48:01.504643Z",
      "pushed_at": "2026-02-23T16:53:14Z",
      "readme_sha256": "41bddc3f2f4bd14ce38f058b24fb19e7d3e9c5eaaed6b2b08da1de4631813708",
      "readme_url": "https://github.com/Dhruvgoel3829/LOQ-24-zone-RGB-controller/blob/main/README.md",
      "stars": 16,
      "targets": [],
      "topics": [],
      "url": "https://github.com/Dhruvgoel3829/LOQ-24-zone-RGB-controller",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Notes and utilities for reverse engineering Agilent PCIe Protocol Analyzers and their host software.",
      "description_language": "bilingual",
      "description_zh": "用于逆向分析 Agilent PCIe 协议分析仪及其主机软件的笔记与实用工具。",
      "full_name": "cyrozap/agilent-pcie-analyzer-re",
      "id": "scan-486067488",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:48:01.903860Z",
      "pushed_at": "2026-07-02T05:23:53Z",
      "readme_sha256": "f8626612250d12ebc046177499fb42ea9633a60860249af8fb991058e388eba0",
      "readme_url": "https://github.com/cyrozap/agilent-pcie-analyzer-re/blob/master/README.md",
      "stars": 14,
      "targets": [],
      "topics": [],
      "url": "https://github.com/cyrozap/agilent-pcie-analyzer-re",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Sonar anti-bot verification bypass for Minecraft. Working 2.1.x sonar bypass script, packet logger, debug proxy. cubixmc poormc tested.",
      "description_language": "bilingual",
      "description_zh": "用于 Minecraft 的 Sonar 反机器人验证绕过工具。提供可用的 Sonar 2.1.x 绕过脚本、数据包记录器和调试代理，已在 cubixmc、poormc 上测试。",
      "full_name": "SirYadav1/sonar-bypass",
      "id": "scan-1337891997",
      "license": "MIT",
      "observed_at": "2026-10-16T07:14:53.196761Z",
      "pushed_at": "2026-10-16T02:47:58Z",
      "readme_sha256": "4ee69aabd40a5338215c2f6fdb8d354d050c1aac3ab6fdea1e9203f1532b9d03",
      "readme_url": "https://github.com/SirYadav1/sonar-bypass/blob/main/README.md",
      "stars": 14,
      "targets": [],
      "topics": [
        "anti-bot",
        "antibot",
        "bot",
        "bypass",
        "cubixmc",
        "exploit",
        "fabric-mod",
        "javascript",
        "minecraft",
        "minecraft-bot",
        "minecraft-protocol",
        "nodejs",
        "packet",
        "poormc",
        "proxy",
        "reverse-engineering",
        "sonar",
        "sonar-bypass",
        "verification"
      ],
      "url": "https://github.com/SirYadav1/sonar-bypass",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "ASUS ZenBook TouchPads I2C HID Protocol Reverse Engineering",
      "description_language": "bilingual",
      "description_zh": "华硕 ZenBook 触摸板 I2C HID 协议的逆向工程。",
      "full_name": "larixer/zenbook-touchpad-i2c",
      "id": "scan-73622005",
      "license": "MIT",
      "observed_at": "2026-10-16T10:48:02.295933Z",
      "pushed_at": "2016-11-15T06:10:51Z",
      "readme_sha256": "f762b14baecebb45068af4db3363b791615946366e9b04ad112de740cad75731",
      "readme_url": "https://github.com/larixer/zenbook-touchpad-i2c/blob/master/README.md",
      "stars": 13,
      "targets": [],
      "topics": [],
      "url": "https://github.com/larixer/zenbook-touchpad-i2c",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "AOL Protocol Wiretap Tool - Packet capture and analysis for AOL protocol reverse engineering",
      "description_language": "bilingual",
      "description_zh": "AOL 协议 Wiretap 工具：用于 AOL 协议逆向工程的数据包捕获与分析。",
      "full_name": "iconidentify/wiretap",
      "id": "scan-1051505994",
      "license": "MIT",
      "observed_at": "2026-10-16T10:48:02.552852Z",
      "pushed_at": "2025-12-04T00:34:57Z",
      "readme_sha256": "3f70f692cb36d4d2563983ef532725d561014a3acdc4d6d49fb57d74e8cefad9",
      "readme_url": "https://github.com/iconidentify/wiretap/blob/master/README.md",
      "stars": 12,
      "targets": [],
      "topics": [],
      "url": "https://github.com/iconidentify/wiretap",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Code for experimentation of \"Protocol Reverse Engineering Using Neural Networks\"",
      "description_language": "bilingual",
      "description_zh": "论文《利用神经网络进行协议逆向工程》的实验代码。",
      "full_name": "PREUNN/preunn",
      "id": "scan-430808146",
      "license": null,
      "observed_at": "2026-10-16T10:48:02.914976Z",
      "pushed_at": "2022-06-13T09:52:03Z",
      "readme_sha256": "cf81dc0ac318926211afae14021ccba006e594d8c114b789e9bc44976d471f4c",
      "readme_url": "https://github.com/PREUNN/preunn/blob/master/README.md",
      "stars": 12,
      "targets": [],
      "topics": [],
      "url": "https://github.com/PREUNN/preunn",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Use AI to automate reverse engineering and protocol analysis as much as possible, and to assist with reviewing large-scale obfuscated codebases. Clone or mirror the repository promptly if needed, in case of a DMCA takedown.",
      "description_language": "bilingual",
      "description_zh": "尽可能使用 AI 自动完成逆向工程与协议分析，并辅助审查大规模混淆代码库。如有需要，请及时克隆或镜像仓库，以防遭到 DMCA 下架。",
      "full_name": "warterbili/auto_reverse_",
      "id": "scan-1317285561",
      "license": "MIT",
      "observed_at": "2026-10-16T10:48:03.079164Z",
      "pushed_at": "2026-07-30T13:18:15Z",
      "readme_sha256": "028008efd198f710889e9fad2e82da66cf30ccc1e746693d29b471fada86d028",
      "readme_url": "https://github.com/warterbili/auto_reverse_/blob/main/README.md",
      "stars": 12,
      "targets": [],
      "topics": [
        "reverse"
      ],
      "url": "https://github.com/warterbili/auto_reverse_",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Protocol reverse engineering and simple communication tool for GECO G-422 range of solar pump controllers, used also (but not only) in the Hewalex ZPS-18e ",
      "description_language": "bilingual",
      "description_zh": "针对 GECO G-422 系列太阳能水泵控制器的协议逆向工程与简单通信工具；Hewalex ZPS-18e 等产品也使用这些控制器。",
      "full_name": "aelias-eu/hewalex-geco-protocol",
      "id": "scan-307388577",
      "license": "MIT",
      "observed_at": "2026-10-16T10:48:03.344801Z",
      "pushed_at": "2022-09-14T05:14:48Z",
      "readme_sha256": "d8cfdc1038482afb0118c1255ca8a43c5da6a8d67fe0009f0fb15cebdc399594",
      "readme_url": "https://github.com/aelias-eu/hewalex-geco-protocol/blob/main/README.md",
      "stars": 11,
      "targets": [],
      "topics": [
        "geco",
        "hewalex",
        "mqtt",
        "protocol",
        "rs485"
      ],
      "url": "https://github.com/aelias-eu/hewalex-geco-protocol",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering a 1.8.9 Minecraft server, to mimic it's network protocol",
      "description_language": "bilingual",
      "description_zh": "逆向分析 Minecraft 1.8.9 服务端，以模拟其网络协议。",
      "full_name": "HeathLoganCampbell/Nanocraft",
      "id": "scan-284018099",
      "license": null,
      "observed_at": "2026-10-16T10:48:03.517403Z",
      "pushed_at": "2023-06-14T22:31:03Z",
      "readme_sha256": "8d01c8cbb8d80cdda376d6762546250be3ca26330cf969221b1787b3d10fb781",
      "readme_url": "https://github.com/HeathLoganCampbell/Nanocraft/blob/master/readme.md",
      "stars": 11,
      "targets": [],
      "topics": [],
      "url": "https://github.com/HeathLoganCampbell/Nanocraft",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering of splix.io protocol",
      "description_language": "bilingual",
      "description_zh": "splix.io 协议的逆向工程。",
      "full_name": "JosefKuchar/Splix.io-Protocol",
      "id": "scan-68024833",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T10:48:03.479638Z",
      "pushed_at": "2017-09-14T17:05:30Z",
      "readme_sha256": "398cf98687028b4fe7ca950827028ffffd8b65496b5c04769b58864b0672be2f",
      "readme_url": "https://github.com/JosefKuchar/Splix.io-Protocol/blob/master/README.md",
      "stars": 11,
      "targets": [],
      "topics": [],
      "url": "https://github.com/JosefKuchar/Splix.io-Protocol",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like an honeypot — using Honeyscore, active auth/state probes, and a weighted score.",
      "description_language": "bilingual",
      "description_zh": "Does This Look Like An Honeypot?（DTLLAH）是一款多协议命令行工具，结合 Honeyscore、主动认证与状态探测及加权评分，判断目标 IP 的行为是否像蜜罐。",
      "full_name": "mziqudhd92/honeypot-auditor",
      "id": "scan-1347483474",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:54.963550Z",
      "pushed_at": "2026-10-13T21:04:00Z",
      "readme_sha256": "e4dadd993ba71ed16703d6f16c1f8d9afb4fff1560640bbdf4f607f15a9313b5",
      "readme_url": "https://github.com/mziqudhd92/honeypot-auditor/blob/main/README.md",
      "stars": 11,
      "targets": [],
      "topics": [
        "active-fingerprinting",
        "blue-team",
        "cybersecurity",
        "cybersecurity-tools",
        "deception",
        "deception-detection",
        "deception-technology",
        "honeypot",
        "honeypot-detection",
        "honeypot-detector",
        "inforation-gathering",
        "network-scanner",
        "network-security",
        "protocol-analysis",
        "purple-team",
        "python",
        "red-teaming",
        "security-audit",
        "security-research",
        "security-tools"
      ],
      "url": "https://github.com/mziqudhd92/honeypot-auditor",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Security research on the WhatsApp protocol, cryptographic handshake analysis, reverse engineering, and controlled local MITM experimentation.",
      "description_language": "bilingual",
      "description_zh": "对 WhatsApp 协议的安全研究，涵盖加密握手分析、逆向工程和受控的本地中间人实验。",
      "full_name": "tatikoma/mitm-research",
      "id": "scan-106025986",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:36:55.266238Z",
      "pushed_at": "2026-10-07T10:00:24Z",
      "readme_sha256": "5adc1bdafbbcfcf9421e8af7404aea9579a8d5933ab3b17a422fd2e33e6ded1c",
      "readme_url": "https://github.com/tatikoma/mitm-research/blob/master/README.md",
      "stars": 9,
      "targets": [],
      "topics": [
        "cryptography",
        "mitm",
        "noise-protocol",
        "protocol-analysis",
        "research",
        "reverse-engineering",
        "security-research"
      ],
      "url": "https://github.com/tatikoma/mitm-research",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Kendo - Powerful Network Packet Capture & Protocol Analysis Software     🚀 Real-time & offline analysis with MFC & WinPcap. Comprehensive protocol parsers & display filters. Efficient packet management. Shortcut keys for seamless user interaction. Explore network traffic effortlessly!  ",
      "description_language": "bilingual",
      "description_zh": "Kendo：强大的网络抓包和协议分析软件。🚀 使用 MFC 和 WinPcap 进行实时与离线分析，提供全面的协议解析器、显示过滤器、高效的数据包管理和便捷的快捷键交互，轻松探索网络流量。",
      "full_name": "kendojitsu/Kendo",
      "id": "scan-722923510",
      "license": null,
      "observed_at": "2026-10-16T01:36:55.515722Z",
      "pushed_at": "2023-12-19T07:24:41Z",
      "readme_sha256": "25bce7c9cabe858e21a24699dcff5452396ab52d28c91a7f22031831d2a228bb",
      "readme_url": "https://github.com/kendojitsu/Kendo/blob/main/README.md",
      "stars": 8,
      "targets": [],
      "topics": [
        "common-network-protocols",
        "dhcp",
        "dns",
        "http",
        "icmp",
        "inter-thread-communication",
        "kendo",
        "mfc",
        "network-packet-capture",
        "network-protocol-parsers",
        "offline-protocol-analysis",
        "packet-capture",
        "pcap-files",
        "protocol-analysis",
        "real-time-capture",
        "stl",
        "winpcap"
      ],
      "url": "https://github.com/kendojitsu/Kendo",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Modbus Attack Tool for Remote Industrial eXploitation (M.A.T.R.I.X) is a comprehensive security testing tool for Modbus TCP protocol implementations. ",
      "description_language": "bilingual",
      "description_zh": "Modbus Attack Tool for Remote Industrial eXploitation（M.A.T.R.I.X）是一款面向 Modbus TCP 协议实现的综合安全测试工具。",
      "full_name": "karlvbiron/MATRIX",
      "id": "scan-971182225",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:55.675598Z",
      "pushed_at": "2026-09-14T15:14:52Z",
      "readme_sha256": "e922d55398d55c44dce328563a113161c5fb370773caa8e5cb4b73a3534a7b32",
      "readme_url": "https://github.com/karlvbiron/MATRIX/blob/main/README.md",
      "stars": 6,
      "targets": [],
      "topics": [
        "command-line-tool",
        "cyber-physical-systems",
        "dos-attacks",
        "educational",
        "industrial-control-systems",
        "modbus-tcp",
        "offensive-security",
        "open-source",
        "operational-technology",
        "overflow-attacks",
        "packet-analysis",
        "packet-capture",
        "packet-manipulation",
        "protocol-analysis",
        "python",
        "replay-attacks",
        "security-research",
        "security-tool",
        "simulations",
        "spoofing-attack"
      ],
      "url": "https://github.com/karlvbiron/MATRIX",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "An all-in-one desktop tool for parsing, framing, checking, sending and receiving power communication protocols. Supports 15 protocols, including China Southern Power Grid, State Grid, DL/T 698.45, DLT645-2007, DLMS/HDLC, next-generation carrier communication and HDC 1.0. Covers single-frame parsing, batch analysis, serial and Bluetooth communication, virtual meters, communication sequence diagrams, test plans and Lua scripts. Portable on Windows; no installation required.",
      "description_language": "bilingual",
      "description_zh": "电力通信协议解析 / 组帧 / 校验 / 收发一站式桌面工具：支持南网、国网、DL/T 698.45、DLT645-2007、DLMS/HDLC、新一代载波、HDC 1.0 等 15 种协议，覆盖单帧解析、批量分析、串口与蓝牙收发、虚拟表、通信时序图、测试方案与 Lua 脚本。Windows 免安装。",
      "full_name": "Liruitao1993/South_Network_Protocol_Analysis_Tool",
      "id": "scan-1209532995",
      "license": null,
      "observed_at": "2026-10-18T14:35:45.296185Z",
      "pushed_at": "2026-10-18T13:27:33Z",
      "readme_sha256": "83aae31880bd8a519b226c2099cc4964065f54ab929e94353682b48e58bac344",
      "readme_url": "https://github.com/Liruitao1993/South_Network_Protocol_Analysis_Tool/blob/9972888cf58d2e15db71cfa07a72da2ab6e8ea1b/README.md",
      "stars": 6,
      "targets": [
        "app",
        "protocol"
      ],
      "topics": [
        "dl-t698-45",
        "dlms",
        "dlt645",
        "electricity",
        "hdlc",
        "iec-62056",
        "power-line-communication",
        "protocol-analysis",
        "protocol-parser",
        "pyside6",
        "q-gdw",
        "smart-meter",
        "windows-desktop"
      ],
      "url": "https://github.com/Liruitao1993/South_Network_Protocol_Analysis_Tool",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Full reverse engineering of the UBox/UBIA smart-camera P4P protocol: custom block cipher, KCP+RDT video, ICE-style NAT traversal, and a standalone Python client. TUTK IOTC rebadge, documented end-to-end.",
      "description_language": "bilingual",
      "description_zh": "对 UBox/UBIA 智能摄像机 P4P 协议的完整逆向工程，涵盖自定义分组密码、KCP + RDT 视频、类似 ICE 的 NAT 穿透和独立 Python 客户端。该协议为 TUTK IOTC 的改名版本，提供端到端文档。",
      "full_name": "mahumadad/ubox-p4p",
      "id": "scan-1292666549",
      "license": "NOASSERTION",
      "observed_at": "2026-10-16T01:36:55.526160Z",
      "pushed_at": "2026-07-22T02:58:15Z",
      "readme_sha256": "9344958456e61513ec6f5e9de9a6acd290b363c1fcbebe0973e412c3104d58c0",
      "readme_url": "https://github.com/mahumadad/ubox-p4p/blob/main/README.md",
      "stars": 6,
      "targets": [
        "binary"
      ],
      "topics": [
        "frida",
        "hevc",
        "iotc",
        "ip-camera",
        "kcp",
        "nat-traversal",
        "p2p",
        "protocol-analysis",
        "reverse-engineering",
        "tutk"
      ],
      "url": "https://github.com/mahumadad/ubox-p4p",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "open-source AI-assisted USB protocol analysis tool and MCP server",
      "description_language": "bilingual",
      "description_zh": "开源 AI 辅助 USB 协议分析工具和 MCP 服务器。",
      "full_name": "bsu-tool/bsu-tool",
      "id": "scan-1221900723",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T01:36:56.060014Z",
      "pushed_at": "2026-08-27T19:16:29Z",
      "readme_sha256": "7cc3892a1bf3b608cd597c55edb098c825ae2745a7c46d19a2ae72186fd1144a",
      "readme_url": "https://github.com/bsu-tool/bsu-tool/blob/main/README.md",
      "stars": 5,
      "targets": [],
      "topics": [
        "capstone",
        "capstone-project",
        "claude",
        "linux",
        "mcp",
        "protocol-analysis",
        "python",
        "reverse-engineering",
        "usb"
      ],
      "url": "https://github.com/bsu-tool/bsu-tool",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "High-throughput network stream inspection for live traffic and PCAPs. Built in Rust with flow reassembly, protocol parsing, transforms, pattern matching, and a real-time Web UI.",
      "description_language": "bilingual",
      "description_zh": "面向实时流量和 PCAP 的高吞吐网络流检查工具。使用 Rust 构建，提供流重组、协议解析、变换、模式匹配和实时 Web 界面。",
      "full_name": "eogod/wireprism",
      "id": "scan-1074318530",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:55.919863Z",
      "pushed_at": "2026-07-19T18:12:18Z",
      "readme_sha256": "f4854f1c57cb8b02586ab668d8d7f9cc144560a64ebf96f97f2dad5c0606d6f5",
      "readme_url": "https://github.com/eogod/wireprism/blob/master/README.md",
      "stars": 5,
      "targets": [
        "website"
      ],
      "topics": [
        "cybersecurity",
        "dpi",
        "http3",
        "live-capture",
        "network-analysis",
        "network-forensics",
        "packet-capture",
        "packet-sniffer",
        "pcap",
        "protocol-analysis",
        "quic",
        "rust",
        "tls",
        "traffic-analysis"
      ],
      "url": "https://github.com/eogod/wireprism",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Ever want to control Razer Synapse profiles externally? Well now you can ",
      "description_language": "bilingual",
      "description_zh": "想在外部控制 Razer Synapse 配置？现在可以了",
      "full_name": "gabrielzv1233/SynapseCTRL",
      "id": "scan-1360906091",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T07:14:57.754794Z",
      "pushed_at": "2026-09-12T06:40:32Z",
      "readme_sha256": "721b0c785945d60a149c4cba943091ce4915798e638a11cc6643250061b186f6",
      "readme_url": "https://github.com/gabrielzv1233/SynapseCTRL/blob/main/README.md",
      "stars": 5,
      "targets": [
        "app",
        "website"
      ],
      "topics": [
        "automation",
        "cli",
        "device-control",
        "device-management",
        "electron",
        "http-api",
        "ipc",
        "profile-switching",
        "python",
        "python-library",
        "python-uv",
        "razer",
        "razer-synapse",
        "rest-api",
        "reverse-engineering",
        "sdk",
        "stdio",
        "uv",
        "windows"
      ],
      "url": "https://github.com/gabrielzv1233/SynapseCTRL",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse-engineer iPhone↔device protocols (BLE/WiFi) without a hardware sniffer. Captures decrypted HCI + WiFi via libimobiledevice and rvictl, decodes PTP-IP and Sony private opcodes.",
      "description_language": "bilingual",
      "description_zh": "无需硬件嗅探器即可逆向分析 iPhone 与设备之间的 BLE/Wi-Fi 协议。通过 libimobiledevice 和 rvictl 捕获解密后的 HCI 与 Wi-Fi 数据，并解码 PTP-IP 和 Sony 私有操作码。",
      "full_name": "profitpioneer/iphone-protocol-sniffer",
      "id": "scan-1228179651",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:55.715487Z",
      "pushed_at": "2026-05-03T18:05:07Z",
      "readme_sha256": "dc3c02c154473beaf1eecb40dcf07767c8f77e525829de76744741d72585349c",
      "readme_url": "https://github.com/profitpioneer/iphone-protocol-sniffer/blob/main/README.md",
      "stars": 5,
      "targets": [
        "app"
      ],
      "topics": [
        "bluetooth-low-energy",
        "claude-skill",
        "ios",
        "ios-diagnostics",
        "ios-internals",
        "libimobiledevice",
        "packet-capture",
        "packet-sniffer",
        "protocol-analysis",
        "ptp-ip",
        "reverse-engineering",
        "sony-camera",
        "wireshark"
      ],
      "url": "https://github.com/profitpioneer/iphone-protocol-sniffer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Flow-based PCAP analyzer with protocol-aware inspection, analysis, statistics, reusable indexes, and CLI.",
      "description_language": "bilingual",
      "description_zh": "基于流的 PCAP 分析器，提供协议感知检查、分析、统计、可复用索引和命令行界面。",
      "full_name": "AlexeyVasilev/PcapFlowLab",
      "id": "scan-1186989415",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T01:36:56.322408Z",
      "pushed_at": "2026-10-14T15:33:29Z",
      "readme_sha256": "fbd2a33172fbfcd836fd3e04b5ccb45858cf2ecdd48f9a93c3d8e9b730fb3779",
      "readme_url": "https://github.com/AlexeyVasilev/PcapFlowLab/blob/main/README.md",
      "stars": 4,
      "targets": [
        "app"
      ],
      "topics": [
        "cmake",
        "cpp",
        "desktop-app",
        "network-analysis",
        "packet-analysis",
        "pcap",
        "pcapng",
        "protocol-analysis",
        "qml",
        "qt",
        "tauri",
        "traffic-analysis"
      ],
      "url": "https://github.com/AlexeyVasilev/PcapFlowLab",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Rust CLI tool for analyzing IoT protocol traffic (CoAP, MQTT, RPL) and assessing post-quantum cryptographic readiness against NIST FIPS 203/204",
      "description_language": "bilingual",
      "description_zh": "用于分析 IoT 协议流量（CoAP、MQTT、RPL）的 Rust 命令行工具，并依据 NIST FIPS 203/204 评估后量子密码就绪情况。",
      "full_name": "digitalinnovator/pqc-iot-analyzer",
      "id": "scan-1225553075",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:56.390699Z",
      "pushed_at": "2026-04-30T11:59:03Z",
      "readme_sha256": "502a6334e0f3e551e5ceb82218392ce50ff0d5d9dde038ae53a507c0b0e0ca90",
      "readme_url": "https://github.com/digitalinnovator/pqc-iot-analyzer/blob/main/README.md",
      "stars": 4,
      "targets": [],
      "topics": [
        "coap",
        "cryptography",
        "dtls",
        "iot-security",
        "mqtt",
        "network-security",
        "nist",
        "post-quantum-cryptography",
        "pqc",
        "protocol-analysis",
        "rpl",
        "rust"
      ],
      "url": "https://github.com/digitalinnovator/pqc-iot-analyzer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Bidirectional forwarding between two serial ports for protocol analysis.",
      "description_language": "bilingual",
      "description_zh": "在两个串口之间相互转发数据，用于协议分析。",
      "full_name": "itldg/SerialPortForward",
      "id": "scan-734663001",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T01:36:56.154721Z",
      "pushed_at": "2025-09-04T02:54:54Z",
      "readme_sha256": "a1afd1a80c7b92810ee90a96be49425e808830cacf9fdd2f38529f9206025095",
      "readme_url": "https://github.com/itldg/SerialPortForward/blob/master/ReadMe.md",
      "stars": 4,
      "targets": [],
      "topics": [
        "protocol-analysis",
        "serial-port-forwarding",
        "serial-port-verification"
      ],
      "url": "https://github.com/itldg/SerialPortForward",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Security and reverse-engineering study of DEÜ DEYSİS attendance trust boundaries, with a sanitized Rust mock implementation.",
      "description_language": "bilingual",
      "description_zh": "对 DEÜ DEYSİS 考勤系统信任边界的安全与逆向工程研究，附带经过脱敏的 Rust 模拟实现。",
      "full_name": "rnaefe/deysis-trust-boundaries",
      "id": "scan-1371465388",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:56.242426Z",
      "pushed_at": "2026-09-19T11:09:28Z",
      "readme_sha256": "e257c6ecdb366bd49b0db7f9bd5646ac4effa0c8cc2b3fd73eb8de1955bd368b",
      "readme_url": "https://github.com/rnaefe/deysis-trust-boundaries/blob/main/README.md",
      "stars": 4,
      "targets": [],
      "topics": [
        "cryptography",
        "postgresql",
        "protocol-analysis",
        "reverse-engineering",
        "rust",
        "security",
        "systems-engineering",
        "threat-modeling",
        "tokio"
      ],
      "url": "https://github.com/rnaefe/deysis-trust-boundaries",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Open, vendor-neutral EMV® 3-D Secure protocol lab for researchers, payment engineers, and educators to visualize browser and app flows, compare spec versions, and inspect trust boundaries.",
      "description_language": "bilingual",
      "description_zh": "开放且不绑定厂商的 EMV® 3-D Secure 协议实验室，帮助研究人员、支付工程师和教育工作者可视化浏览器与应用流程、比较规范版本并检查信任边界。",
      "full_name": "cnpshield/3dslab",
      "id": "scan-1298396014",
      "license": "NOASSERTION",
      "observed_at": "2026-10-16T01:36:56.518237Z",
      "pushed_at": "2026-09-08T14:37:51Z",
      "readme_sha256": "412ac241d088c9428b05a13d511fbb4302d079cc27ba819428f0f154ab0feb36",
      "readme_url": "https://github.com/cnpshield/3dslab/blob/main/README.md",
      "stars": 3,
      "targets": [
        "app",
        "website"
      ],
      "topics": [
        "3d-secure-authentication",
        "3d-secure2",
        "authentication-flow",
        "authentication-ui",
        "emv-3ds",
        "emvco",
        "fintech",
        "fintech-tools",
        "payment-security",
        "payments",
        "protocol-analysis",
        "security-research-and-publications",
        "security-research-tool",
        "security-research-tooling",
        "security-research-tools",
        "security-researcher",
        "security-researchers",
        "webauthn"
      ],
      "url": "https://github.com/cnpshield/3dslab",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering of the Bluetooth protocol used by MOONDROP Space Travel TWS earbuds, based on GAIA V3 Protocol. Covers the full protocol stack, including BLE GATT services, ANC control, EQ settings, and firmware updates.",
      "description_language": "bilingual",
      "description_zh": "水月雨 MOONDROP Space Travel TWS 耳机蓝牙协议逆向分析，基于 GAIA V3 Protocol，分析 BLE GATT 服务、ANC 控制、EQ 设置、固件升级等完整协议栈。",
      "full_name": "pubglite55/SpaceTravel-Protocol",
      "id": "scan-1283925597",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:56.614184Z",
      "pushed_at": "2026-10-10T15:45:35Z",
      "readme_sha256": "25a4e1a30296def2b6c1868d67c5ad5279ccebddc74b0d702e24d8be51b68553",
      "readme_url": "https://github.com/pubglite55/SpaceTravel-Protocol/blob/main/README.md",
      "stars": 3,
      "targets": [],
      "topics": [
        "ble",
        "bluetooth",
        "earbuds",
        "gaia",
        "moondrop",
        "protocol-analysis",
        "reverse-engineering",
        "space-travel",
        "tws"
      ],
      "url": "https://github.com/pubglite55/SpaceTravel-Protocol",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "[Network Forensics Series]    A browser-based STP/RSTP/Rapid PVST+ analyzer for network engineers. Drop a PCAP file — get a structured event timeline, full FSM reconstruction, root cause analysis with causal chains, topology graph, and zero data leaving your machine.",
      "description_language": "bilingual",
      "description_zh": "【网络取证系列】面向网络工程师的浏览器端 STP/RSTP/Rapid PVST+ 分析器。导入 PCAP 文件，即可获得结构化事件时间线、完整有限状态机重建、带因果链的根因分析和拓扑图，数据完全保留在本机。",
      "full_name": "casablanque-code/stp-postmortem",
      "id": "scan-1261393780",
      "license": null,
      "observed_at": "2026-10-16T01:36:57.153850Z",
      "pushed_at": "2026-06-09T10:38:37Z",
      "readme_sha256": "ef86c3a53e26e3d180d59a9eacbc778287d333d38a677b3be34882bfe171a06f",
      "readme_url": "https://github.com/casablanque-code/stp-postmortem/blob/main/README.md",
      "stars": 2,
      "targets": [
        "website"
      ],
      "topics": [
        "network-analysis",
        "pcap",
        "pcap-analyzer",
        "protocol-analysis",
        "rapid-pvst",
        "rstp",
        "rust",
        "stp",
        "wasm"
      ],
      "url": "https://github.com/casablanque-code/stp-postmortem",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Profile aMule's External Connect (EC) protocol - a pass-through proxy with a live dashboard, per-caller attribution and session reports.",
      "description_language": "bilingual",
      "description_zh": "分析 aMule 的 External Connect（EC）协议：提供透传代理、实时仪表盘、按调用方归因和会话报告。",
      "full_name": "got3nks/amule-ec-profiler",
      "id": "scan-1317050596",
      "license": "GPL-2.0",
      "observed_at": "2026-10-16T01:36:57.512698Z",
      "pushed_at": "2026-07-30T21:26:52Z",
      "readme_sha256": "b622a87bdb8f04d0c3db0b61241b2a5918d16eccbd65f7d090c4ae562961f4c0",
      "readme_url": "https://github.com/got3nks/amule-ec-profiler/blob/main/README.md",
      "stars": 2,
      "targets": [],
      "topics": [
        "amule",
        "ed2k",
        "emule",
        "profiler",
        "protocol-analysis",
        "python",
        "reverse-proxy"
      ],
      "url": "https://github.com/got3nks/amule-ec-profiler",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering the Xiaomi Mi weight scale: BLE advertisement protocol, byte-level frame layouts, an offline decoder and each computed metric traced to its source.",
      "description_language": "bilingual",
      "description_zh": "逆向分析 Xiaomi Mi 体重秤，涵盖 BLE 广播协议、字节级帧布局和离线解码器，并将每个计算指标追溯到其来源。",
      "full_name": "ipanalytics/Xiaomi-Scale-Unlocked-Reverse-Engineering",
      "id": "scan-1383870846",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:57.185932Z",
      "pushed_at": "2026-09-23T17:20:48Z",
      "readme_sha256": "625f6208b4f3abc89cc2e011575d7e303b05aebf815e7790ebf75a37d3933495",
      "readme_url": "https://github.com/ipanalytics/Xiaomi-Scale-Unlocked-Reverse-Engineering/blob/main/README.md",
      "stars": 2,
      "targets": [],
      "topics": [
        "ble",
        "bluetooth-low-energy",
        "gatt",
        "health-data",
        "protocol-analysis",
        "python",
        "quantified-self",
        "reverse-engineering",
        "weight-scale",
        "xiaomi"
      ],
      "url": "https://github.com/ipanalytics/Xiaomi-Scale-Unlocked-Reverse-Engineering",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "S1 Signal Event Engine - Real-time S1AP protocol analysis and event processing for LTE networks",
      "description_language": "bilingual",
      "description_zh": "S1 Signal Event Engine：面向 LTE 网络的实时 S1AP 协议分析与事件处理。",
      "full_name": "melrosenetworks/S1-SEE",
      "id": "scan-1127891973",
      "license": "NOASSERTION",
      "observed_at": "2026-10-16T01:36:57.439373Z",
      "pushed_at": "2026-01-05T23:47:15Z",
      "readme_sha256": "2f359cc1b73ee9094e6a6ce224dabb89aaa0156dc348eb862ddda452a618297c",
      "readme_url": "https://github.com/melrosenetworks/S1-SEE/blob/main/README.md",
      "stars": 2,
      "targets": [
        "app"
      ],
      "topics": [
        "lte",
        "mobile",
        "protocol-analysis",
        "s1ap",
        "telecom"
      ],
      "url": "https://github.com/melrosenetworks/S1-SEE",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "",
      "description_language": "bilingual",
      "description_zh": "",
      "full_name": "NOEMETRA/Reverse-Observer",
      "id": "scan-1170980530",
      "license": null,
      "observed_at": "2026-10-16T01:36:57.866553Z",
      "pushed_at": "2026-10-08T19:27:09Z",
      "readme_sha256": "dc25b1312914fd859a49f32886ce9ab5752122f797acda6bf1cb9fd51bf3e16e",
      "readme_url": "https://github.com/NOEMETRA/Reverse-Observer/blob/master/README.md",
      "stars": 2,
      "targets": [],
      "topics": [
        "internet-measurement",
        "latency-measurement",
        "middleboxes",
        "network-measurement",
        "network-path-analysis",
        "network-security",
        "packet-analysis",
        "protocol-analysis",
        "python",
        "research",
        "research-prototype",
        "traffic-measurement"
      ],
      "url": "https://github.com/NOEMETRA/Reverse-Observer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "An advanced, security-focused network traffic analysis tool designed for system administrators, cybersecurity professionals, and network engineers. The xsukax PCAP Analyzer provides comprehensive insights into network behavior while maintaining strong privacy protections and offering advanced threat detection capabilities.",
      "description_language": "bilingual",
      "description_zh": "面向系统管理员、网络安全专业人员和网络工程师的高级网络流量安全分析工具。xsukax PCAP Analyzer 在提供强有力隐私保护的同时，深入分析网络行为，并提供高级威胁检测功能。",
      "full_name": "xsukax/xsukax-PCAP-Network-Traffic-Analyzer",
      "id": "scan-1055806955",
      "license": "GPL-3.0",
      "observed_at": "2026-10-16T01:36:56.973540Z",
      "pushed_at": "2025-09-12T20:59:33Z",
      "readme_sha256": "ec0c9c827b40d6903e35704f3937df3fd87993f1103067d25352e22bf47527ad",
      "readme_url": "https://github.com/xsukax/xsukax-PCAP-Network-Traffic-Analyzer/blob/main/README.md",
      "stars": 2,
      "targets": [],
      "topics": [
        "cybersecurity",
        "dns-analysis",
        "dns-security",
        "enterprise-security",
        "forensics",
        "network-analysis",
        "network-behavioral-analysis",
        "network-forensics",
        "network-monitoring",
        "network-security",
        "network-traffic",
        "network-visibility",
        "packet-analysis",
        "pcap-analyzer",
        "protocol-analysis",
        "scapy",
        "security-tools",
        "system-administration",
        "threat-detection",
        "wireshark"
      ],
      "url": "https://github.com/xsukax/xsukax-PCAP-Network-Traffic-Analyzer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Minimalist ICS/OT security research laboratory featuring programmable logic controllers (PLCs), ModbusTCP industrial protocol environments, and network simulation.",
      "description_language": "bilingual",
      "description_zh": "极简 ICS/OT 安全研究实验室，包含可编程逻辑控制器（PLC）、Modbus TCP 工业协议环境和网络仿真。",
      "full_name": "404saint/ics-ot-homelab",
      "id": "scan-1242516412",
      "license": null,
      "observed_at": "2026-10-16T01:36:57.873876Z",
      "pushed_at": "2026-05-18T15:53:28Z",
      "readme_sha256": "8ae8af85897095b9d1b44a84a801018280abb2ba9d49295702a54bb567c7acd4",
      "readme_url": "https://github.com/404saint/ics-ot-homelab/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "hmi",
        "homelab",
        "ics",
        "modbus-tcp",
        "network-security",
        "openplc",
        "ot",
        "penetration-testing",
        "protocol-analysis",
        "scada",
        "security-research"
      ],
      "url": "https://github.com/404saint/ics-ot-homelab",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Python-based packet sniffer with basic threat detection",
      "description_language": "bilingual",
      "description_zh": "基于 Python、具备基础威胁检测功能的数据包嗅探器。",
      "full_name": "Aarohipandey07/network-packet-analyzer",
      "id": "scan-1188039291",
      "license": null,
      "observed_at": "2026-10-16T01:36:59.274441Z",
      "pushed_at": "2026-03-21T15:08:01Z",
      "readme_sha256": "6e786f6dd63194de29706447e4986766e4694706a3b50b0cc9fba5eb54da5f1b",
      "readme_url": "https://github.com/Aarohipandey07/network-packet-analyzer/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "network-monitoring",
        "packet-sniffing",
        "protocol-analysis",
        "threat-detection"
      ],
      "url": "https://github.com/Aarohipandey07/network-packet-analyzer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Browserless reCAPTCHA v2 solver research — protocol analysis, node-vm BotGuard harness, ONNX tile classifier",
      "description_language": "bilingual",
      "description_zh": "无需浏览器的 reCAPTCHA v2 求解器研究，涵盖协议分析、node-vm BotGuard 测试框架和 ONNX 图块分类器。",
      "full_name": "arisune1337/recaptcha-re",
      "id": "scan-1420820401",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:59.975172Z",
      "pushed_at": "2026-10-15T14:14:38Z",
      "readme_sha256": "ac29e749c6e78f6f38c6583f33c5ce4d99b386cb02c8d81877afcb6a96094e9b",
      "readme_url": "https://github.com/arisune1337/recaptcha-re/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "botguard",
        "nodejs",
        "onnx",
        "protocol-analysis",
        "python",
        "recaptcha",
        "reverse-engineering"
      ],
      "url": "https://github.com/arisune1337/recaptcha-re",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Network packet analyzer with protocol dissection and credential extraction using Clojure",
      "description_language": "bilingual",
      "description_zh": "使用 Clojure 的网络数据包分析器，支持协议解析和凭据提取。",
      "full_name": "bad-antics/nullsec-sniffer",
      "id": "scan-1139509542",
      "license": null,
      "observed_at": "2026-10-16T01:36:58.634136Z",
      "pushed_at": "2026-02-27T20:16:52Z",
      "readme_sha256": "6ec0d9dfbeef39825c4b61c2584bc1ada350b9e3328a782dc3b986e21ef0e030",
      "readme_url": "https://github.com/bad-antics/nullsec-sniffer/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "clojure",
        "credential-extraction",
        "network-analysis",
        "nullsec",
        "packet-sniffer",
        "protocol-analysis",
        "security"
      ],
      "url": "https://github.com/bad-antics/nullsec-sniffer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "ZeroHack is a TypeScript-powered tool that uses AI for advanced network packet analysis, protocol anomaly detection, and cybersecurity threat assessment.",
      "description_language": "bilingual",
      "description_zh": "ZeroHack 是基于 TypeScript 的工具，使用 AI 进行高级网络数据包分析、协议异常检测和网络安全威胁评估。",
      "full_name": "deekshith-b48/ZeroHack",
      "id": "scan-1017413678",
      "license": null,
      "observed_at": "2026-10-16T01:36:58.923276Z",
      "pushed_at": "2026-04-04T17:16:35Z",
      "readme_sha256": "741e4b02fbef35b90746469c52ddb0bef8e587effb33b994011a85f4d8106439",
      "readme_url": "https://github.com/deekshith-b48/ZeroHack/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "ai",
        "anomaly-detection",
        "artificial-intelligence",
        "blockchain",
        "cybersecurity",
        "language-detection",
        "machine-learning",
        "network-monitoring",
        "network-security",
        "packet-analysis",
        "protocol-analysis",
        "smart-contracts",
        "solidity-contracts",
        "steganography",
        "threat-detection",
        "typescript"
      ],
      "url": "https://github.com/deekshith-b48/ZeroHack",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Hannes Software — local-first desktop tools for protocol diagnostics, music workflows, and clinic operations.",
      "description_language": "bilingual",
      "description_zh": "Hannes Software：本地优先的桌面工具，面向协议诊断、音乐工作流和诊所运营。",
      "full_name": "hannes-wan/hannes-wan",
      "id": "scan-1299870185",
      "license": null,
      "observed_at": "2026-10-16T01:36:58.096393Z",
      "pushed_at": "2026-07-19T19:43:25Z",
      "readme_sha256": "865fde4610a2b63a054ed028c7d4d2f7f368198c3759349fbe1ee5200eb74b78",
      "readme_url": "https://github.com/hannes-wan/hannes-wan/blob/main/README.md",
      "stars": 1,
      "targets": [
        "app"
      ],
      "topics": [
        "community-edition",
        "dental-software",
        "desktop-software",
        "linux",
        "local-first",
        "music-practice-app",
        "music-software",
        "network-diagnostics",
        "pcap-analyzer",
        "protocol-analysis",
        "rtsp-stream-tester",
        "usb-analyzer",
        "windows"
      ],
      "url": "https://github.com/hannes-wan/hannes-wan",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "An alternative configurator for the J16 GPS tracker: reverse engineering a USB port protocol with no public documentation.",
      "description_language": "bilingual",
      "description_zh": "J16 GPS 跟踪器的替代配置工具，通过逆向分析没有公开文档的 USB 端口协议实现。",
      "full_name": "iambot1193/j16-protocolo",
      "id": "scan-1366657992",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:58.479949Z",
      "pushed_at": "2026-10-04T01:38:47Z",
      "readme_sha256": "b9e53b20838b4c1fca2464771e417563714feb9dabaa1347454a82d9f7f4ec1d",
      "readme_url": "https://github.com/iambot1193/j16-protocolo/blob/master/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "embedded",
        "gps-tracker",
        "protocol-analysis",
        "python",
        "reverse-engineering",
        "tkinter"
      ],
      "url": "https://github.com/iambot1193/j16-protocolo",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering and runtime analysis of the PackClient modular RAT framework: Launcher and Core internals, protocol reconstruction, tooling, and detection engineering.",
      "description_language": "bilingual",
      "description_zh": "对 PackClient 模块化远程访问木马框架的逆向工程和运行时分析，涵盖 Launcher 与 Core 内部机制、协议重建、工具及检测工程。",
      "full_name": "ivanimmanuel-dev/PackClient",
      "id": "scan-1359897132",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:59.932167Z",
      "pushed_at": "2026-09-11T08:13:41Z",
      "readme_sha256": "b48ad0db9c755e013b0150eb5b8d3021f014802858afc66c0a74e19dd1456ca0",
      "readme_url": "https://github.com/ivanimmanuel-dev/PackClient/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "cybersecurity",
        "dfir",
        "malware",
        "malware-analysis",
        "malware-research",
        "network-protocol",
        "packclient",
        "protocol-analysis",
        "rat-malware",
        "reverse-engineering",
        "sigma-rules",
        "suricata",
        "suricata-rules",
        "ta4922",
        "threat-intelligence",
        "threat-research",
        "windows-malware",
        "wireshark",
        "wireshark-dissector",
        "yara-rules"
      ],
      "url": "https://github.com/ivanimmanuel-dev/PackClient",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "CryptoAudit ML analyzes network traffic (PCAP files or live capture) to identify weak, broken, or missing encryption — then attempts to crack it. It combines a 5-model ML ensemble for traffic classification with 15+ decryption methods, persistent key/credential harvesting, and optional Ollama AI integration for traffic analysis.",
      "description_language": "bilingual",
      "description_zh": "CryptoAudit ML 分析网络流量（PCAP 文件或实时抓包），识别薄弱、已失效或缺失的加密，并尝试破解。结合用于流量分类的五模型机器学习集成、15 种以上解密方法、持久化密钥与凭据收集，以及可选的 Ollama AI 流量分析集成。",
      "full_name": "jamesccupps/CryptoAudit",
      "id": "scan-1211512479",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:00.261890Z",
      "pushed_at": "2026-04-15T17:43:44Z",
      "readme_sha256": "3dedbe91f4e909af467c6f1b968cfba49455a318037ac581016f8390f97ae009",
      "readme_url": "https://github.com/jamesccupps/CryptoAudit/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "credential-harvesting",
        "cybersecurity",
        "encryption",
        "machine-learning",
        "network-security",
        "open-source",
        "packet-analysis",
        "pcap",
        "pentesting",
        "protocol-analysis",
        "python",
        "traffic-analysis"
      ],
      "url": "https://github.com/jamesccupps/CryptoAudit",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "SIP Protocol Analyzer & Security Auditor - Deep packet inspection for VoIP/SIP traffic with RFC 3261 compliance checking, security vulnerability detection, and call flow analysis",
      "description_language": "bilingual",
      "description_zh": "SIP 协议分析与安全审计工具，对 VoIP/SIP 流量执行深度包检测，提供 RFC 3261 合规检查、安全漏洞检测和通话流程分析。",
      "full_name": "kambidi1973/sip-sentinel",
      "id": "scan-1197207177",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:57.951490Z",
      "pushed_at": "2026-03-31T12:59:15Z",
      "readme_sha256": "2174595b2bef59badbbebf964840747d6a5ea6a9126f563b6a44807f99a1e52e",
      "readme_url": "https://github.com/kambidi1973/sip-sentinel/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "deep-packet-inspection",
        "protocol-analysis",
        "python",
        "rfc-3261",
        "security",
        "sip",
        "voip"
      ],
      "url": "https://github.com/kambidi1973/sip-sentinel",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "TeleAgent model reverse proxy -> local OpenAI-compatible endpoint (research)",
      "description_language": "bilingual",
      "description_zh": "TeleAgent 模型反向代理，提供本地兼容 OpenAI 的端点（研究用途）。",
      "full_name": "liao96312/teleagent-proxy",
      "id": "scan-1366825330",
      "license": "MIT",
      "observed_at": "2026-10-16T10:47:49.259580Z",
      "pushed_at": "2026-10-13T04:40:04Z",
      "readme_sha256": "8c3f9aa8ecd62ce34811f151ecac9f2a68b8e5aebceeee97849931b74e2f2e5f",
      "readme_url": "https://github.com/liao96312/teleagent-proxy/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "api-proxy",
        "go",
        "hmac-sha256",
        "llm",
        "llm-proxy",
        "mcp",
        "nodejs",
        "openai-compatible",
        "pi-coding-agent",
        "protocol-analysis",
        "python",
        "reverse-engineering",
        "teleagent",
        "windows"
      ],
      "url": "https://github.com/liao96312/teleagent-proxy",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Wireshark dissector plugin for analyzing and decoding network protocols, useful for cybersecurity, packet inspection, and reverse engineering.",
      "description_language": "bilingual",
      "description_zh": "用于分析和解码网络协议的 Wireshark 解析插件，适用于网络安全、数据包检查和逆向工程。",
      "full_name": "mar0ls/wireshark_plugin",
      "id": "scan-935634902",
      "license": null,
      "observed_at": "2026-10-16T01:36:59.386700Z",
      "pushed_at": "2026-07-11T20:06:46Z",
      "readme_sha256": "635e98f0eb4b932770f1a3febb37c03871a11a2aa18324e5ae4844b4869fbccb",
      "readme_url": "https://github.com/mar0ls/wireshark_plugin/blob/main/readme.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "analysis",
        "cybersecurity",
        "lua",
        "network-analysis",
        "packet",
        "packet-analysis",
        "protocol-analysis",
        "wireshark",
        "wireshark-dissector",
        "wireshark-dissector-plugin",
        "wireshark-plugin"
      ],
      "url": "https://github.com/mar0ls/wireshark_plugin",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Small Audio Post-Processor",
      "description_language": "bilingual",
      "description_zh": "小型音频后处理器。",
      "full_name": "Maxnor899/SAP2",
      "id": "scan-1135541503",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:58.088911Z",
      "pushed_at": "2026-01-23T21:45:43Z",
      "readme_sha256": "564d90ba99212fea6c06e5ae8ad973667f9d1bb8fbfe7f96b649f0bf9757a9ef",
      "readme_url": "https://github.com/Maxnor899/SAP2/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "analysis-framework",
        "audio-encoding",
        "audio-forensics",
        "falsifiability",
        "forensic-analysis",
        "forensics-tools",
        "information-theory",
        "interpretation-free",
        "methodology",
        "protocol-analysis",
        "protocol-driven",
        "research-tool",
        "reverse-engineering-tools",
        "watermarking",
        "white-hat"
      ],
      "url": "https://github.com/Maxnor899/SAP2",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "ML classifier that predicts security flaws in cryptographic protocol designs using structural features like nonce usage, mutual authentication, and key freshness checks, trained and tested on real protocols including Needham-Schroeder, WPA2, TLS, and Kerberos",
      "description_language": "bilingual",
      "description_zh": "机器学习分类器，利用随机数使用、双向认证和密钥新鲜度检查等结构特征预测密码协议设计中的安全缺陷，并在 Needham-Schroeder、WPA2、TLS 和 Kerberos 等真实协议上训练和测试。",
      "full_name": "nabiha-kinda-codes/Crypto-Protocol-Classifier",
      "id": "scan-1401488166",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:58.425080Z",
      "pushed_at": "2026-10-02T10:20:34Z",
      "readme_sha256": "9b79d5c2176cf7ee465b185fbe0d505fff2d3e4f581a16a8b144f692cfb413e6",
      "readme_url": "https://github.com/nabiha-kinda-codes/Crypto-Protocol-Classifier/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "cryptography",
        "cybersecurity",
        "logistic-regression",
        "machine-learning",
        "network-security",
        "protocol-analysis",
        "python",
        "random-forest-classifier",
        "scikit-learn",
        "security-protocols"
      ],
      "url": "https://github.com/nabiha-kinda-codes/Crypto-Protocol-Classifier",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering of the JBL PartyBox 100/200/300 wireless TWS link: protocol frames, Linux pairing recipe, and a Python fake-speaker server (play/pause, volume, stereo channels).",
      "description_language": "bilingual",
      "description_zh": "JBL PartyBox 100/200/300 无线 TWS 链路的逆向工程：协议帧、Linux 配对方法，以及 Python 模拟音箱服务端（播放/暂停、音量和立体声声道）。",
      "full_name": "Nicooow/jbl-partybox-tws-re",
      "id": "scan-1416607374",
      "license": null,
      "observed_at": "2026-10-16T10:47:49.006436Z",
      "pushed_at": "2026-10-13T12:54:48Z",
      "readme_sha256": "3e44d90930192b98122fd34d6bcb89a6f17c782a01ccae31a7c779378c844b59",
      "readme_url": "https://github.com/Nicooow/jbl-partybox-tws-re/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "bluetooth",
        "bluezspeaker",
        "jbl",
        "linux",
        "partybox",
        "protocol-analysis",
        "reverse-engineering",
        "tws"
      ],
      "url": "https://github.com/Nicooow/jbl-partybox-tws-re",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A Rust framework for headless Minecraft Java Edition clients — bots, testing, automation, and protocol analysis",
      "description_language": "bilingual",
      "description_zh": "面向无界面 Minecraft Java 版客户端的 Rust 框架，用于机器人、测试、自动化和协议分析。",
      "full_name": "oxidized-mc/client-headless",
      "id": "scan-1193081942",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:59.315410Z",
      "pushed_at": "2026-04-10T20:31:49Z",
      "readme_sha256": "8edcb1571ecaf681936a636f8eba9c895562922e097f0f4fdcfa2584372d705d",
      "readme_url": "https://github.com/oxidized-mc/client-headless/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "automation",
        "bot-framework",
        "headless-client",
        "minecraft",
        "minecraft-bot",
        "minecraft-java",
        "minecraft-protocol",
        "protocol-analysis",
        "rust"
      ],
      "url": "https://github.com/oxidized-mc/client-headless",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Modular OT/ICS protocol fuzzer with plugin support, PCAP replay, and anomaly detection",
      "description_language": "bilingual",
      "description_zh": "模块化 OT/ICS 协议模糊测试器，支持插件、PCAP 重放和异常检测。",
      "full_name": "ridpath/protofire",
      "id": "scan-1105122809",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:59.620890Z",
      "pushed_at": "2025-12-02T05:37:49Z",
      "readme_sha256": "da0578f1c609cb1e5c63be189c0a50ea41f493c0938e0506ec33ec7dbb6d4cee",
      "readme_url": "https://github.com/ridpath/protofire/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "bugbounty-tool",
        "dnp3",
        "fuzzer",
        "ics",
        "modbus",
        "ot",
        "protocol-analysis",
        "protocol-fuzzing",
        "redteam-tools",
        "security-research"
      ],
      "url": "https://github.com/ridpath/protofire",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse engineering of the L&S Emotion Control 2.4 GHz lighting protocol from a KZQ-8YKC-K remote (PIC16F1503 + TI CC2500). Full RF and packet spec recovered by SPI bus sniffing, verified over the air with a HackRF",
      "description_language": "bilingual",
      "description_zh": "从 KZQ-8YKC-K 遥控器（PIC16F1503 + TI CC2500）逆向分析 L&S Emotion Control 2.4 GHz 灯光协议。通过 SPI 总线嗅探恢复完整射频和数据包规范，并使用 HackRF 进行空口验证。",
      "full_name": "SergeyZh/emotion-control-re",
      "id": "scan-1312977078",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T01:36:59.071107Z",
      "pushed_at": "2026-07-27T19:52:42Z",
      "readme_sha256": "41e0c27246c39700a743a8f7244bd16eb98961a534c43b35aa51035f6e3b0a60",
      "readme_url": "https://github.com/SergeyZh/emotion-control-re/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "cc2500",
        "hackrf",
        "logic-analyzer",
        "msk",
        "pic16f1503",
        "protocol-analysis",
        "reverse-engineering",
        "rf",
        "sdr",
        "smart-lighting"
      ],
      "url": "https://github.com/SergeyZh/emotion-control-re",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "AI-driven DisplayPort/eDP Protocol Analyzer using MCP (Model Context Protocol)",
      "description_language": "bilingual",
      "description_zh": "使用 MCP（Model Context Protocol）的 AI 驱动 DisplayPort/eDP 协议分析器。",
      "full_name": "thrinathnalajala5095/edp-analyzer-mcp",
      "id": "scan-1219266100",
      "license": null,
      "observed_at": "2026-10-16T01:36:59.051187Z",
      "pushed_at": "2026-04-23T18:00:00Z",
      "readme_sha256": "df4716770d3368889e7da94bc89355f3c149eee7bce828d63afdfea7bfd0de7f",
      "readme_url": "https://github.com/thrinathnalajala5095/edp-analyzer-mcp/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "ai-tools",
        "displayport",
        "edp",
        "hardware-debugging",
        "mcp",
        "protocol-analysis"
      ],
      "url": "https://github.com/thrinathnalajala5095/edp-analyzer-mcp",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Systematically extracts and integrates the core designs of external systems through the ORRI methodology, with genuine continuous reinforcement capabilities.",
      "description_language": "bilingual",
      "description_zh": "通过 ORRI 方法论系统化提取并融合外部系统的核心设计，具备持续强化能力。",
      "full_name": "Timothy12379/reverse-engineering-fusion",
      "id": "scan-1203768152",
      "license": null,
      "observed_at": "2026-10-16T01:36:58.257220Z",
      "pushed_at": "2026-04-27T15:52:24Z",
      "readme_sha256": "d104e1df2e5721d9a2c43e4900992b8011dae5c7de502d960ee0a5fb9f2dd6e2",
      "readme_url": "https://github.com/Timothy12379/reverse-engineering-fusion/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "automation",
        "continuous-enhancement",
        "openclaw-skill",
        "orri-methodology",
        "protocol-analysis",
        "reverse-engineering",
        "system-integration",
        "typescript"
      ],
      "url": "https://github.com/Timothy12379/reverse-engineering-fusion",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "scopeBridge",
      "description_language": "bilingual",
      "description_zh": "scopeBridge 项目。",
      "full_name": "UlrikHjort/scopeBridge",
      "id": "scan-1391353328",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:58.896366Z",
      "pushed_at": "2026-10-05T16:34:52Z",
      "readme_sha256": "8c8737a05e25fdf27b8681beb97d29dc1707f39f700085132c9f0399326b1be3",
      "readme_url": "https://github.com/UlrikHjort/scopeBridge/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "oscilloscope",
        "protocol-analysis",
        "rigol-ds1202z-e",
        "rigol-oscilloscopes"
      ],
      "url": "https://github.com/UlrikHjort/scopeBridge",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "ProtoAudit is a research-grade toolkit for protocol behavior analysis, cryptographic metadata inspection, and randomness anomaly detection.  It helps to identify protocol misuse patterns such as challenge reuse, retry loops, deterministic randomness, and handshake inconsistencies.  Designed for protocol research, security analysis, and CTF tasks.",
      "description_language": "bilingual",
      "description_zh": "ProtoAudit 是研究级工具包，用于协议行为分析、密码元数据检查和随机性异常检测。帮助识别挑战值复用、重试循环、确定性随机数和握手不一致等协议误用模式，面向协议研究、安全分析和 CTF 任务。",
      "full_name": "Utmins/protoaudit",
      "id": "scan-1182002711",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:59.452265Z",
      "pushed_at": "2026-03-15T07:45:31Z",
      "readme_sha256": "722a2d87fc65df8ea006f6e0b29bee383ebf2547f68642a91125305882b5372f",
      "readme_url": "https://github.com/Utmins/protoaudit/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "cryptographic-analysis",
        "ctf",
        "ctf-tools",
        "cybersecurity",
        "defensive-security",
        "network-forensics",
        "network-protocols",
        "protocol-analysis",
        "protocol-reverse-engineering",
        "protocol-testing",
        "python",
        "randomness-analysis",
        "security-research",
        "security-tooling",
        "traffic-analysis"
      ],
      "url": "https://github.com/Utmins/protoaudit",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Practical Wireshark network protocol analysis project demonstrating HTTP, DNS, TCP, ARP, and HTTP credential capture with real packet captures, security analysis, and professional documentation.",
      "description_language": "bilingual",
      "description_zh": "实用 Wireshark 网络协议分析项目，通过真实抓包、安全分析和专业文档展示 HTTP、DNS、TCP、ARP，以及 HTTP 凭据捕获。",
      "full_name": "venu-3754/wireshark-network-protocol-analysis",
      "id": "scan-1288832788",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:58.398948Z",
      "pushed_at": "2026-07-04T07:49:21Z",
      "readme_sha256": "e40a526002b53c0a84fad11b8e609b9dbf785c9cea6b2652e19ad6dc37aa422d",
      "readme_url": "https://github.com/venu-3754/wireshark-network-protocol-analysis/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "arp",
        "blue-team",
        "cybersecurity",
        "dns",
        "http",
        "http-credentials",
        "incident-response",
        "network-analysis",
        "network-forensics",
        "network-security",
        "packet-analysis",
        "protocol-analysis",
        "reports",
        "security-analysis",
        "soc",
        "soc-analyst",
        "tcp",
        "traffic-analysis",
        "wireshark"
      ],
      "url": "https://github.com/venu-3754/wireshark-network-protocol-analysis",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Complete reverse-engineering analysis of AtomCode CLI (v4.25.3), based on static analysis of the Rust binary and runtime behavior verification. Covers 65+ subsystems including authentication, risk controls, AI communication, and the agent engine.",
      "description_language": "bilingual",
      "description_zh": "AtomCode CLI（v4.25.3）逆向工程完整分析报告，基于 Rust 二进制静态分析与运行时行为验证，覆盖认证、风控、AI 通信、Agent 引擎等 65 个以上子系统。",
      "full_name": "vibe-coding-labs/AtomCodeReverseEngineering",
      "id": "scan-1266521689",
      "license": "Apache-2.0",
      "observed_at": "2026-10-16T01:37:00.289329Z",
      "pushed_at": "2026-08-02T11:02:38Z",
      "readme_sha256": "0dc2e352abdf7ff6ce25f4a36bf82b73f1f5c44488e8b470a9bf7623ca950c2b",
      "readme_url": "https://github.com/vibe-coding-labs/AtomCodeReverseEngineering/blob/main/README.md",
      "stars": 1,
      "targets": [
        "binary"
      ],
      "topics": [
        "binary-analysis",
        "documentation",
        "protocol-analysis",
        "reverse-engineering",
        "rust",
        "security-analysis",
        "vitepress"
      ],
      "url": "https://github.com/vibe-coding-labs/AtomCodeReverseEngineering",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "AI-powered serial port detective: sniff, decode, and annotate UART traffic.",
      "description_language": "bilingual",
      "description_zh": "AI 串口侦探：嗅探、解码和注释 UART 流量。",
      "full_name": "wdfdsyhb/SerialLens",
      "id": "scan-1389278418",
      "license": "MIT",
      "observed_at": "2026-10-16T01:36:59.727183Z",
      "pushed_at": "2026-10-15T00:35:16Z",
      "readme_sha256": "2be9d116bec836595f2790f6f357d32a5665c92c6f9dee5489dc5e511c52f778",
      "readme_url": "https://github.com/wdfdsyhb/SerialLens/blob/main/README.md",
      "stars": 1,
      "targets": [],
      "topics": [
        "cli",
        "embedded",
        "iot",
        "llm",
        "protocol-analysis",
        "python",
        "reverse-engineering",
        "serial-monitor",
        "serial-port",
        "uart"
      ],
      "url": "https://github.com/wdfdsyhb/SerialLens",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Packet capture and network traffic analysis using Wireshark in an isolated cybersecurity lab.",
      "description_language": "bilingual",
      "description_zh": "在隔离的网络安全实验环境中使用 Wireshark 进行抓包与网络流量分析。",
      "full_name": "ashwinp17/wireshark-packet-analysis",
      "id": "scan-1303632685",
      "license": null,
      "observed_at": "2026-10-16T01:37:01.467985Z",
      "pushed_at": "2026-07-17T06:16:34Z",
      "readme_sha256": "af10787546f179c74656e903de4dbfb026fc9bbaf85995e274ae23eac039fd66",
      "readme_url": "https://github.com/ashwinp17/wireshark-packet-analysis/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "cybersecurity",
        "ftp",
        "home-lab",
        "icmp",
        "network-security",
        "network-traffic",
        "packet-analysis",
        "protocol-analysis",
        "wireshark"
      ],
      "url": "https://github.com/ashwinp17/wireshark-packet-analysis",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Hands on packet analysis skills and protocol awareness.",
      "description_language": "bilingual",
      "description_zh": "数据包分析实操技能与协议认知。",
      "full_name": "ChitturiGanesh1803/CS5_Capture-and-Analyze-Network-Traffic-Using-Wireshark",
      "id": "scan-1117385268",
      "license": null,
      "observed_at": "2026-10-16T01:37:01.277996Z",
      "pushed_at": "2025-12-20T09:07:23Z",
      "readme_sha256": "86bbbed66bf3c4625b6d4d85abe88c0670e621c18362c3d368f38d145e419675",
      "readme_url": "https://github.com/ChitturiGanesh1803/CS5_Capture-and-Analyze-Network-Traffic-Using-Wireshark/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "filtering",
        "network-troubleshooting",
        "packet-capture",
        "protocol-analysis"
      ],
      "url": "https://github.com/ChitturiGanesh1803/CS5_Capture-and-Analyze-Network-Traffic-Using-Wireshark",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Web app showing live arrivals, departures and security queue times for Sweden's 10 Swedavia airports. Python/FastAPI backend with caching and 43 pytest tests, vanilla JS + Bootstrap frontend.",
      "description_language": "bilingual",
      "description_zh": "展示瑞典 10 座 Swedavia 机场实时到达、出发和安检排队时间的网页应用。使用带缓存及 43 个 pytest 测试的 Python/FastAPI 后端，以及原生 JavaScript + Bootstrap 前端。",
      "full_name": "chrisjedwards/flight-check",
      "id": "scan-1393536781",
      "license": null,
      "observed_at": "2026-10-16T10:48:12.022439Z",
      "pushed_at": "2026-10-11T20:41:12Z",
      "readme_sha256": "20df432f8b1d79652343f2d7eb08871efb2766e90e0b707538b745cc76f27504",
      "readme_url": "https://github.com/chrisjedwards/flight-check/blob/main/README.md",
      "stars": 0,
      "targets": [
        "app",
        "website"
      ],
      "topics": [
        "bootstrap",
        "fastapi",
        "flight-tracker",
        "httpx",
        "javascript",
        "pytest",
        "python",
        "rest-api",
        "reverse-engineering",
        "swedavia",
        "swedavia-api"
      ],
      "url": "https://github.com/chrisjedwards/flight-check",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reverse-engineer unknown TCP/UDP protocols: record traffic, infer framing/fields/checksums, verify against the live target, then fuzz deterministically with stateful prefixes. Evidence in SQLite, portable exports.",
      "description_language": "bilingual",
      "description_zh": "逆向分析未知 TCP/UDP 协议：录制流量、推断帧划分/字段/校验和、针对运行中的目标验证，再使用有状态前缀进行确定性模糊测试。证据存储于 SQLite，支持便携导出。",
      "full_name": "cy3erm/ProtoForge",
      "id": "scan-1345120708",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:00.981436Z",
      "pushed_at": "2026-08-24T15:40:15Z",
      "readme_sha256": "10744737a30198e17251a08025cf3da1f74ba019d5c7b0d3aa8106ebc48359f6",
      "readme_url": "https://github.com/cy3erm/ProtoForge/blob/main/README.md",
      "stars": 0,
      "targets": [
        "binary"
      ],
      "topics": [
        "binary-protocol",
        "cli-tool",
        "fuzz-testing",
        "fuzzing",
        "network-security",
        "offensive-security",
        "packet-analysis",
        "pcap",
        "penetration-testing",
        "protocol-analysis",
        "protocol-reverse-engineering",
        "python",
        "red-team",
        "reverse-engineering",
        "security-tools",
        "tcp",
        "traffic-analysis",
        "udp",
        "vulnerability-research"
      ],
      "url": "https://github.com/cy3erm/ProtoForge",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Automated B2C account registration and verification bot for CFS Brands using Python, temporary email integration, and proxy support.",
      "description_language": "bilingual",
      "description_zh": "用于 CFS Brands 的 B2C 账户自动注册和验证机器人，使用 Python，集成临时邮箱并支持代理。",
      "full_name": "dev-nayef/CFSBrands-B2C-Authentication-Flow-PoC",
      "id": "scan-1402153673",
      "license": null,
      "observed_at": "2026-10-16T01:37:00.937104Z",
      "pushed_at": "2026-10-04T15:09:27Z",
      "readme_sha256": "94b054f1e299b1ad9e45911ccdaedcccaa224206206ed339e3cad6a4c8a3c696",
      "readme_url": "https://github.com/dev-nayef/CFSBrands-B2C-Authentication-Flow-PoC/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "api",
        "authentication",
        "azure-b2c",
        "ciam",
        "csrf",
        "http",
        "http-requests",
        "identity",
        "mfa",
        "microsoft-b2c",
        "otp",
        "protocol-analysis",
        "python",
        "requests",
        "requests-python",
        "security-research",
        "session-management",
        "web-security"
      ],
      "url": "https://github.com/dev-nayef/CFSBrands-B2C-Authentication-Flow-PoC",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Technical writeups",
      "description_language": "bilingual",
      "description_zh": "技术研究文章。",
      "full_name": "gRiverOS/writing",
      "id": "scan-1366476767",
      "license": null,
      "observed_at": "2026-10-16T01:37:01.626307Z",
      "pushed_at": "2026-09-11T17:17:23Z",
      "readme_sha256": "c5bd54b7908d2e706637b9f88b7c96b82f9843d8da4893fe9ae4a92571e0ab63",
      "readme_url": "https://github.com/gRiverOS/writing/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "engineering",
        "protocol-analysis",
        "reverse-engineering",
        "technical-writing"
      ],
      "url": "https://github.com/gRiverOS/writing",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Security foundations lab covering governance frameworks, forensic investigation, infrastructure auditing, and protocol analysis.",
      "description_language": "bilingual",
      "description_zh": "安全基础实验，涵盖治理框架、取证调查、基础设施审计和协议分析。",
      "full_name": "Hassaballah-Adam/Foundations_Lab_Final",
      "id": "scan-1165929689",
      "license": null,
      "observed_at": "2026-10-16T01:37:00.819186Z",
      "pushed_at": "2026-05-06T22:03:06Z",
      "readme_sha256": "b0dd59ac486e040b223efa87ba5098a1b381a9cc746056b7badd389c34489257",
      "readme_url": "https://github.com/Hassaballah-Adam/Foundations_Lab_Final/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "bash",
        "cybersecurity",
        "forensics",
        "infrastructure",
        "linux",
        "nist",
        "portfolio",
        "protocol-analysis",
        "security-governance"
      ],
      "url": "https://github.com/Hassaballah-Adam/Foundations_Lab_Final",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A lightweight Python network traffic monitoring application designed for the CodeAlpha Cybersecurity Internship. The script interfaces with network adapters to capture real-time data packets, decodes Layer 3 and Layer 4 protocol headers (IP, TCP, UDP, ICMP), and extracts raw data payloads for traffic analysis.",
      "description_language": "bilingual",
      "description_zh": "为 CodeAlpha 网络安全实习设计的轻量级 Python 网络流量监控应用。脚本连接网络适配器，捕获实时数据包，解码第 3 层和第 4 层协议头（IP、TCP、UDP、ICMP），并提取原始载荷用于流量分析。",
      "full_name": "mishraprashakha74-debug/CodeAlpha_Networksniffer-basic-",
      "id": "scan-1274435478",
      "license": null,
      "observed_at": "2026-10-16T01:37:01.783499Z",
      "pushed_at": "2026-06-19T14:19:26Z",
      "readme_sha256": "db0b980f2e170a33dd96e02b33001e46256453dcd9da0c3d98220fc74507aedf",
      "readme_url": "https://github.com/mishraprashakha74-debug/CodeAlpha_Networksniffer-basic-/blob/main/README.md",
      "stars": 0,
      "targets": [
        "app"
      ],
      "topics": [
        "network-analysis",
        "packet-capture",
        "protocol-analysis",
        "raw-sockets",
        "scapy-python",
        "traffic-monitoring"
      ],
      "url": "https://github.com/mishraprashakha74-debug/CodeAlpha_Networksniffer-basic-",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Open-source Go library and CLI for lossless Modbus capture files, time-series recording, conversion and replay-ready data.",
      "description_language": "bilingual",
      "description_zh": "开源 Go 库和命令行工具，用于无损 Modbus 抓取文件、时间序列记录、格式转换，以及生成可供重放的数据。",
      "full_name": "otfabric/go-modbus-capture",
      "id": "scan-1419611789",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:00.578105Z",
      "pushed_at": "2026-10-15T07:15:28Z",
      "readme_sha256": "598823e09ddbdf0298c272ba580aadcf2e4ac2d58202e6929c807eb50b17f32a",
      "readme_url": "https://github.com/otfabric/go-modbus-capture/blob/main/README.md",
      "stars": 0,
      "targets": [
        "binary"
      ],
      "topics": [
        "binary-format",
        "data-logging",
        "data-serialization",
        "edge-computing",
        "golang",
        "golang-library",
        "industrial-automation",
        "industrial-iot",
        "modbus",
        "modbus-capture",
        "modbus-recording",
        "modbus-replay",
        "modbus-rtu",
        "modbus-tcp",
        "operational-technology",
        "otfabric",
        "protocol-analysis",
        "protocol-capture",
        "scada",
        "time-series"
      ],
      "url": "https://github.com/otfabric/go-modbus-capture",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "A beginner-friendly Python Packet Sniffer built using Scapy. Captures and analyzes live TCP, UDP, DNS, ICMP, and ARP packets with protocol parsing, statistics, and packet logging.",
      "description_language": "bilingual",
      "description_zh": "基于 Scapy 构建、适合初学者的 Python 数据包嗅探器。实时捕获和分析 TCP、UDP、DNS、ICMP 和 ARP 数据包，提供协议解析、统计和数据包日志。",
      "full_name": "prashanth0301/python-packet-sniffer",
      "id": "scan-1305117576",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:01.417095Z",
      "pushed_at": "2026-07-18T18:02:07Z",
      "readme_sha256": "84d5d3c36c5ace8968d8d962aa091b1548d5e87f4afeda88f02dd28b74c7341b",
      "readme_url": "https://github.com/prashanth0301/python-packet-sniffer/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "beginner-project",
        "cybersecurity",
        "network-security",
        "networking",
        "packet-analysis",
        "packet-sniffer",
        "protocol-analysis",
        "python",
        "python-project",
        "scapy"
      ],
      "url": "https://github.com/prashanth0301/python-packet-sniffer",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Frontend accessibility reconstruction benchmark for replaying CDP AX trees, DOM mutations, node identity, focus, roles, and accessible names across historical browser state.",
      "description_language": "bilingual",
      "description_zh": "前端无障碍重建基准，用于在历史浏览器状态中重放 CDP 无障碍树、DOM 变更、节点身份、焦点、角色和无障碍名称。",
      "full_name": "prosoftdev999/cdp-accessibility-replay",
      "id": "scan-1417806791",
      "license": null,
      "observed_at": "2026-10-16T10:48:13.959369Z",
      "pushed_at": "2026-10-13T19:19:27Z",
      "readme_sha256": "3b0cfdd27dcb25284ccb6ab7ac374c93967b7bfec67bbdc0219cf6b32b1c4fe2",
      "readme_url": "https://github.com/prosoftdev999/cdp-accessibility-replay/blob/main/README.md",
      "stars": 0,
      "targets": [
        "website"
      ],
      "topics": [
        "accessibility",
        "accessibility-tree",
        "aria",
        "browser",
        "browser-automation",
        "cdp",
        "chrome-devtools-protocol",
        "docker",
        "dom",
        "event-replay",
        "frontend",
        "javascript",
        "python",
        "reverse-engineering",
        "state-reconstruction",
        "testing",
        "web-accessibility",
        "web-platform"
      ],
      "url": "https://github.com/prosoftdev999/cdp-accessibility-replay",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Browser-based bit slicing and alignment tool for hex data, with bit visualization, pattern matching, and re-sliced output.",
      "description_language": "bilingual",
      "description_zh": "浏览器端十六进制数据位切分与对齐工具，提供位可视化、模式匹配和重新切分输出。",
      "full_name": "sure-wang/bit-slice",
      "id": "scan-1253092835",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:01.592346Z",
      "pushed_at": "2026-06-07T11:17:33Z",
      "readme_sha256": "fa0444d6960212cf2b1dd246bdcb3edc746c828e0d3dcf285e97eae6c1860d31",
      "readme_url": "https://github.com/sure-wang/bit-slice/blob/main/README.md",
      "stars": 0,
      "targets": [
        "binary",
        "website"
      ],
      "topics": [
        "binary-analysis",
        "bit-manipulation",
        "bit-slice",
        "bitslice",
        "embedded",
        "fpga",
        "hardware-tools",
        "hex-to-binary",
        "protocol-analysis",
        "verilog",
        "visualization"
      ],
      "url": "https://github.com/sure-wang/bit-slice",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Self-hosted BitTorrent tracker-protocol simulator and research toolkit with a modern web UI.",
      "description_language": "bilingual",
      "description_zh": "自托管 BitTorrent Tracker 协议模拟器与研究工具包，提供现代 Web 界面。",
      "full_name": "viperadnan-git/sudoratio",
      "id": "scan-1230558222",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:01.786357Z",
      "pushed_at": "2026-05-17T18:16:23Z",
      "readme_sha256": "5cf7006c7461f90bcf8526f3543ab2932e4afe14bd9b55d92d82f76e9637a78c",
      "readme_url": "https://github.com/viperadnan-git/sudoratio/blob/main/README.md",
      "stars": 0,
      "targets": [
        "website"
      ],
      "topics": [
        "bittorrent",
        "educational",
        "protocol",
        "protocol-analysis",
        "react",
        "research",
        "rust",
        "security-research",
        "self-hosted",
        "simulation",
        "tracker"
      ],
      "url": "https://github.com/viperadnan-git/sudoratio",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Reconnaissance for unknown Modbus RTU devices: slave discovery, register mapping, evidence-based probing.",
      "description_language": "bilingual",
      "description_zh": "未知 Modbus RTU 设备侦察，涵盖从站发现、寄存器映射及基于证据的探测。",
      "full_name": "wdfdsyhb/modbus-lens",
      "id": "scan-1390006190",
      "license": "MIT",
      "observed_at": "2026-10-16T01:37:00.735218Z",
      "pushed_at": "2026-10-14T14:28:43Z",
      "readme_sha256": "3c102baa33a2e6228cdd8acca8e4d59c68966b186057564ce9b96902dcc4f10f",
      "readme_url": "https://github.com/wdfdsyhb/modbus-lens/blob/main/README.md",
      "stars": 0,
      "targets": [],
      "topics": [
        "cli",
        "embedded",
        "industrial",
        "iot",
        "modbus",
        "protocol-analysis",
        "python",
        "reconnaissance",
        "rtu",
        "uart"
      ],
      "url": "https://github.com/wdfdsyhb/modbus-lens",
      "verification": "automated-readme-scan"
    },
    {
      "category": "protocol-analysis",
      "description_en": "Master your network traffic. A powerful Windows desktop tool for crafting, transmitting and monitoring custom Ethernet packets",
      "description_language": "bilingual",
      "description_zh": "掌控网络流量。强大的 Windows 桌面工具，用于构造、发送和监控自定义以太网数据包。",
      "full_name": "YTS-HUB/YTS-ETH-Packet-Generator",
      "id": "scan-1251085358",
      "license": null,
      "observed_at": "2026-10-16T01:37:01.123293Z",
      "pushed_at": "2026-09-29T11:50:11Z",
      "readme_sha256": "56b3f2b9241a90403cb357f9c4834d0b2728496fffefe1150a731700e9c49ea3",
      "readme_url": "https://github.com/YTS-HUB/YTS-ETH-Packet-Generator/blob/main/README.md",
      "stars": 0,
      "targets": [
        "app"
      ],
      "topics": [
        "eth",
        "network-engineering",
        "network-testing-traffic-generator",
        "packet-crafting",
        "packet-generator-ethernet-networking",
        "protocol-analysis",
        "tcp-udp-ipv4-ipv6",
        "windows"
      ],
      "url": "https://github.com/YTS-HUB/YTS-ETH-Packet-Generator",
      "verification": "automated-readme-scan"
    }
  ],
  "snapshot": "2026-10-20",
  "verification": "automated-readme-scan",
  "version": 1
}