From cybersec-toolkit
Crafts, sends, sniffs, and dissects network packets with Scapy for protocol analysis, reconnaissance, and anomaly detection in authorized security testing.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersec-toolkit:analyzing-network-packets-with-scapyThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Scapy is a Python packet manipulation library that enables crafting, sending, sniffing, and dissecting network packets at granular protocol layers. This skill covers using Scapy for security-relevant tasks including TCP/UDP/ICMP packet crafting, pcap file analysis, protocol field extraction, SYN scan implementation, DNS query analysis, and detecting anomalous traffic patterns such as unusually ...
Scapy is a Python packet manipulation library that enables crafting, sending, sniffing, and dissecting network packets at granular protocol layers. This skill covers using Scapy for security-relevant tasks including TCP/UDP/ICMP packet crafting, pcap file analysis, protocol field extraction, SYN scan implementation, DNS query analysis, and detecting anomalous traffic patterns such as unusually fragmented packets or malformed headers.
scapy library installed (pip install scapy)rdpcap() for offline analysisJSON report containing packet statistics, protocol distribution, top source/destination IPs, detected anomalies (SYN floods, DNS tunneling indicators, fragmentation attacks), and per-flow summaries.
npx claudepluginhub 26zl/cybersec-toolkit --plugin cybersec-toolkitCrafts, sends, sniffs, and dissects network packets with Scapy for protocol analysis, reconnaissance, and anomaly detection in authorized security testing.
Crafts, sends, sniffs, and dissects network packets with Scapy: parse pcaps, extract protocols, detect SYN floods/DNS exfil, compute stats for authorized security testing.
Uses Scapy to construct, send, sniff, and parse network packets for protocol analysis, reconnaissance, pcap analysis, SYN flood detection, and anomaly spotting in authorized security tests.