BruteShark Changelog

What's new in BruteShark 1.2.5

Oct 1, 2021
  • This version contains few improvements and features:
  • First, the network map had upgraded by adding additional fields that enables to get insights about domain users and the amount of data transferred from each point in the network:
  • Sent data - The amount of data (bytes) sent by the host.
  • Received data - The amount of data received (bytes) by the host.
  • Domains - the domains that the host is a member of.
  • Domain users - domain users that logged into the host.
  • This fields will also appear at the "BruteShark Network Nodes Data.json" file that holds all the nodes details.
  • Secondly, the BruteSharkDesktop installer file was upgraded:
  • Allow to upgrade existing version of BruteSharkDesktop without the need to manually remove the old version.
  • Set the license also at the installer prompt.

New in BruteShark 1.2.4 (Sep 15, 2021)

  • This version contains an implantation of new network model.
  • That data structure role is to store the current network state including all the extracted items.
  • Apart from the fact that this refactor improves the readability and structure of the code, thanks to this data structure different display components can share information while maintaining unconsciousness from each other (e.g the Network Map user control can now access DNS records if there are any).
  • Main Features:
  • Network Map user control now have a control describes the node details: open ports, DNS records, sessions count.
  • The exported files including a new file named "BruteShark Network Nodes Data.json" that holds all the nodes details (following issue #77).
  • Better performance.

New in BruteShark 1.2.3 (Sep 2, 2021)

  • Add "Clear Results" button (following #95).
  • Bug fix - although a certain network interface was selected at the user interface, another network card was selected behind the scenes (following to #99, #100).
  • Upgrade to SharpPcap 6.0.0 (better performance among other improvements).

New in BruteShark 1.2.2 (May 2, 2021)

  • Fix a bug that cause Kerberos hashes over TCP hashes was not extracted due to lack of proper parsing of "Record mark" section parsing (See issue: #90 )
  • Implement Kerberos TGS-REP Etype 17 and 18 hashes parsing include Hashcat export.
  • Upgrade all projects NuGets.
  • Add a link to download BruteSharkCli for windows.

New in BruteShark 1.2.0 (Mar 9, 2021)

  • Both versions of BruteShark is now capable of live capturing and analyzing network data directly from a network interface!
  • This version featuring all required features for operating the live capture option easily and smoothly:
  • List all available network interfaces names.
  • Enable configure BPF filters.
  • Enable using promiscuous mode.

New in BruteShark 1.1.6 (Jan 26, 2021)

  • Add exporting of extracted files to BruteSharkCli.
  • Fix a bug while exporting network map to JSON.

New in BruteShark 1.1.5 (Jan 23, 2021)

  • BruteSharkCli now has two modes: single command and shell mode. The single command mode works by geting all the relevant parameters for the processing and then printing the results to stdout or files. The shell mode allows to perform each step individually.

New in BruteShark 1.1.4 (Jan 9, 2021)

  • BruteShark can now handle pcapng files (as well as the old pcap file format)

New in BruteShark 1.1.2 (Dec 1, 2020)

  • New hash type extraction - Kerberos AS-REP etype 23 (including Hashcat integration - mode: 18200)
  • BruteSharkCli can now export the network map to JSON format for analysis with external tools such as Neo4j.
  • File extraction module support for PDF and ZIP file formats.
  • BruteSharkDesktop GUI improvements - Indication for files that failed the analysis.

New in BruteShark 1.1.1 (Sep 15, 2020)

  • BruteShark is now capable of reconstruct also all UDP streams.
  • Configuration buttons where added featuring enabling / disabling reconstruction of TCP and / or UDP sessions