Tuesday, November 8, 2011

Xplico version 0.7.0. - Download and Video Tutorial

Xplico is an open source Network Forensic Analysis Tool (NFAT) that allows for data extraction from traffic captures. It supports extraction of mail from POP, IMAP, and SMTP, can extract VoIP streams, etc. This is the version that has a GUI allowing you to view photos, texts and videos contained in MMS messages.


  • Protocols supported: HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, IPv6, …;
  • Port Independent Protocol Identification (PIPI) for each application protocol;
  • Multithreading;
  • Output data and information in SQLite database or Mysql database and/or files;
  • At each data reassembled by Xplico is associated a XML file that uniquely identifies the flows and the pcap containing the data reassembled;
  • Realtime elaboration (depends on the number of flows, the types of protocols and by the performance of computer -RAM, CPU, HD access time, …-);
  • TCP reassembly with ACK verification for any packet or soft ACK verification;
  • Reverse DNS lookup from DNS packages contained in the inputs files (pcap), not from external DNS server;
  • No size limit on data entry or the number of files entrance (the only limit is HD size);
  • IPv4 and IPv6 support;
  • Modularity. Each Xplico component is modular. The input interface, the protocol decoder (Dissector) and the output interface (dispatcher) are all modules;
  • The ability to easily create any kind of dispatcher with which to organize the data extracted in the most appropriate and useful to you;


user: admin, xplico
password: xplico, xplico

Source code

Download here. md5: 0d27690e2fd8516be2441393831f4026
Installation instructions are in the INSTALL file and in the Wiki.

Ubuntu 11.10 32bit

Download here. md5: b2ce163343a0eed819d2585c28b751a0

Ubuntu Server 11.10 64bit

Download here. md5: 479ada9915938a9aa988df5eddd70adc

Video Tutorial By bricowifi
Part 1

Part 2


Post a Comment