nfex
A tool for extracting files from the network in real-time or post-capture from an offline tcpdump pcap savefile.
forensicBlue Team
ToolforensicblueLinuxBlackArchPlatforms: Linux · Last verified September 6, 2026
A tool for extracting files from the network in real-time or post-capture from an offline tcpdump pcap savefile.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on BlackArch with `pacman -S nfex` (or add the BlackArch repository to an existing Arch Linux install). See the official BlackArch tool listing linked above for details.
