Malware extraction in Python with Scapy

Extracting malicious files from Network captures

Photo by Piotr Arnoldes from Pexels

Network captures are common among security events. Malware present in any network communication can be easily extracted with tools like Wireshark. If you have many pcap files, how would you extract them all? Let’s walk through a script to extract PE Files from pcaps using Python and Scapy.