Npcap logo

Npcap Insecure

Use this command to install Npcap:
winget install --id=Insecure.Npcap -e

Nmap Project's Windows packet capture and transmission library

Npcap is a packet capture and transmission library for Microsoft Windows developed by the Nmap Project. It provides a robust solution for capturing and sending raw network traffic on Windows systems, enabling seamless integration with tools like Wireshark and Nmap.

Key Features:

  • Loopback Packet Capture and Injection: Supports capturing and injecting loopback traffic using the WFP framework.
  • Cross-Platform Compatibility: Works across all supported Windows versions (Windows 7 to Windows 11) and architectures (x86, x64, ARM).
  • Libpcap API Integration: Implements the industry-standard Libpcap library for cross-platform compatibility with Linux and macOS tools.
  • Enhanced Security: Includes optional Administrator-only access, UAC prompts, and signed drivers for secure operation.
  • Raw Wireless Capture Support: Enables capturing raw 802.11 traffic with radiotap headers, fully supported by Wireshark.

Audience & Benefit:

Ideal for developers, cybersecurity professionals, and network administrators who rely on packet analysis tools like Wireshark or Nmap. By leveraging the Libpcap API, Npcap allows these tools to run natively on Windows, ensuring consistent functionality across platforms while maintaining high performance and security standards. It is installable via winget, making it easy to integrate into existing workflows.

Versions
0.86
Website