Overview
The PiRogue is a Raspberry Pi-based network router that captures and analyzes network traffic in real time. It is the foundation of the PiRogue Tool Suite, and it can also run on a regular computer or a server.
You connect the device you want to examine to the PiRogue, and the PiRogue shows you what that device talks to. It is used for:
- Network traffic analysis: deep packet inspection of the traffic to spot suspicious patterns and potential threats
- Mobile device forensics: the consensual extraction and analysis of the data of a mobile device, such as messages and application data, to reveal user activity or signs of compromise
- Mobile app analysis: recording what an app sends, even when the traffic is encrypted
Where to start
| I want to… | Go to |
|---|---|
| Try a PiRogue in a few commands | Quick start |
| Understand how it works | Architecture |
| Install one, on a Raspberry Pi, a computer or a VPN server | Installation |
| Read the results of the analysis | Dashboard |
| Follow a hands-on tutorial | Guides |
| Build the hardware, or dig into the internals | Advanced |