#1File recovery, disk recovery, deleted data restoration, and forensic carving tools.
Kitploit recommended
nowsecure/android-forensicsOpen source Android Forensics app and framework
coremaze/me2-writeupReconstructing a Dead USB Protocol: A Handheld's Secrets Unlocked by a Hot Knife, a multi-disciplinary journey to reviving a forgotten USB interface
libyal/libvmdkLibrary and tools to access the VMware Virtual Disk (VMDK) format
jas502n/010-editor-templateBinary template repository for 010 Editor, providing .bt scripts for parsing executables, filesystem images, registry hives, and forensic artifacts…
x-cmd-build/xzPortable binary distribution of xz-utils 5.8.3 with CVE-2024-3094 verification. Provides static builds for Linux, macOS, and Windows for compression…
dmtrkovalenko/ffsF*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry
jessek/hashdeepCross-platform hashing toolset for computing message digests (MD5, SHA-1, SHA-256, Tiger, Whirlpool) with recursive directory traversal and file…
ang13t/dronextractDigital forensics suite for DJI drones that parses telemetry files, extracts hidden data via steganography, visualizes flight paths, and detects…
jschicht/rawcopyCommandline low level file extractor for NTFS
joedefen/dwipeTool to securely and efficiently wipe devices and partiitions for Linux
d4vinci/exif-grabberA python tool that will extract exif data from picture with two methods
pablolec/recoverpyInteractively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
vikwin/pcapfex'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files
packetlss/android-locdumpandroid location service cache dumper
will127534/mk4001mtd-usb-bridgeRP2040 firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB mass storage device, implementing the full SDIO-ATA protocol stack…
radkawar/aws-firmware-dumpAcquires the EBS disks of an AWS AMI you can launch, streaming snapshots via EBS direct APIs to a private S3 bucket with sha256 manifests and…
threatlabz/toolsTools developed by the Zscaler ThreatLabz Threat Intelligence team
