#1File recovery, disk recovery, deleted data restoration, and forensic carving tools.
Kitploit recommended
hameda2/zydraMulti-threaded password recovery tool for RAR, ZIP, PDF, and Linux shadow files using dictionary and brute-force methods with configurable character…
aburgh/disk-arbitratorA Mac OS X forensic utility which manages file system mounting in support of forensic procedures.
cea-sec/usbsasTool and framework for securely reading untrusted USB mass storage devices.
rowingdude/analyzemftanalyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
libyal/libfsntfsLibrary and tools to access the Windows New Technology File System (NTFS)
mahlet-inc/hobbitsA multi-platform GUI for bit-based analysis, processing, and visualization
rockwellshah/filekeyOffline, open-source web app for passkey-based file encryption and sharing. AES-256-GCM/HPKE, no cloud, no accounts; encrypt to recipients with…
quantika14/guasap-whatsapp-foresincs-toolWhatsApp Forensic Tool
kvasirsecurity/kvasirKvasir: Penetration Test Data Management
libyal/libvmdkLibrary and tools to access the VMware Virtual Disk (VMDK) format
ang13t/dronextractDigital forensics suite for DJI drones that parses telemetry files, extracts hidden data via steganography, visualizes flight paths, and detects…
libyal/libvhdiLibrary and tools to access the Virtual Hard Disk (VHD) image format
threatlabz/toolsTools developed by the Zscaler ThreatLabz Threat Intelligence team
korczis/foremostFile carving utility that recovers deleted files from disk images and raw drives by matching headers, footers, and internal structures via…
jschicht/rawcopyCommandline low level file extractor for NTFS
gregwar/fatcatFAT filesystems explore, extract, repair, and forensic tool
