#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
skylot/jadxCommand-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…
abrignoni/ileappParses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…
pwndbg/pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made Easy
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
mvt-project/mvtForensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…
angr/angrA powerful and user-friendly binary analysis platform!
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
sneakynachos/cve-2026-84118-who-labeled-the-crit-as-a-highProof-of-concept for CVE-2026-84118, a SpiderMonkey GC use-after-free leading to out-of-bounds read/write and potential code execution. Includes…
pubglite55/oppo-ghostlockOPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation
barghest-ngo/meshEncrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…
kevoreilly/capev2Malware Configuration And Payload Extraction
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
the-tcpdump-group/tcpdumpthe TCPdump network dissector
r3nzsec/irflow-timelineDFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt,…
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
