Digital Forensics

moond4rk/hackbrowserdata

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

mvt-project/mvt

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

pwndbg/pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

angr/angr

A powerful and user-friendly binary analysis platform!

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

horsicq/detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

wireshark/wireshark

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

dnspyex/dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

cheat-engine/cheat-engine

Cheat Engine. A development environment focused on modding

stamparm/maltrail

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

a-poc/blueteam-tools

Tools and Techniques for Blue Team / Incident Response

ntop/ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

kevoreilly/capev2

Malware Configuration And Payload Extraction

olafhartong/sysmon-modular

A repository of sysmon configuration modules

hugsy/gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux